Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C2wGjVFnCAs7ox-K-keptQk3Jtw.roa
File: C2wGjVFnCAs7ox-K-keptQk3Jtw.roa (raw, json)
Hash identifier: 3nVs5W2Ii3+VvxuLeqTpU+Ei8p/oz7B7+OsLNGxL4C4=
Subject key identifier: 0B:6C:06:8D:51:67:08:0B:3B:A3:1F:8A:FA:47:A9:B5:09:37:26:DC
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01904F21370120A957B05399FD1E018C5227
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C2wGjVFnCAs7ox-K-keptQk3Jtw.roa
Signing time: Tue 25 Jun 2024 11:21:35 +0000
ROA not before: Tue 25 Jun 2024 11:21:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202941
IP address blocks: 2a0e:97c0:1000::/38 maxlen: 48
2a10:2f00:187::/48 maxlen: 48
2a10:ccc0:800::/38 maxlen: 48
2a13:8382::/32 maxlen: 48
2a13:8383::/32 maxlen: 48
2a13:8384::/32 maxlen: 48
2a13:8385::/32 maxlen: 48
2a13:8386::/32 maxlen: 48
2a13:8387::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Jun 2024 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:21:37:01:20:a9:57:b0:53:99:fd:1e:01:8c:52:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 25 11:21:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b6c068d5167080b3ba31f8afa47a9b5093726dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e5:75:68:99:3a:70:c5:80:7e:99:f1:b7:46:
13:81:1e:03:7a:f8:28:68:a4:29:be:98:aa:ab:c2:
70:43:c6:91:80:2d:ab:90:5e:4f:0b:0d:8d:5e:61:
42:cc:71:af:6e:ab:cd:e9:92:ed:ab:48:66:6c:54:
64:8f:0e:37:18:03:8c:3a:4c:b0:f1:4e:fa:bf:49:
9d:43:86:05:8e:77:76:1a:2f:53:7e:f5:c8:47:e7:
6d:ad:71:95:1d:93:eb:73:a9:38:b9:c8:4e:03:fe:
36:9a:41:9b:bf:b1:e1:de:35:e7:d9:f4:47:31:1f:
67:57:ac:e2:72:78:54:7d:51:c7:cb:df:30:8e:b6:
f0:07:cb:00:3d:aa:f6:df:4b:83:ef:18:ac:b5:23:
b1:b6:d4:e9:76:2c:c8:06:ff:f2:39:99:0d:15:49:
20:e1:31:b5:4f:3c:4f:f7:c0:32:b4:4a:b6:ba:e4:
06:e5:24:e0:39:1d:5d:45:93:aa:70:23:c8:ad:47:
97:20:83:e5:31:2e:67:b9:14:b3:bf:8a:73:fd:3a:
04:9a:0a:23:69:2c:bf:54:a9:f7:e6:9a:79:be:8b:
f1:8e:96:cd:ba:8b:cb:7d:e4:15:b1:69:9b:98:a9:
fd:79:4c:57:8f:86:9e:e9:2d:37:95:e4:1d:e2:c1:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6C:06:8D:51:67:08:0B:3B:A3:1F:8A:FA:47:A9:B5:09:37:26:DC
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C2wGjVFnCAs7ox-K-keptQk3Jtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:1000::/38
2a10:2f00:187::/48
2a10:ccc0:800::/38
2a13:8382::-2a13:8387:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
44:4f:ad:fe:57:f0:ca:48:bd:0a:4a:6b:19:c4:16:e1:87:bc:
3f:b7:a2:11:f7:c1:68:90:34:b8:af:7a:de:54:c7:67:43:74:
fa:3b:c6:d4:ec:7d:fc:c5:8e:9f:8c:5d:a5:17:fb:88:aa:44:
12:3f:13:56:22:0f:a3:22:de:77:8b:f4:c3:be:8d:45:d2:0e:
d4:26:a2:ac:0f:82:71:6c:12:55:03:c3:83:88:18:e0:ad:f6:
5b:a4:cb:2d:3d:c8:bd:d6:13:eb:de:1c:e9:1c:4c:ce:25:32:
00:c5:56:1e:47:98:f5:12:2e:16:45:89:d8:c8:01:4c:48:ea:
c1:60:1c:79:7a:4e:e9:2c:fe:d3:33:8e:cc:ac:f1:f3:10:3c:
0c:d4:df:34:d5:34:56:45:74:51:a6:3c:30:43:0b:3d:7d:f2:
2f:c0:10:74:d5:7c:35:77:b6:f0:02:c4:ec:b9:23:90:1f:e6:
3b:b5:af:83:ed:60:f9:3c:3c:76:cf:3f:41:0e:09:16:5d:2e:
bf:68:70:96:d3:73:b4:d7:88:7e:c2:a1:98:12:44:22:1b:6d:
71:dc:0f:af:db:22:30:94:f1:6b:cb:93:9d:16:91:fe:f8:d7:
e3:de:eb:53:49:df:74:f0:aa:6b:62:27:a2:79:84:6b:ab:3b:
de:5c:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 21:58:39 2024 by rpki-client on console-fra.rpki-client.org