Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/73ZX0XEZ0ZO-EpoIMze-IV6nB3k.roa
File: 73ZX0XEZ0ZO-EpoIMze-IV6nB3k.roa (raw, json)
Hash identifier: 53SiwvQ1z3tdy9mLO1xQlLdybAElItvKCa2mOPynEzo=
Subject key identifier: EF:76:57:D1:71:19:D1:93:BE:12:9A:08:33:37:BE:21:5E:A7:07:79
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FCCA1843D60F8F1B0C1F52F99C108F2C3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/73ZX0XEZ0ZO-EpoIMze-IV6nB3k.roa
Signing time: Fri 31 May 2024 03:11:28 +0000
ROA not before: Fri 31 May 2024 03:11:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214801
IP address blocks: 2a0e:b107:1e10::/48 maxlen: 48
2a0e:b107:1e11::/48 maxlen: 48
2a0e:b107:1e12::/48 maxlen: 48
2a0e:b107:1e13::/48 maxlen: 48
2a0e:b107:1e14::/48 maxlen: 48
2a0e:b107:1e15::/48 maxlen: 48
2a0e:b107:1e16::/48 maxlen: 48
2a0e:b107:1e17::/48 maxlen: 48
2a0e:b107:1e18::/48 maxlen: 48
2a0e:b107:1e1a::/48 maxlen: 48
2a0e:b107:1e1b::/48 maxlen: 48
2a0e:b107:1e1c::/48 maxlen: 48
2a0e:b107:1e1f::/48 maxlen: 48
2a10:2f00:1a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 31 May 2024 04:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cc:a1:84:3d:60:f8:f1:b0:c1:f5:2f:99:c1:08:f2:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 31 03:11:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef7657d17119d193be129a083337be215ea70779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5c:ec:7a:de:a8:d0:78:46:0b:2c:cb:52:f3:
e6:4c:36:7e:83:55:28:20:f6:2e:90:7c:ca:73:83:
eb:83:a8:df:af:43:2f:d8:f7:1c:02:8c:a6:ee:67:
f4:4b:fa:e1:38:34:96:57:42:e5:fa:d4:f1:b6:87:
98:2e:9f:be:28:bc:ad:f7:8d:75:22:cf:a0:d7:20:
f6:24:a2:3e:e5:ae:3c:ee:5c:63:11:16:4b:18:56:
05:f4:5c:bb:fb:da:25:41:01:73:35:f0:e7:92:f9:
a3:76:b6:ef:f1:2d:ff:1d:b8:91:a6:64:0f:f4:10:
56:82:48:87:d3:80:b0:c3:69:3e:30:d5:ff:1c:f9:
10:06:83:97:5b:5a:01:bc:2d:ef:fc:57:6a:77:11:
a2:68:e9:47:eb:fb:3f:7c:fc:4c:ea:63:26:74:9e:
56:d6:f6:1b:50:91:aa:54:10:a5:c2:59:4b:a2:cb:
aa:1d:a8:d8:26:81:ea:f1:91:de:d7:ac:aa:38:24:
25:20:de:e0:d5:0c:57:39:d4:bb:3f:4e:96:34:fa:
b4:47:4f:5a:2b:99:cc:3d:0f:67:62:d1:6e:fa:7f:
cf:ff:4f:0e:57:c5:be:4d:75:39:8d:f6:86:c0:0c:
ef:ce:72:d9:10:6f:f1:13:86:b4:25:53:15:89:96:
16:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:76:57:D1:71:19:D1:93:BE:12:9A:08:33:37:BE:21:5E:A7:07:79
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/73ZX0XEZ0ZO-EpoIMze-IV6nB3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1e10::-2a0e:b107:1e18:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1e1a::-2a0e:b107:1e1c:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1e1f::/48
2a10:2f00:1a1::/48
Signature Algorithm: sha256WithRSAEncryption
95:17:d1:2d:4d:04:24:29:b5:33:2e:60:87:de:a7:53:39:c8:
b8:43:ab:e4:4c:d1:4b:c7:3d:d7:30:1b:33:81:94:95:d7:e7:
fe:7b:e3:ab:40:aa:5f:f5:ce:b1:85:de:97:79:96:6e:6e:46:
23:38:51:be:f3:e1:21:c0:81:f5:f9:a5:57:be:04:99:c7:ae:
b9:69:95:27:0d:15:1d:a3:f0:4f:75:45:cf:c2:5c:3a:01:46:
2e:6d:4b:df:cd:57:6c:d2:a5:7c:a9:eb:51:95:40:7d:81:3a:
d9:c3:33:64:51:7a:c7:3e:50:ce:48:ce:99:08:11:cd:50:db:
57:81:35:94:eb:dd:a5:5b:c6:74:3c:f2:d7:66:fb:49:d1:95:
0c:26:05:8a:c1:dc:23:15:14:3b:ef:3d:8a:a8:6c:b7:fb:25:
25:c8:24:c3:90:37:bf:d7:47:68:12:07:22:90:a1:19:ea:44:
54:3b:a3:cc:57:a0:f1:d1:96:41:a1:7c:e4:a1:04:a4:5a:d5:
ea:f1:ea:45:72:93:17:60:07:31:a9:29:c7:23:3b:f4:b6:bc:
c7:fe:d5:00:4b:fe:59:db:7a:2e:34:b5:22:8c:1c:f6:bb:6e:
94:cf:d6:34:87:87:9d:33:ee:fc:d2:ca:48:73:e5:c1:26:a7:
c9:44:fd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 18:26:17 2024 by rpki-client on console.sobornost.net