Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xlavd0icguqDKYR9NnER8wlEcbg.roa
File: xlavd0icguqDKYR9NnER8wlEcbg.roa (raw, json)
Hash identifier: yPRbnNc5Oi2aYa2sJSusQvAZnIBPlV2Yv8vKT/1aL2w=
Subject key identifier: C6:56:AF:77:48:9C:82:EA:83:29:84:7D:36:71:11:F3:09:44:71:B8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01903D032911C6F6DA40BF096F94A8846893
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xlavd0icguqDKYR9NnER8wlEcbg.roa
Signing time: Fri 21 Jun 2024 22:55:35 +0000
ROA not before: Fri 21 Jun 2024 22:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199766
IP address blocks: 2a06:de00:10::/48 maxlen: 48
2a06:de00:18::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 20 Jul 2024 22:51:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3d:03:29:11:c6:f6:da:40:bf:09:6f:94:a8:84:68:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 21 22:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c656af77489c82ea8329847d367111f3094471b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:41:8c:0c:96:f1:74:26:5d:66:be:e6:e7:
55:67:59:fb:24:ef:5a:22:cd:df:2c:3c:2c:02:5d:
8d:52:53:ca:e3:d3:ef:c1:41:05:e6:ad:34:ed:87:
12:41:d1:4a:18:a2:02:bd:d3:c7:4c:ec:db:98:35:
33:8d:81:c3:83:c4:fc:e5:ea:78:99:10:cd:04:b2:
aa:2b:6c:78:0d:db:47:2c:6e:42:c8:20:f0:f7:82:
6a:bd:91:83:3d:b7:ff:08:16:8d:13:da:11:aa:e5:
b5:a7:5d:3b:2d:31:ef:2f:bd:37:d6:83:fa:71:5c:
55:bb:93:5d:d2:ba:08:f7:08:e0:c0:ce:3b:ee:c9:
c6:f3:2b:1c:b2:68:db:ff:9d:e5:bc:fc:7f:49:ac:
30:fd:95:a5:7f:28:f0:65:ee:14:53:81:08:52:20:
4e:a1:9c:16:21:5b:e5:99:04:f8:d8:17:f3:e4:8c:
09:e6:de:81:81:3b:d3:d4:94:b8:62:b7:08:fa:c4:
b3:12:36:e7:ab:c4:22:fe:62:b9:83:7e:4a:60:d4:
73:46:3f:c6:e4:f3:d9:5c:40:83:c3:e5:c3:9f:85:
f9:04:32:cc:ee:b6:99:a2:68:a7:4a:4d:e0:8a:85:
25:ce:ac:2e:9c:26:24:c5:de:30:f0:07:5a:77:43:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:56:AF:77:48:9C:82:EA:83:29:84:7D:36:71:11:F3:09:44:71:B8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xlavd0icguqDKYR9NnER8wlEcbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:10::/48
2a06:de00:18::/48
Signature Algorithm: sha256WithRSAEncryption
28:7f:1c:6d:2b:92:1c:23:f0:b6:c0:0d:ed:5f:7d:2a:ba:66:
85:8b:c8:27:55:63:7d:3d:17:d1:fa:db:f2:32:b6:85:a3:d2:
f7:8f:26:bb:6d:78:e9:fe:37:82:37:64:ad:09:48:6c:cb:ae:
92:dd:30:d5:a9:f9:f6:ec:e2:70:14:10:99:e7:51:cf:84:d4:
3f:28:19:82:79:b0:f9:f9:7f:1e:e1:0b:1a:00:39:75:24:cf:
08:0d:af:09:de:d8:6a:ff:57:1f:02:4b:48:63:1e:cf:00:e2:
ab:b5:12:ef:a3:60:26:63:f3:b8:f8:32:44:cc:86:db:ee:86:
ef:ad:d5:33:40:11:c2:e0:a3:58:42:23:25:81:26:a7:cd:9a:
60:e0:f0:48:d0:69:09:15:9d:6c:11:04:3c:61:5a:e6:3d:bd:
e1:50:05:4f:e7:b9:f0:0f:46:af:27:a8:e3:ad:3a:74:14:89:
66:28:fd:3b:71:0a:c4:45:c7:1a:7f:e3:54:d3:32:da:21:47:
ee:89:dc:54:41:ce:75:90:0e:17:36:d0:98:e4:a0:0f:b0:62:
c8:44:eb:be:a3:5b:53:4d:b8:37:76:4d:90:e8:9e:99:ff:ba:
aa:05:1e:ca:fc:1a:62:83:27:7e:eb:f3:78:a2:a6:fe:d5:9f:
e7:7d:21:9f
-----BEGIN CERTIFICATE-----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 at Sun Jul 21 00:27:33 2024 by rpki-client on console-fra.rpki-client.org