Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zaqaWAj23WUsBbMiWFkLu_C4tnM.roa
File: zaqaWAj23WUsBbMiWFkLu_C4tnM.roa (raw, json)
Hash identifier: wqN2Ht40u4sGMb07bXK/kj12e/3AzNYPDXuISPklFlw=
Subject key identifier: CD:AA:9A:58:08:F6:DD:65:2C:05:B3:22:58:59:0B:BB:F0:B8:B6:73
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01919CE474A475CDAAAFBCF510E3B8A42655
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zaqaWAj23WUsBbMiWFkLu_C4tnM.roa
Signing time: Thu 29 Aug 2024 06:48:23 +0000
ROA not before: Thu 29 Aug 2024 06:48:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214344
IP address blocks: 2a10:ccc3:3330::/44 maxlen: 48
2a10:ccc6:6660::/44 maxlen: 48
2a10:ccc6:666f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 05 Sep 2024 17:26:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9c:e4:74:a4:75:cd:aa:af:bc:f5:10:e3:b8:a4:26:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 29 06:48:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdaa9a5808f6dd652c05b32258590bbbf0b8b673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:34:53:bf:69:5e:b5:b7:6b:b0:d4:fe:c2:
f0:de:6d:c3:8b:4e:8a:8e:ea:3c:96:c8:71:08:36:
a0:cb:65:1b:6b:4a:77:d4:ed:8e:c8:33:da:23:91:
b6:65:50:c1:39:71:5a:57:61:7c:f2:27:9d:1b:61:
c7:04:81:12:90:ce:b1:fb:48:68:50:41:ea:30:5e:
d7:52:9b:cc:9d:7e:df:b3:49:80:80:fa:e8:39:41:
50:67:08:bb:5c:4b:64:34:b2:5c:d8:3f:f3:ef:bc:
6a:c9:33:1d:ef:2e:36:0a:80:6a:80:b2:58:2d:c3:
0c:6d:bd:52:8f:bd:05:c6:4c:a7:d1:30:44:bc:5e:
ff:c2:67:e3:bb:7e:13:dc:72:c0:99:e4:9f:26:b7:
d2:63:1f:19:2a:4f:db:72:d7:95:7e:65:78:07:fb:
d2:b9:ee:ff:b0:1b:6a:48:c0:3c:08:74:f2:3e:5c:
30:85:59:e9:c6:c0:04:85:23:ea:86:9f:c0:27:44:
64:a8:a5:73:4b:b3:cb:7c:a3:b5:50:db:8e:6c:bd:
5c:02:2d:1a:b5:9e:e8:c9:2a:bb:ec:ca:77:f2:67:
15:c3:f6:9d:48:f5:df:44:27:8e:14:ec:13:07:b9:
d5:fc:cb:c7:d7:b6:67:e3:43:76:2e:6f:52:d7:2e:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AA:9A:58:08:F6:DD:65:2C:05:B3:22:58:59:0B:BB:F0:B8:B6:73
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zaqaWAj23WUsBbMiWFkLu_C4tnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ccc3:3330::/44
2a10:ccc6:6660::/44
Signature Algorithm: sha256WithRSAEncryption
48:a8:e6:08:c1:0f:fe:d2:da:74:09:35:02:38:d4:29:b0:1f:
3f:71:58:65:23:16:22:43:09:ec:08:cc:76:e3:ff:a9:08:c9:
54:d6:46:af:6b:6a:79:e4:dd:4d:e2:b6:cc:e9:10:9f:ad:08:
2b:1f:40:bd:f2:f5:68:94:a7:80:c9:6a:b3:d9:cb:cb:2c:25:
f4:e6:ed:24:3f:8a:36:58:58:91:0d:1a:91:54:f7:d1:5d:3f:
2f:04:94:5f:cf:58:d8:be:0e:d5:8d:a6:56:5b:d2:78:4f:6f:
3c:3f:62:f9:bd:a5:d6:4b:d8:6a:8c:7e:d3:04:ff:e4:f6:6f:
a5:2a:bd:c8:e6:59:39:bf:8c:52:08:39:92:09:8e:98:f5:9c:
a1:1f:05:39:5d:2e:cc:71:5d:3a:a4:2d:29:9d:c0:d0:00:bd:
89:54:9a:b4:47:ef:61:db:ba:49:d4:9b:dd:13:80:aa:78:f3:
2a:33:5d:d5:9c:db:fc:3d:86:fe:e0:3d:9d:bc:fa:dc:9b:05:
69:f9:0f:66:54:16:4c:47:5f:fe:d9:63:ff:12:67:d3:c0:41:
82:fb:3d:13:3f:d2:ef:c6:0d:a1:75:29:ca:7b:cf:fc:21:1a:
2d:4a:b7:f2:29:9b:37:56:6c:f8:ec:57:20:be:3c:cc:f7:15:
b7:d5:de:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 19:51:53 2024 by rpki-client on console-fra.rpki-client.org