Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x_5jUEkq3vgICCDYPupLRgIkN_Y.roa
File: x_5jUEkq3vgICCDYPupLRgIkN_Y.roa (raw, json)
Hash identifier: 7tRTvknAg6+bmtZ9GniczOYAQbbIZ5FRN9xWOMR6668=
Subject key identifier: C7:FE:63:50:49:2A:DE:F8:08:08:20:D8:3E:EA:4B:46:02:24:37:F6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D6CE18ADC1D8EBCAA05683C757ADFD620
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x_5jUEkq3vgICCDYPupLRgIkN_Y.roa
Signing time: Sat 03 Feb 2024 02:52:16 +0000
ROA not before: Sat 03 Feb 2024 02:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63473
IP address blocks: 2a10:ccc3:cccc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 24 Feb 2024 15:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6c:e1:8a:dc:1d:8e:bc:aa:05:68:3c:75:7a:df:d6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 3 02:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7fe6350492adef8080820d83eea4b46022437f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fc:6a:41:06:b3:34:bb:39:d6:50:b4:2a:2d:
b6:31:c6:11:e3:0e:21:3d:f0:56:d0:55:9b:18:5b:
3a:da:c8:4f:9a:08:aa:bf:e5:6e:38:9e:ad:90:5a:
22:5f:f9:44:5d:eb:45:a7:62:b6:bc:8c:a0:e8:23:
9e:ac:18:76:79:08:0d:74:42:47:ec:e1:83:e7:a0:
15:d0:07:7c:65:1b:01:8f:24:a6:8d:71:41:72:16:
ff:b4:2b:99:cf:3d:4e:1f:ea:52:88:72:40:e9:73:
91:22:c3:0e:70:0c:a4:00:5c:81:0b:0b:8e:6d:e1:
20:ff:e1:5b:76:a1:bc:f2:7e:f1:db:28:7e:fb:63:
37:8d:30:93:28:9d:96:e7:c3:38:7a:4b:47:e7:9b:
2e:29:22:71:24:25:d1:33:bb:ea:3f:76:3c:e7:23:
15:3d:cb:b8:25:80:ce:0d:d7:33:24:06:a7:b5:8f:
42:04:dc:b2:b3:11:7e:aa:f4:15:8c:5f:de:de:31:
b2:f3:49:21:be:ef:42:f2:7c:4d:2c:a8:e9:e0:48:
04:18:5c:8d:44:e4:8c:71:17:06:20:c4:7d:b4:3b:
ef:a0:39:c3:3a:11:b5:9e:08:84:c0:f2:15:ed:50:
2c:93:4b:87:fb:ef:4f:80:cc:1b:f2:83:e8:3a:37:
ca:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FE:63:50:49:2A:DE:F8:08:08:20:D8:3E:EA:4B:46:02:24:37:F6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/x_5jUEkq3vgICCDYPupLRgIkN_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:cccc::/48
Signature Algorithm: sha256WithRSAEncryption
bc:e4:39:e3:1e:c3:ea:7a:38:62:91:1f:fb:48:2f:ee:77:91:
b3:9b:16:bf:85:17:a9:40:59:5f:7a:e1:82:7b:e3:1b:70:02:
33:f7:f3:22:5f:37:66:0b:b4:41:34:4c:4f:0a:69:15:fd:03:
d9:15:7c:45:12:b5:4b:b5:c0:22:3b:28:c1:03:9e:24:10:d6:
1f:60:17:7f:9d:06:51:04:27:ac:da:fd:2a:50:58:b2:de:74:
0f:27:bb:af:2b:2f:16:f6:6a:0c:d9:6b:71:53:95:79:4f:e1:
35:37:2b:ed:ec:9b:41:b6:f1:56:1d:b5:e6:fa:83:8b:5d:11:
9b:c8:49:1a:69:0d:a0:64:52:60:45:72:08:b2:cf:ef:6e:b9:
e3:4c:ab:c8:4f:1f:14:ee:fa:50:02:f0:26:d3:49:67:da:c5:
29:ce:45:6c:39:70:9b:18:01:d6:6a:77:be:2c:b4:bc:5b:98:
40:1e:36:d0:f6:08:0d:2b:0c:60:a4:a8:d7:bf:e6:9a:37:9b:
e0:5c:ae:27:5d:1a:d4:81:5e:9c:d0:f0:61:bc:91:56:49:e3:
69:6f:23:88:17:4c:06:90:f7:d3:20:6c:60:29:73:66:eb:0c:
a6:66:bc:2e:ea:7e:46:20:aa:02:ea:7a:12:5f:9a:de:ee:50:
f6:c6:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 16:38:26 2024 by rpki-client on console-fra.rpki-client.org