Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wayXvrefHa4u1R4hpyW5t4T57Tg.roa
File: wayXvrefHa4u1R4hpyW5t4T57Tg.roa (raw, json)
Hash identifier: JhL1GCnnaE4CTldwzEG8elSTRW66Q+9x3pUVZjG7s5c=
Subject key identifier: C1:AC:97:BE:B7:9F:1D:AE:2E:D5:1E:21:A7:25:B9:B7:84:F9:ED:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7F214DFA617FA16F87EEC65BEEA39
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wayXvrefHa4u1R4hpyW5t4T57Tg.roa
Signing time: Mon 02 Jan 2023 05:15:26 +0000
ROA not before: Mon 02 Jan 2023 05:15:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210761
IP address blocks: 2a0e:b107:19c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:f2:14:df:a6:17:fa:16:f8:7e:ec:65:be:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ac97beb79f1dae2ed51e21a725b9b784f9ed38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f9:87:1d:2a:99:69:34:dd:18:fa:5d:dd:b1:
2d:19:b3:76:96:9e:f9:82:40:fa:2c:4a:a2:75:53:
ce:ac:74:a5:0d:15:cb:61:a4:2d:a6:80:b9:ad:e3:
04:46:8c:43:77:3d:77:bf:f4:e2:ef:f2:91:4b:36:
a0:bb:20:f3:8a:51:7b:aa:86:78:23:14:98:0f:2a:
3f:07:06:78:d5:2f:ae:e3:43:f0:58:88:ad:bf:5e:
3e:00:fc:08:99:98:85:c1:c3:ea:57:2f:21:75:62:
2f:21:7e:3e:b4:28:39:28:37:e2:1b:2c:9f:0c:6a:
d0:99:4a:38:02:a0:00:25:47:b3:e7:cd:b9:14:e8:
28:c8:0a:9b:2b:3f:8e:b6:e0:9e:3f:30:0a:b3:31:
eb:e3:03:37:2a:98:b3:97:2e:99:e7:be:fc:e2:e2:
eb:98:39:87:21:07:fc:cc:5e:23:4e:ba:ec:99:ed:
3b:9e:22:6b:39:77:41:4e:29:cc:8c:69:89:a1:ef:
08:e9:82:22:68:54:b2:70:bb:50:93:ce:7d:3e:f9:
ba:53:41:b0:7a:f5:0c:40:74:61:b7:7c:2e:1e:ce:
14:76:dd:d9:52:ee:3e:d7:6a:34:5e:bd:dc:e9:07:
ce:d9:93:6c:ae:24:34:ea:3a:f6:19:00:11:84:46:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AC:97:BE:B7:9F:1D:AE:2E:D5:1E:21:A7:25:B9:B7:84:F9:ED:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wayXvrefHa4u1R4hpyW5t4T57Tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:19c7::/48
Signature Algorithm: sha256WithRSAEncryption
8a:bf:f0:7c:c5:7b:a8:d7:44:de:6f:83:6e:fd:bc:f1:b5:ed:
84:f1:e9:74:a0:96:4b:e3:9f:11:e3:f0:4d:b1:1c:4f:bd:ed:
aa:40:2d:a7:ca:51:57:d1:1c:58:0a:d5:16:8a:30:a8:26:64:
b6:09:96:b7:71:e2:70:d2:73:fe:7b:dc:68:bc:36:91:b7:59:
91:11:b0:4a:12:01:42:5a:89:43:5d:df:42:8a:1b:41:90:13:
f3:f4:74:69:5b:3b:ea:a4:e9:28:47:b2:b2:ea:f3:ce:7e:35:
62:23:57:ae:84:bd:52:0a:1c:5b:22:9e:09:55:2a:06:cd:40:
d3:1b:5b:92:29:68:0f:d8:5c:71:ee:93:2f:6a:a4:04:1f:b4:
6f:19:76:3f:28:b7:2f:56:27:35:c2:0d:df:ea:ac:fd:05:5e:
6f:37:c1:c2:b0:92:86:94:8d:38:b4:67:17:7d:c4:76:14:53:
db:55:cf:38:8c:3a:a9:cc:1a:cd:bc:7e:4a:8f:bd:d7:54:64:
d3:6b:8f:9e:d0:23:de:f5:28:bb:f9:cc:d5:75:57:28:a8:23:
8e:da:6c:d6:25:6e:09:42:6a:1d:47:fa:43:e9:2a:1a:a6:a9:
9c:39:e6:a5:c9:54:fd:97:08:1b:50:7a:8a:6e:20:00:67:f3:
4e:f5:19:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:34 2024 by rpki-client on console-ams.rpki-client.org