Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AsboRm2DH2FYpXwH_qtKXiO3HIM.roa
File: AsboRm2DH2FYpXwH_qtKXiO3HIM.roa (raw, json)
Hash identifier: f4/JoV8wr4AUBpE4bRQ8OvfnxZsHnTMHGL+gWLiEiG4=
Subject key identifier: 02:C6:E8:46:6D:83:1F:61:58:A5:7C:07:FE:AB:4A:5E:23:B7:1C:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01907997065B0A1B5C583E594EF73BE4512F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AsboRm2DH2FYpXwH_qtKXiO3HIM.roa
Signing time: Wed 03 Jul 2024 17:14:19 +0000
ROA not before: Wed 03 Jul 2024 17:14:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216093
IP address blocks: 2a0e:97c0:df0::/48 maxlen: 48
2a0e:97c0:df1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Jul 2024 09:56:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:97:06:5b:0a:1b:5c:58:3e:59:4e:f7:3b:e4:51:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 3 17:14:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02c6e8466d831f6158a57c07feab4a5e23b71c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f5:89:e7:53:4d:33:81:dc:46:e8:7d:92:72:
e9:cc:31:f4:06:7c:50:9f:f9:a5:53:63:cc:02:6e:
03:a2:2f:08:5e:3f:4f:88:3f:dc:34:e4:d8:f3:a5:
b9:66:56:ba:84:0d:d6:1d:0b:0a:22:bb:5d:e8:db:
5c:39:88:6c:96:17:f4:c1:e2:b5:6e:9e:ed:f1:08:
af:b3:ed:28:4c:57:b4:68:65:f4:ba:cb:9b:94:4d:
aa:2e:4d:a4:09:b5:e0:8d:34:8c:7e:b7:8e:2b:cb:
6d:6a:b2:08:b9:c4:df:02:92:79:d3:28:46:14:a3:
db:a2:b6:05:12:21:7e:e4:2b:34:a2:fc:69:0c:5e:
94:a9:2a:f5:56:35:56:60:ca:f8:f6:dd:4f:b6:60:
f8:12:b3:8e:b7:07:73:a0:2a:b9:56:28:50:55:32:
e5:c4:93:f2:f8:89:66:29:25:3a:47:86:19:e5:b3:
3d:cd:bd:e7:52:7f:75:f8:b3:f7:2a:42:7e:0e:66:
93:c7:ca:d8:f0:d7:78:fe:d1:bb:68:94:dd:e5:af:
8f:89:f7:d4:74:11:43:41:af:f6:79:78:5a:88:9f:
c7:02:11:74:48:0f:5c:01:6c:b6:a7:95:56:c8:c0:
44:e0:39:3a:f9:92:ec:58:5b:9b:13:82:79:70:b2:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C6:E8:46:6D:83:1F:61:58:A5:7C:07:FE:AB:4A:5E:23:B7:1C:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/AsboRm2DH2FYpXwH_qtKXiO3HIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:df0::/47
Signature Algorithm: sha256WithRSAEncryption
ad:47:4b:40:8c:ac:c3:8d:a3:90:4f:50:d5:33:20:91:99:72:
2c:84:c2:7a:9f:12:4d:1e:96:8c:af:b8:0a:ad:44:15:4d:23:
ad:ae:44:ec:66:b7:2f:74:90:64:24:0c:ef:ec:a6:5a:50:af:
31:20:b3:34:1a:58:aa:6a:f1:ec:be:6d:db:77:e0:72:f0:a5:
d4:58:01:6d:e0:5c:09:00:e7:82:54:5e:0f:53:fe:01:84:c9:
b0:ba:3d:70:fc:e3:9b:21:59:0f:0b:aa:c4:78:c7:a3:44:a9:
8a:e5:6e:5a:08:0f:94:ed:02:bf:6a:3a:24:2d:14:46:90:15:
94:bf:56:cc:fe:de:72:92:e5:35:62:e0:35:ba:5f:12:55:34:
d8:24:7d:fe:c5:b2:0e:ef:02:a3:49:36:ce:c6:a2:ce:e6:a4:
e6:b0:cc:f2:2a:9c:72:f4:bd:ca:25:df:e3:cb:44:f9:08:4a:
c0:80:69:5f:07:0b:4a:6b:30:88:c8:2b:0f:c2:d4:b9:61:a9:
4d:b3:06:6c:05:09:88:aa:97:0b:00:92:d9:ad:fc:12:74:33:
ad:83:1c:6e:4c:d2:80:77:fe:e1:1e:1d:11:7d:b6:8d:cf:be:
5a:49:0f:8e:5a:17:2b:93:6d:73:f2:55:df:66:3f:26:4b:37:
26:b6:9e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 11:18:42 2024 by rpki-client on console-fra.rpki-client.org