Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xyaVkjvdXIV1gyHpz7X0Z9h9VW4.roa
File: xyaVkjvdXIV1gyHpz7X0Z9h9VW4.roa (raw, json)
Hash identifier: aY3X9qjrP68SfNVRZzP97jQ5fnTZM4VLAYrVxFpB0ms=
Subject key identifier: C7:26:95:92:3B:DD:5C:85:75:83:21:E9:CF:B5:F4:67:D8:7D:55:6E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD392C70037ED6C23FF1E18B2AEFA9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xyaVkjvdXIV1gyHpz7X0Z9h9VW4.roa
Signing time: Tue 02 Jan 2024 10:34:30 +0000
ROA not before: Tue 02 Jan 2024 10:34:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211659
IP address blocks: 2a0e:97c0:261::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Apr 2024 22:51:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:39:2c:70:03:7e:d6:c2:3f:f1:e1:8b:2a:ef:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c72695923bdd5c85758321e9cfb5f467d87d556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:24:4f:03:95:09:a1:76:7d:a3:84:c1:4b:c0:
0a:75:c2:66:d6:5e:ec:b1:29:3d:65:3e:52:dc:db:
70:24:e7:8d:2a:fd:4b:2a:16:78:21:db:b2:05:5b:
1b:5a:08:95:9a:0e:d2:39:98:46:b9:51:8d:ad:31:
11:97:71:64:f9:7c:f9:bf:3e:58:20:2b:11:36:7c:
f1:5e:af:03:34:b6:f8:bd:04:7d:61:f4:b6:80:8d:
a0:e3:3e:2b:6f:c2:41:35:da:c3:78:ef:5a:01:a7:
eb:10:1c:df:9e:d6:13:41:23:ce:95:6f:99:13:16:
8f:41:b3:b5:79:ad:97:e1:95:f9:2f:94:de:6c:2e:
80:ea:b0:9c:de:3d:08:59:8d:14:a8:a8:5c:41:e6:
0c:2b:8f:f2:18:88:aa:fd:d2:74:a2:0c:a5:0a:85:
01:d5:7c:61:3b:c5:ac:65:26:2d:e6:49:3c:fb:74:
b3:58:80:ce:b0:b2:9e:91:92:e4:3a:7e:88:28:98:
1a:c9:69:f9:a9:c1:3c:0c:8a:2a:68:9d:b8:e9:5b:
f2:a8:99:4b:45:22:ca:99:b9:9c:9b:9d:46:81:55:
48:89:7c:6d:96:1d:8c:b8:07:e8:64:04:c3:4a:c2:
4a:a8:77:2f:80:2b:91:c5:3d:0f:c7:c6:0e:60:ec:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:26:95:92:3B:DD:5C:85:75:83:21:E9:CF:B5:F4:67:D8:7D:55:6E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xyaVkjvdXIV1gyHpz7X0Z9h9VW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:261::/48
Signature Algorithm: sha256WithRSAEncryption
3f:dd:25:1f:e7:c9:19:07:33:96:86:87:0d:d4:d0:e9:d4:74:
76:02:ec:fd:1d:77:3d:ef:77:9c:98:1c:ee:74:6f:bd:99:ca:
45:68:f2:6d:30:dc:04:91:ef:85:ac:c5:4f:af:64:75:a2:4d:
0d:92:66:79:40:08:bf:01:68:05:9e:75:b5:cc:12:1c:f9:ab:
1c:61:e4:bf:01:23:da:d1:d6:e3:d5:99:55:fe:2d:73:f5:70:
71:40:a4:95:d9:3c:12:b0:67:2e:4c:1b:1e:15:a0:99:b9:eb:
fd:8e:cc:fe:0d:4f:4e:c9:fa:05:8d:f1:d5:70:d2:5e:43:dc:
90:a1:6f:3a:fb:5b:46:91:c9:39:1b:c2:9e:47:16:19:60:b1:
a3:24:6d:f5:f7:cd:d8:a7:36:16:2f:36:3a:62:34:07:7c:61:
4d:ac:e2:b2:95:60:18:fb:f1:1d:97:fc:16:d1:b8:b8:05:cf:
23:6d:61:4e:5a:1f:88:60:14:0b:7f:a9:3c:a6:0d:34:0b:7c:
d7:87:eb:12:9b:61:2b:54:55:c6:78:1f:3a:ce:b1:9d:2d:1e:
cd:b1:90:ad:85:aa:3a:2f:93:de:1e:6b:86:60:59:11:48:35:
0f:30:f0:20:65:5d:e8:c7:2e:96:d6:b8:0d:d7:d0:89:a8:8b:
0b:23:1a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 7 23:41:52 2024 by rpki-client on console-ams.rpki-client.org