Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfujy8hrxBiwmhWH1_tUl6TLGAw.roa
File: xfujy8hrxBiwmhWH1_tUl6TLGAw.roa (raw, json)
Hash identifier: vsmycve3pLUIvBVfVfbSMx0ehZtlCp/lRD0gLxOYQVk=
Subject key identifier: C5:FB:A3:CB:C8:6B:C4:18:B0:9A:15:87:D7:FB:54:97:A4:CB:18:0C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7ACC1E13BD9A098A29099761E5D68
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfujy8hrxBiwmhWH1_tUl6TLGAw.roa
Signing time: Mon 02 Jan 2023 05:15:09 +0000
ROA not before: Mon 02 Jan 2023 05:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202941
IP address blocks: 2a0e:b107:1a20::/48 maxlen: 48
2a10:2f00:187::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 12 Jan 2023 07:02:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:ac:c1:e1:3b:d9:a0:98:a2:90:99:76:1e:5d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5fba3cbc86bc418b09a1587d7fb5497a4cb180c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:5f:f3:35:e6:35:d4:e7:03:f1:42:95:80:
6f:87:3c:8d:6c:d1:53:22:80:d3:0a:58:3b:5d:67:
1d:aa:f0:59:7c:49:84:bd:b2:6c:05:fd:cf:ee:5f:
c9:ae:40:f2:c1:2f:97:34:24:1f:20:48:a2:15:14:
4a:df:02:e9:e3:4f:d4:2a:14:eb:9b:ab:89:9a:5c:
02:1f:5d:4f:af:d6:6d:10:d4:3b:72:6c:03:4e:83:
49:fb:2c:01:02:2a:a6:e9:d2:af:13:77:78:ed:e7:
b5:57:6a:0f:a5:ea:65:ea:13:e7:f4:46:b7:34:3c:
cc:ad:4a:a6:22:9f:e1:06:6e:3b:05:b8:5b:4c:cc:
34:6a:da:2d:08:1e:d1:50:cb:59:c6:a9:3d:fd:46:
ee:e6:04:fb:58:aa:9f:36:fa:f9:15:42:91:93:f1:
a6:07:0d:95:72:ae:57:77:48:a3:0d:34:ea:73:53:
fd:b4:b8:36:ac:81:a1:23:6a:db:9c:d0:a3:bc:11:
1d:cc:33:99:1f:fc:96:a6:db:2b:91:30:04:c6:9b:
48:e0:89:9d:4c:ba:84:2a:e8:cc:37:91:a9:4d:29:
6b:a0:2e:40:71:65:2d:de:50:77:2c:4f:70:45:6e:
0f:f1:b5:48:29:8b:a6:9f:c1:81:01:0b:1f:a4:57:
d6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:A3:CB:C8:6B:C4:18:B0:9A:15:87:D7:FB:54:97:A4:CB:18:0C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xfujy8hrxBiwmhWH1_tUl6TLGAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a20::/48
2a10:2f00:187::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ec:6f:8b:a0:a7:36:e2:86:b4:28:e4:33:4f:aa:7e:58:b1:
a1:18:16:6f:56:29:77:48:74:cc:b4:0b:76:5c:38:c6:a4:4e:
bf:3e:33:90:5c:a9:cd:32:4a:72:6d:3f:6a:36:db:09:fc:96:
dc:51:07:0d:5b:f9:b4:a4:17:b2:2e:cb:8c:36:d4:da:41:c9:
41:25:40:c4:a1:df:96:f6:0c:24:90:0f:85:bc:d1:6c:37:aa:
89:0f:98:77:4f:25:91:f3:f1:87:b2:6c:e6:7b:fa:33:2c:dc:
a0:be:c3:af:69:c2:fb:d3:40:67:99:c8:88:1a:86:89:5e:0d:
54:c1:9a:72:c8:b8:49:b7:b4:3c:e9:9e:77:a6:03:20:d2:4f:
c6:a8:d2:13:01:66:51:2f:c8:bf:c8:15:25:86:ea:02:44:5c:
64:5d:23:f6:d1:58:97:de:96:9c:1f:b4:51:77:f8:bc:7f:a4:
8c:33:e0:be:7a:cb:69:db:2b:3f:cd:21:61:6c:8e:d3:54:6f:
4e:21:66:61:cb:3c:7b:02:c9:27:13:b6:eb:e1:0e:e2:3a:57:
71:42:69:80:59:90:eb:6a:83:ad:a5:0b:b6:57:92:8e:b0:f8:
d6:92:db:46:49:75:33:35:0c:07:84:7c:aa:2e:32:cb:20:e8:
06:d3:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:40 2024 by rpki-client on console-fra.rpki-client.org