Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xXWAX9W8C3Kw-2o6P-gppDVX9SY.roa
File: xXWAX9W8C3Kw-2o6P-gppDVX9SY.roa (raw, json)
Hash identifier: es/hjOr6I/wzDLCraTCc4aL0Sz8Uvkmk+0AMGQOH8c4=
Subject key identifier: C5:75:80:5F:D5:BC:0B:72:B0:FB:6A:3A:3F:E8:29:A4:35:57:F5:26
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E795513097FDD375FA876C4D5EC937
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xXWAX9W8C3Kw-2o6P-gppDVX9SY.roa
Signing time: Mon 02 Jan 2023 05:15:03 +0000
ROA not before: Mon 02 Jan 2023 05:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141445
IP address blocks: 2a0e:b107:12c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Jan 2023 10:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:95:51:30:97:fd:d3:75:fa:87:6c:4d:5e:c9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c575805fd5bc0b72b0fb6a3a3fe829a43557f526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:7c:66:84:19:22:2e:cf:69:99:e0:48:bd:
30:1a:9f:63:5c:56:8a:99:13:68:4c:b0:ac:4f:f8:
51:b3:c0:31:09:e4:f3:91:f0:37:67:4d:1f:d2:80:
ca:88:83:65:41:75:3c:15:ff:12:fe:be:0c:d6:b0:
c9:61:dd:f1:9f:e4:c8:c1:e4:3e:90:e3:63:7d:d8:
52:9a:1e:89:84:9d:bd:5a:a8:42:c2:5d:ae:7a:32:
11:97:d2:42:c1:a1:95:52:b2:b8:f3:0a:f5:9a:6a:
12:cb:a7:f2:bb:a3:f0:1b:b4:c2:97:e1:92:cf:ca:
31:0a:f1:fe:30:84:4a:5f:3f:2d:f5:98:53:49:bc:
45:30:60:3e:33:63:78:dd:7a:db:08:0d:00:64:65:
4f:17:d7:fd:de:2e:78:63:7b:10:e5:fb:c1:de:06:
58:e5:0b:2d:18:ca:a5:8c:a5:6a:2f:b2:94:11:51:
5a:fa:c5:6c:dc:3d:12:74:ad:f1:a3:f1:72:4c:09:
58:0a:f8:88:0c:76:16:c4:2d:53:21:bf:6b:99:14:
23:72:f3:78:9e:2e:57:ec:f3:62:eb:80:b7:80:ff:
8f:c4:44:0e:89:e4:ff:28:49:4f:8c:a4:0a:2a:68:
d6:84:10:89:52:e2:6a:d6:d9:b7:ee:96:55:4e:74:
db:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:75:80:5F:D5:BC:0B:72:B0:FB:6A:3A:3F:E8:29:A4:35:57:F5:26
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xXWAX9W8C3Kw-2o6P-gppDVX9SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12c0::/44
Signature Algorithm: sha256WithRSAEncryption
86:cc:3d:17:88:ca:28:04:8d:be:93:43:cb:04:94:ae:bf:47:
98:60:d6:60:5b:dd:a9:4e:fb:31:38:8e:df:63:f1:1b:a8:cc:
40:1f:a9:a6:cd:61:47:09:3e:2d:7f:6f:d1:3c:c7:fb:09:7c:
f7:57:48:f5:ed:d3:0f:6e:8d:b5:82:f6:9f:2d:af:8b:62:85:
af:81:e5:47:86:1e:d2:d2:59:30:7d:5b:c5:a9:d9:14:bf:6f:
1b:e2:d3:a7:b4:a9:9e:0e:dc:59:c9:7b:89:a3:f0:c5:c8:21:
84:e0:41:c2:0c:85:91:f9:c9:b4:bc:0f:8f:f4:a2:9c:10:6c:
9e:bd:3a:7e:3d:8d:34:d6:53:f8:c3:ef:2f:d6:40:c9:28:82:
cb:b9:1a:34:32:b8:25:16:68:41:e8:a2:1f:01:d3:29:cb:b0:
ec:3c:34:b1:1c:c6:ef:d8:1b:09:e9:4a:a1:94:67:12:8a:1d:
52:26:ba:0f:44:a8:73:cc:06:df:df:3f:c5:b5:2d:a8:12:0a:
16:87:55:20:1a:4f:18:ee:f4:59:70:9e:bd:f9:25:1a:83:e8:
8f:d2:72:2e:31:71:1e:d0:a0:3e:5b:07:ee:2d:d1:c1:22:15:
ca:fa:b3:80:2b:af:49:41:87:87:0b:1f:42:ab:30:4e:7a:58:
4e:12:f2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org