Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/OxpO9vweHuIwI_Pa8lQezLDgcQs.roa
File: OxpO9vweHuIwI_Pa8lQezLDgcQs.roa (raw, json)
Hash identifier: g8T+lQV/PFZ5J9+PHNjeWcoPy422Xhqi+7qxFhSc+UM=
Subject key identifier: 3B:1A:4E:F6:FC:1E:1E:E2:30:23:F3:DA:F2:54:1E:CC:B0:E0:71:0B
Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial: 01856F9DB345F602365F73AE6F5708A68A1E
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/OxpO9vweHuIwI_Pa8lQezLDgcQs.roa
Signing time: Sun 01 Jan 2023 23:14:43 +0000
ROA not before: Sun 01 Jan 2023 23:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133142
IP address blocks: 2a0b:1306:9::/48 maxlen: 48
2a0b:1302::/34 maxlen: 34
2a0b:1306:b::/48 maxlen: 48
2a0b:1302:4000::/48 maxlen: 48
2a0b:1306:400::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:b3:45:f6:02:36:5f:73:ae:6f:57:08:a6:8a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
Validity
Not Before: Jan 1 23:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b1a4ef6fc1e1ee23023f3daf2541eccb0e0710b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:02:e1:0f:72:d9:07:f3:d2:e2:7b:53:d4:a9:
b5:f8:83:14:8e:25:10:4c:3f:8c:93:41:1c:cc:79:
17:d3:7f:30:95:1a:b7:03:4e:4e:65:f9:9c:27:4d:
9c:b7:3f:1f:f3:a4:35:5d:86:7f:53:50:75:d2:5c:
e7:2d:81:08:15:23:d4:bd:bc:78:45:75:43:5c:22:
ef:a8:36:99:2f:44:a9:79:58:a3:81:da:6f:d4:d9:
82:51:c0:bb:30:bc:0f:f6:0c:c7:6c:c6:cf:19:db:
cb:44:c3:cf:bd:c2:d9:1d:b3:99:25:b5:5d:47:85:
56:b2:24:7e:22:21:e4:43:07:0a:1a:2b:48:29:f4:
e6:06:32:3b:9b:9f:8c:77:69:5d:23:7c:cc:c7:46:
66:7f:ec:ca:3d:a0:54:99:6d:bb:02:9c:74:09:e5:
af:b4:06:b5:77:b0:3a:9c:ba:20:70:3c:7c:33:d1:
33:15:ad:93:1a:e2:2c:3b:d1:a6:67:ea:ba:fa:83:
dc:79:b9:3c:25:38:e0:76:91:66:5d:3a:f1:3e:c2:
30:53:e4:a6:b5:74:9b:a9:ce:d2:da:25:b9:96:12:
59:31:89:28:5e:8d:98:de:97:56:86:ce:15:bd:ee:
3b:c2:da:09:63:45:47:90:bc:bd:f4:31:d4:34:f1:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:4E:F6:FC:1E:1E:E2:30:23:F3:DA:F2:54:1E:CC:B0:E0:71:0B
X509v3 Authority Key Identifier:
keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/OxpO9vweHuIwI_Pa8lQezLDgcQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1302::-2a0b:1302:4000:ffff:ffff:ffff:ffff:ffff
2a0b:1306:9::/48
2a0b:1306:b::/48
2a0b:1306:400::/48
Signature Algorithm: sha256WithRSAEncryption
27:c2:c4:55:ad:0c:b8:b1:ad:65:c2:9c:d8:16:da:c0:71:ae:
12:a6:31:36:ad:c9:cd:67:ac:b1:57:ca:8c:ee:6c:ee:df:70:
57:c2:cb:d3:42:9d:4a:ec:45:8f:83:eb:ca:b5:0d:53:81:c5:
25:13:cb:81:c7:f5:88:e6:ec:2d:91:a2:b0:83:ff:be:81:f2:
0b:b8:f7:39:3d:a0:b0:46:10:22:a0:e5:db:6d:d0:87:0c:67:
b3:44:4c:eb:4a:f5:4e:d2:8e:e8:d1:c9:d8:05:64:96:a5:69:
5d:d1:c9:38:9a:3e:fe:12:e4:ad:5e:f3:8e:6c:20:42:95:41:
3f:67:5a:0b:53:c2:87:00:5d:9a:9f:f4:0b:12:e5:1a:54:29:
e0:6f:76:fb:64:7b:23:08:9e:bd:5e:ce:93:c0:29:9b:81:e9:
20:4d:da:fe:f9:15:ea:ed:af:be:63:c5:94:71:14:e3:39:64:
7b:da:a7:a3:2d:e4:57:29:4d:94:66:a8:ff:b8:2f:d1:5d:12:
24:6e:92:3a:e7:90:23:6d:2b:35:3e:c8:28:b9:0f:72:80:fd:
e4:cf:17:50:f7:ae:8d:d6:69:f3:73:43:0b:1d:4d:a7:23:ca:
99:02:56:2d:65:d8:9b:95:12:b0:b0:21:50:51:35:eb:fa:45:
93:a2:de:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:00 2024 by rpki-client on console-ams.rpki-client.org