Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0gGvoSTLVSY3nl6RjJhDhvUislc.roa
File: 0gGvoSTLVSY3nl6RjJhDhvUislc.roa (raw, json)
Hash identifier: hJC1DvGBZZmoUZmaEHpCouxWta4AL69xebBuP4dLWe8=
Subject key identifier: D2:01:AF:A1:24:CB:55:26:37:9E:5E:91:8C:98:43:86:F5:22:B2:57
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187CCCCAEE2CD29A6B93026085CBA255AF6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0gGvoSTLVSY3nl6RjJhDhvUislc.roa
Signing time: Sat 29 Apr 2023 11:36:18 +0000
ROA not before: Sat 29 Apr 2023 11:36:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199310
IP address blocks: 2a0e:97c0:220::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 30 Apr 2023 03:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:cc:cc:ae:e2:cd:29:a6:b9:30:26:08:5c:ba:25:5a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 29 11:36:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d201afa124cb5526379e5e918c984386f522b257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:a2:ef:a9:f4:49:6e:c0:ed:09:df:5b:da:
83:db:ff:57:e6:75:ac:94:56:c3:06:93:19:2d:06:
ae:e6:d9:83:db:0a:23:90:21:f9:d4:9e:b3:5a:3e:
9c:21:74:11:56:c9:f5:ba:cb:4d:7b:cb:78:19:97:
00:50:a7:f6:23:cd:80:34:1e:a5:94:0d:ae:6e:c7:
61:50:6c:a4:34:02:67:1c:0b:13:22:ad:c1:6b:04:
ee:00:ee:ee:4d:d0:a2:90:f2:09:4f:6f:58:bc:fd:
70:53:0b:76:9b:bc:bd:26:a7:32:8d:ba:91:5d:ab:
b4:af:90:5b:9b:96:3a:df:16:f3:91:17:54:69:a9:
ed:c7:72:ec:be:db:51:4a:e2:18:58:98:3a:9d:0b:
4e:da:1a:be:41:39:6f:66:b9:5b:ed:e0:5a:28:90:
4e:da:39:fc:f2:10:ee:2c:21:f7:6f:f6:67:2a:8a:
0c:df:ec:5c:b1:98:da:05:c9:2b:58:cd:2c:86:c9:
d3:87:87:be:04:4d:9e:ef:2b:27:b4:e8:b3:61:73:
96:f7:1c:4d:d1:8e:20:01:fb:81:b4:d9:7c:1e:8d:
c4:ad:f9:8d:fe:ea:7d:ab:68:4b:cc:69:fc:ab:0b:
76:06:a0:a4:29:84:5e:0a:5c:0c:a8:35:d2:c9:34:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:01:AF:A1:24:CB:55:26:37:9E:5E:91:8C:98:43:86:F5:22:B2:57
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/0gGvoSTLVSY3nl6RjJhDhvUislc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:220::/44
Signature Algorithm: sha256WithRSAEncryption
3f:2b:71:5d:7c:b7:05:93:28:64:eb:97:ee:9e:67:0f:71:68:
4b:66:80:bd:3d:26:b6:a6:de:d6:2d:0b:59:fa:4d:bd:74:3c:
24:7d:d7:4e:ad:e5:0e:b3:38:07:f1:9c:fa:79:51:17:ba:ec:
7b:91:ed:18:bb:88:fb:e0:fe:64:64:23:de:93:93:d9:73:9d:
9a:d3:77:5e:83:0b:59:86:4c:2d:de:8e:fd:69:97:f3:c9:34:
c1:bf:30:46:c0:ff:63:85:58:e6:a8:99:28:cd:75:d3:8b:0c:
12:2e:1f:61:b6:41:d5:81:18:00:92:e0:17:fc:b0:12:25:8f:
34:1b:50:e9:74:5c:82:b4:9e:88:c6:98:eb:82:1f:5a:d5:d7:
12:86:3d:aa:e9:71:0d:55:2e:f7:17:a9:3d:91:11:12:f4:8e:
3f:c4:ea:f3:6e:01:4d:bd:fe:ee:94:f3:59:2e:67:95:98:a4:
c1:09:81:68:66:6f:ec:6f:90:3e:aa:a0:3b:36:0e:be:ef:a4:
fc:04:0b:b9:16:c4:38:11:0f:17:b6:d2:78:5c:e8:b9:f3:45:
be:c3:d2:a6:30:98:d1:af:ba:41:ed:30:ae:ee:c3:61:dd:7d:
9e:e3:19:c5:ed:ca:aa:5d:57:61:a7:ac:96:bf:41:33:4c:16:
e2:7e:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:51 2024 by rpki-client on console-ams.rpki-client.org