Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3V6r8IExCkbGFtzbT41-UB-USgc.roa
File: 3V6r8IExCkbGFtzbT41-UB-USgc.roa (raw, json)
Hash identifier: +yY7JbWLiGgvrFZcR5FETeu09/1OUTpu6JGMfb6YwPU=
Subject key identifier: DD:5E:AB:F0:81:31:0A:46:C6:16:DC:DB:4F:8D:7E:50:1F:94:4A:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019124CA06058D35D7BC30B2F72220E6072A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3V6r8IExCkbGFtzbT41-UB-USgc.roa
Signing time: Mon 05 Aug 2024 23:05:05 +0000
ROA not before: Mon 05 Aug 2024 23:05:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214645
IP address blocks: 2a0e:97c0:3b0::/48 maxlen: 48
2a0e:97c0:3b1::/48 maxlen: 48
2a0e:97c0:3b2::/48 maxlen: 48
2a0e:97c0:3b3::/48 maxlen: 48
2a0e:97c0:3b4::/48 maxlen: 48
2a0e:97c0:3b5::/48 maxlen: 48
2a0e:97c0:3b6::/48 maxlen: 48
2a0e:97c0:3b7::/48 maxlen: 48
2a0e:97c0:3b8::/48 maxlen: 48
2a0e:97c0:3b9::/48 maxlen: 48
2a0e:97c0:3ba::/48 maxlen: 48
2a0e:97c0:3bb::/48 maxlen: 48
2a0e:97c0:3bc::/48 maxlen: 48
2a0e:97c0:3bd::/48 maxlen: 48
2a0e:97c0:3be::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 00:29:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:24:ca:06:05:8d:35:d7:bc:30:b2:f7:22:20:e6:07:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 5 23:05:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd5eabf081310a46c616dcdb4f8d7e501f944a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:55:3e:44:67:ef:46:5e:1a:d7:ea:a3:d4:3e:
7a:6d:c2:5d:c3:0c:5c:6d:a1:9a:9c:9d:30:98:c4:
22:31:0c:12:75:e4:c0:72:9d:bc:da:6f:14:8c:fe:
75:0f:0f:6b:23:22:fb:4f:8d:2c:85:58:98:3b:59:
df:6b:a5:82:f5:a0:5f:ca:70:3e:ec:1d:d5:7e:9a:
65:69:1d:25:99:de:e1:59:5e:a4:1f:47:ef:1c:24:
45:26:99:c8:2b:5c:b5:84:b9:62:6a:db:78:ea:e7:
f8:05:40:7a:e2:27:e6:e6:1e:45:5b:e1:87:56:35:
59:e3:0e:8c:81:55:ff:6d:c9:e0:b6:1f:50:cd:87:
73:ae:e0:7b:4f:d4:8e:98:6e:59:71:31:aa:3e:0e:
1a:18:34:2f:3c:7d:5d:2a:d7:92:f6:13:af:dc:a6:
b2:95:c6:af:5c:16:23:47:36:4c:c5:33:0c:39:76:
a6:e3:40:6e:0b:10:93:66:68:ee:04:a5:81:8c:10:
50:9c:8e:6f:a2:f7:ec:14:3e:fe:0f:22:20:5a:4a:
2b:f4:a2:fd:1b:30:57:85:b1:05:ed:dd:1a:05:e0:
a6:e3:05:ca:2b:66:ba:08:9b:41:d9:6b:e4:4d:97:
2c:bb:51:38:5b:83:6f:95:5e:52:33:f0:3b:d5:3a:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:AB:F0:81:31:0A:46:C6:16:DC:DB:4F:8D:7E:50:1F:94:4A:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/3V6r8IExCkbGFtzbT41-UB-USgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3b0::-2a0e:97c0:3be:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:64:1a:76:40:df:b7:8f:41:45:af:b9:ea:bc:48:64:69:4e:
ac:17:ed:70:a3:39:f9:3a:a3:0f:0c:94:76:19:b7:69:d2:ca:
66:c8:d6:d9:86:47:45:17:30:dd:70:ba:a9:82:d4:81:4b:1f:
31:ee:93:b1:a4:95:7a:bd:d4:b4:88:89:77:96:2b:56:cc:2f:
01:6d:09:94:25:f7:b0:67:a9:18:ae:c8:14:a0:8a:ad:c7:e4:
04:83:37:9b:39:a9:27:70:ee:0c:1e:c7:27:cc:f5:db:46:76:
a3:23:db:8a:07:a0:79:a5:77:4c:b2:0b:c5:1c:29:5f:87:e8:
8c:1e:51:01:81:a8:e6:fb:d5:53:2d:35:e5:dd:57:59:3b:09:
0e:ec:eb:a1:e1:e4:3b:36:47:f5:ed:2b:02:c2:72:90:b1:3b:
0e:2f:40:6b:76:39:ae:8b:ba:4e:d0:76:ba:e3:11:92:8a:f7:
cf:d6:75:5b:33:32:b6:5f:0a:69:c6:1f:df:e2:ab:29:43:ed:
c9:1c:1f:e4:d6:91:db:15:16:b2:cd:51:7a:20:53:3d:21:ab:
ff:68:6d:52:a7:01:63:48:24:fe:77:b4:48:c9:fe:41:78:da:
8a:e8:8f:24:d3:c3:e7:68:4b:61:08:94:87:77:fd:b1:54:c6:
ea:e4:65:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 6 01:57:24 2024 by rpki-client on console-fra.rpki-client.org