Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1dOM3B5IGGZfx3p5WrzBPUJq9ns.roa
File: 1dOM3B5IGGZfx3p5WrzBPUJq9ns.roa (raw, json)
Hash identifier: NYWi+5mxB1//r5OtQJCHmS5KBetaLZ2G+4icea45MF4=
Subject key identifier: D5:D3:8C:DC:1E:48:18:66:5F:C7:7A:79:5A:BC:C1:3D:42:6A:F6:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188F715BF97E0F21945349718E1610DE1EA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1dOM3B5IGGZfx3p5WrzBPUJq9ns.roa
Signing time: Mon 26 Jun 2023 09:42:57 +0000
ROA not before: Mon 26 Jun 2023 09:42:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198016
IP address blocks: 2a0e:97c0:d00::/44 maxlen: 48
2a0e:97c0:d00::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Jun 2023 09:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f7:15:bf:97:e0:f2:19:45:34:97:18:e1:61:0d:e1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 26 09:42:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5d38cdc1e4818665fc77a795abcc13d426af67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:dc:0a:a0:00:9e:81:83:0a:35:a0:d8:0c:
95:bd:f3:5f:34:7a:c2:e1:df:32:e7:97:25:3b:85:
a7:81:e3:cc:dd:83:ca:c3:5a:b3:f9:46:90:99:d4:
ce:28:c2:ca:90:16:d1:6e:ca:ee:46:3f:8f:29:12:
70:bf:f8:19:d3:42:44:b0:cf:66:08:f1:af:d5:ac:
8e:42:23:ed:86:bb:7e:a2:da:b4:ae:d3:24:54:cd:
ea:6a:f1:e6:6b:92:1a:9e:72:8b:e6:cb:02:09:63:
88:33:75:62:93:26:0d:f8:42:ac:8b:64:c8:de:66:
b6:33:10:d9:0f:21:51:2c:40:51:41:ba:37:41:14:
48:43:a4:58:01:93:ee:1b:a5:99:d7:4e:77:d6:5e:
8c:2e:66:69:11:92:d2:82:1e:d2:99:f9:eb:7e:0e:
50:b5:dd:c2:9f:33:be:de:7c:4a:52:c8:32:9c:31:
2d:12:f6:4b:ad:b4:45:16:7e:fc:a9:48:2e:73:de:
95:25:07:0f:7d:2b:41:d6:50:f8:d0:8f:5e:33:51:
f4:7a:3a:7a:78:4f:e6:32:57:38:4d:c2:d1:6d:ec:
40:99:d1:f6:5b:ec:68:d2:90:9b:da:d5:e8:c6:98:
10:1e:fc:83:07:32:83:eb:94:82:4a:bc:c1:64:9c:
d9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D3:8C:DC:1E:48:18:66:5F:C7:7A:79:5A:BC:C1:3D:42:6A:F6:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1dOM3B5IGGZfx3p5WrzBPUJq9ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d00::/44
Signature Algorithm: sha256WithRSAEncryption
43:2e:e5:ef:cd:36:e5:bb:3b:d7:81:a5:d5:fd:8f:41:16:37:
07:84:c1:fe:d5:cf:f8:80:ee:39:c3:32:98:09:d5:f0:eb:1a:
55:d3:e7:b5:e1:15:17:e0:ae:65:0c:38:8a:90:d3:7d:90:31:
c2:06:0b:0f:6c:99:22:8c:90:32:81:97:b7:4d:87:60:91:7b:
b9:b3:e6:9f:6c:0c:32:a8:65:5a:75:c7:20:7b:cf:d5:50:10:
9b:dc:d7:4e:80:fb:f3:9a:0e:97:dc:46:80:08:87:b2:2b:4b:
88:7f:f8:3a:ec:66:cc:21:3f:17:0e:ff:d5:89:98:b6:7e:e2:
1f:56:b6:13:c5:27:13:e1:88:e2:b2:87:9d:0b:7b:90:10:33:
ee:d4:f7:df:83:9f:db:64:63:f5:b4:27:61:af:0b:46:7e:6a:
00:1a:31:88:dc:f8:bc:b8:12:1a:da:0d:33:ed:b2:7e:45:47:
bd:37:f5:f1:c7:a9:83:44:9b:fc:36:a3:5b:af:77:75:bd:7d:
b3:84:23:d3:bf:cc:85:71:33:fd:9e:91:b4:9d:e0:a7:b7:00:
f2:36:a8:30:80:d4:a1:5d:18:20:c2:5b:6d:58:e2:76:d2:06:
0c:22:0c:ee:eb:e2:17:bb:9c:27:7a:15:1f:3e:84:01:55:40:
2b:39:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:52 2024 by rpki-client on console-ams.rpki-client.org