Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa
File: x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa (raw, json)
Hash identifier: yT8d2gXKGvxY+mNyVVRyOEcwtuRvGm2cQ5O/Z8NAq5I=
Subject key identifier: C7:BC:FE:C9:E7:2F:DA:4E:BF:2D:47:95:C6:19:61:B1:D9:C9:E3:28
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CAEC954D8F8D999F5E93D31470D184F63
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa
Signing time: Thu 28 Dec 2023 04:57:59 +0000
ROA not before: Thu 28 Dec 2023 04:57:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400904
IP address blocks: 2a06:de01:501::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ae:c9:54:d8:f8:d9:99:f5:e9:3d:31:47:0d:18:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 28 04:57:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7bcfec9e72fda4ebf2d4795c61961b1d9c9e328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4f:f5:df:8c:6b:9f:2a:99:83:19:7d:eb:7a:
ea:1e:58:b8:13:f7:b2:c5:f9:13:a3:b8:de:c8:ce:
63:50:12:e5:06:ba:77:2a:1b:d3:01:24:59:c4:70:
3e:15:b8:26:f7:96:2a:08:94:b0:de:98:6c:96:cf:
42:12:0f:92:28:fe:64:d0:e7:20:86:0d:f6:f5:dd:
57:2c:4b:a9:2d:ba:39:25:3c:c2:8f:65:4d:1e:07:
6a:32:83:34:90:86:10:11:71:c4:55:f4:ed:17:63:
69:46:e9:44:c2:c3:98:a9:11:b3:45:9f:c7:2e:fa:
c8:65:42:2c:1d:f8:8e:95:e9:9a:19:29:69:ba:c1:
a3:09:82:7e:c7:e3:2b:b6:f9:2d:f8:9a:4a:8c:91:
32:b3:73:1f:6a:48:c0:18:44:9e:df:6a:c7:83:09:
87:cc:d0:9c:c7:d3:cf:f3:d3:f6:30:9a:11:6e:64:
8d:c2:d8:30:1e:1c:4d:29:33:ff:01:8d:58:1e:2c:
e6:48:1d:11:ca:45:a0:23:9d:62:9c:1e:af:94:2d:
97:d7:35:94:d4:57:19:a6:12:e0:ef:68:a0:cf:2c:
2a:ca:45:db:db:b5:5e:3e:56:bb:a1:f6:b5:a4:95:
cf:c3:6a:20:46:11:4e:ab:fe:d0:f8:90:4c:e8:b5:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:FE:C9:E7:2F:DA:4E:BF:2D:47:95:C6:19:61:B1:D9:C9:E3:28
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x7z-yecv2k6_LUeVxhlhsdnJ4yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:501::/48
Signature Algorithm: sha256WithRSAEncryption
58:a6:6e:e2:3a:4c:15:87:b8:74:b8:87:36:0e:1a:40:c0:00:
0d:e5:56:92:75:af:af:98:f7:fc:4d:30:86:9a:43:f2:3a:c2:
55:0c:53:95:f4:d9:56:4f:81:28:26:89:b3:3d:8a:9c:2f:ea:
a0:b8:84:da:e4:78:3e:0b:1c:3e:55:43:aa:0f:eb:69:1e:20:
63:c3:06:29:3a:09:8d:7f:2b:3f:49:a8:f5:3d:29:35:22:f4:
b5:fd:60:c0:e6:5a:44:9d:1f:79:b9:f6:57:eb:bb:f0:46:3d:
3d:a1:2c:7c:5f:a5:c3:7c:1a:77:20:ce:3b:4e:7f:4d:ff:cd:
f7:48:73:ca:5b:8f:eb:29:23:17:a0:86:30:30:35:89:17:6a:
c9:c5:bb:4c:fd:d4:18:cc:3d:5e:9e:2c:dd:f4:ea:4a:f5:8e:
15:e4:68:08:2a:67:31:b9:0f:d2:05:ce:ab:7d:d1:53:81:f5:
4b:57:8f:7b:66:f1:85:ff:04:06:75:4b:fb:a4:8d:21:a2:e8:
53:49:69:c4:a5:bc:e3:6c:b5:a0:bd:87:0b:28:ff:92:df:68:
b4:33:62:87:54:53:d5:54:5a:87:52:c0:1e:21:4c:09:17:b6:
95:e5:52:49:1d:78:ee:39:c4:40:0b:bb:aa:58:63:56:86:bd:
a5:3e:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org