Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0QwG40XRDc8yrDkxohqcCFheB8A.roa
File: 0QwG40XRDc8yrDkxohqcCFheB8A.roa (raw, json)
Hash identifier: 7tF2VsSjafuSX8tTlmugKUDUYjg0SV6Xe5sEVyqoe3c=
Subject key identifier: D1:0C:06:E3:45:D1:0D:CF:32:AC:39:31:A2:1A:9C:08:58:5E:07:C0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E792A9F44E0F9D3932FF9944C63239
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0QwG40XRDc8yrDkxohqcCFheB8A.roa
Signing time: Mon 02 Jan 2023 05:15:02 +0000
ROA not before: Mon 02 Jan 2023 05:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 139989
IP address blocks: 2a0e:97c0:371::/48 maxlen: 48
2a10:cc40:111::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 May 2023 22:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:92:a9:f4:4e:0f:9d:39:32:ff:99:44:c6:32:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d10c06e345d10dcf32ac3931a21a9c08585e07c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:75:65:05:29:88:5e:79:c2:fa:41:55:0c:bd:
aa:3a:97:c8:9c:33:49:43:29:c5:d0:a7:07:ab:13:
7b:f2:a6:03:2b:92:d8:11:7c:0b:66:3c:c0:2c:7f:
e2:fe:b0:2f:47:fc:f3:41:86:de:47:da:7d:23:6a:
59:aa:ff:34:87:b8:f4:1e:ae:85:13:6a:3d:a3:ba:
1f:4f:4e:28:80:27:42:67:ec:27:9f:c8:5d:2f:78:
1c:2a:4b:91:b6:76:f6:db:e3:a3:14:5b:66:20:9b:
16:d6:3d:79:c1:1f:8b:7a:80:62:a1:39:01:45:1d:
75:6a:14:9c:e6:90:37:43:4c:06:f7:f2:40:9a:40:
3d:53:cf:0e:a2:76:48:d7:65:f8:fb:db:5c:0c:34:
3c:ee:2a:78:75:46:37:cf:be:7c:95:f2:d6:47:b8:
aa:31:49:c3:52:b4:b0:eb:4a:66:70:b4:d1:7e:4f:
f8:26:30:f7:96:92:f3:0f:99:55:8f:68:5d:e2:02:
bb:fb:cc:7e:d3:0e:9b:ca:a8:92:ee:e1:77:d7:3a:
06:98:c8:88:9f:54:d0:1c:fc:ca:e7:bb:e4:08:c5:
26:b3:8f:61:04:7d:38:79:a5:ee:d8:ad:b8:a9:3c:
bf:9a:db:56:8a:d9:75:28:99:24:66:fc:f6:22:32:
06:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:06:E3:45:D1:0D:CF:32:AC:39:31:A2:1A:9C:08:58:5E:07:C0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0QwG40XRDc8yrDkxohqcCFheB8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:371::/48
2a10:cc40:111::/48
Signature Algorithm: sha256WithRSAEncryption
b9:56:1d:7f:64:0c:3d:12:f1:47:48:22:63:fe:d9:13:d5:db:
93:1c:da:9c:9f:35:cd:e7:79:ba:9d:ce:65:37:97:7a:40:89:
45:9b:79:ed:cb:e5:15:aa:00:67:39:22:5e:a5:9f:0e:c1:0e:
b2:89:ff:ad:38:65:eb:d6:5b:9a:97:08:49:9b:6d:cc:90:24:
fd:78:37:a4:64:4c:d0:cd:3b:82:38:d4:38:0e:93:cd:43:c5:
d3:59:bd:81:e8:71:47:ef:b2:be:50:d5:1a:86:3a:f4:a3:55:
04:5e:22:e4:b8:29:01:b9:21:18:be:cf:01:aa:8e:2b:27:fa:
31:db:35:9a:8d:f5:bd:af:f2:b2:75:44:70:9c:e2:4b:c5:8e:
ce:42:1b:74:3e:10:36:ae:65:27:96:28:cb:96:69:6c:05:0d:
a1:74:37:38:cf:4c:6b:b0:53:95:ae:c7:d4:36:f8:bc:a8:3a:
b4:a0:d3:0e:a7:6c:25:b7:a3:6f:8b:31:ba:9e:3e:bc:5d:96:
3a:31:b4:d6:a5:56:b6:82:ab:ae:35:d8:dd:81:94:97:0d:3f:
5a:a7:8d:1e:21:82:c7:fd:87:35:05:c9:c6:6a:87:70:f9:0e:
8c:e4:27:83:36:f0:b9:54:9d:3f:a1:fb:18:37:d2:a1:19:2c:
3d:a5:af:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:21 2024 by rpki-client on console-fra.rpki-client.org