Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zYEmHm53OO7azJGpNP27rb72EDM.roa
File: zYEmHm53OO7azJGpNP27rb72EDM.roa (raw, json)
Hash identifier: HfMR35WvAAsbVXqjr2Bk4j8wtUjIHLOK3C/PHwArs9g=
Subject key identifier: CD:81:26:1E:6E:77:38:EE:DA:CC:91:A9:34:FD:BB:AD:BE:F6:10:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018B1E6DD3F74EB9D7CA1A390AEBB6199A31
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zYEmHm53OO7azJGpNP27rb72EDM.roa
Signing time: Wed 11 Oct 2023 11:09:55 +0000
ROA not before: Wed 11 Oct 2023 11:09:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216182
IP address blocks: 2a0e:97c0:dd0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 14 Oct 2023 09:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:6d:d3:f7:4e:b9:d7:ca:1a:39:0a:eb:b6:19:9a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 11 11:09:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd81261e6e7738eedacc91a934fdbbadbef61033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:87:83:74:6e:0c:7f:ab:be:bb:f7:ce:40:
52:fe:25:85:43:b6:17:49:37:92:fa:12:e9:c9:a4:
87:74:cc:29:6e:cf:b9:4e:8c:10:04:c9:5c:d6:1c:
62:62:3a:8e:16:b3:80:17:c4:30:37:b3:40:10:ab:
fa:f0:dc:c8:33:00:5e:e5:39:b9:13:1a:34:0d:9e:
31:22:c8:9e:c3:20:8b:f0:3a:63:e4:9a:8e:a1:05:
63:1d:c6:4c:b0:06:fd:20:7d:56:ad:cf:72:03:bc:
07:9c:9c:1b:ca:9b:d1:51:35:bf:da:69:e3:95:76:
dc:ad:9f:11:ec:fc:c2:54:d7:cd:71:1d:72:34:d0:
fd:54:77:76:54:78:0a:6c:35:00:f2:3c:99:1b:1a:
57:c8:b1:94:c0:4f:4a:a6:15:0a:cb:3a:22:8f:d4:
4a:b3:a1:92:7e:8d:95:63:db:53:a7:0d:35:43:66:
c5:5a:b2:cc:f4:bf:00:b6:eb:09:a4:7e:c2:9a:9a:
a8:ad:9c:c2:55:e5:05:3a:bd:d3:fe:8c:2b:57:6e:
90:2b:6b:6e:2e:05:e6:9a:e9:29:a7:97:e3:c6:62:
f0:29:b6:4d:69:cf:95:44:1d:88:6e:a9:bd:81:c0:
90:ff:f1:46:9f:bf:d0:9f:9d:3d:f2:76:6f:a1:79:
02:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:81:26:1E:6E:77:38:EE:DA:CC:91:A9:34:FD:BB:AD:BE:F6:10:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zYEmHm53OO7azJGpNP27rb72EDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:dd0::/44
Signature Algorithm: sha256WithRSAEncryption
4c:5a:cd:25:65:ee:ab:1b:58:5b:e5:7f:57:2d:ab:c2:30:41:
69:c5:c9:6a:56:72:88:eb:be:6b:bc:cc:c2:5c:05:36:6d:fb:
a7:b8:52:b9:35:ab:41:53:f5:44:34:16:39:7c:97:d1:e4:7a:
4a:5b:ef:aa:6b:45:03:4a:da:16:4f:5d:9a:09:da:6a:15:fe:
4d:42:a7:ca:cd:2b:e1:68:6f:b9:5c:f3:12:0f:72:8b:da:7e:
70:9f:ba:3d:03:1c:0c:f8:e9:f0:c8:56:14:7f:be:26:7d:48:
4e:f3:3f:d8:b3:90:c8:7c:a9:f0:0d:2b:56:c3:38:eb:f8:62:
92:67:42:ac:a6:ee:73:28:3c:9d:06:79:0a:44:66:94:44:a1:
a8:0b:77:a3:c4:7a:0a:08:b2:51:64:18:76:d2:8a:d4:48:e5:
91:66:1e:a4:31:3a:ac:b3:82:2a:8f:b0:36:d3:5b:e1:ef:9b:
a4:e4:f8:c7:c9:e3:00:c8:70:a0:14:e1:06:7b:87:48:ab:41:
be:ed:0d:da:7e:0c:ef:21:7a:99:66:e3:3a:d1:43:5f:6f:f3:
86:87:82:5b:95:dc:07:65:1c:54:66:a4:ae:80:ab:b2:31:24:
9b:b5:b7:9b:45:10:69:11:58:f5:ef:77:1f:84:3e:80:50:21:
d2:eb:54:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:41 2024 by rpki-client on console-fra.rpki-client.org