Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CetwGqKhTtT8Ux3Ok4Pg7dv_GOk.roa
File: CetwGqKhTtT8Ux3Ok4Pg7dv_GOk.roa (raw, json)
Hash identifier: ztFR4Z1KGeo0dkIHV6SfBMgrdOYZmrsvFzG53SQY9pY=
Subject key identifier: 09:EB:70:1A:A2:A1:4E:D4:FC:53:1D:CE:93:83:E0:ED:DB:FF:18:E9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FB71DEEEAE3301B49ADB7786F535F9FE7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CetwGqKhTtT8Ux3Ok4Pg7dv_GOk.roa
Signing time: Sun 26 May 2024 22:55:43 +0000
ROA not before: Sun 26 May 2024 22:55:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a0e:b107:27ac::/48 maxlen: 48
2a0e:b107:27c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 07 Jun 2024 21:08:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b7:1d:ee:ea:e3:30:1b:49:ad:b7:78:6f:53:5f:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 26 22:55:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09eb701aa2a14ed4fc531dce9383e0eddbff18e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:cd:48:ed:6b:15:16:0f:c8:99:cc:be:06:
aa:eb:21:9c:68:36:a6:c1:b1:6c:5a:9b:86:35:5d:
f5:60:27:33:49:32:11:d1:4b:a8:d3:33:7e:69:2f:
30:b3:2e:b1:cf:4c:97:c1:ad:80:80:a8:3e:6c:1b:
2e:60:2d:5f:06:e2:71:d1:7b:00:f3:bc:82:fb:5a:
05:5d:1b:72:30:ed:44:03:f5:70:70:6e:7a:39:ce:
fd:0e:b9:22:06:2f:6c:8d:88:9e:2e:8a:bd:8b:3c:
ba:93:d7:7f:e7:3c:6e:31:c3:d8:78:97:d9:7f:67:
eb:5c:1d:b5:75:86:98:91:05:22:39:8b:bb:7d:5f:
67:a6:32:5a:5f:24:8f:16:91:d1:2e:b5:89:88:bb:
72:66:42:af:b4:39:a7:4f:93:24:58:be:c3:24:46:
dd:05:9f:ba:c7:4a:fb:8e:09:5b:b0:0e:cc:30:4d:
d1:f7:9b:0a:9f:80:d1:2d:e3:c4:43:6d:8b:6d:d4:
f1:3f:c0:9e:82:ea:12:05:1e:35:6e:db:b5:ee:78:
6c:e2:1e:4a:78:98:40:b2:e5:f9:fc:80:5d:20:ca:
6c:7e:e8:51:5f:2f:16:02:96:8e:c2:b7:b5:be:67:
57:5d:68:72:50:43:01:4e:15:ca:ee:57:e5:a8:fd:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:70:1A:A2:A1:4E:D4:FC:53:1D:CE:93:83:E0:ED:DB:FF:18:E9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/CetwGqKhTtT8Ux3Ok4Pg7dv_GOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27ac::/48
2a0e:b107:27c7::/48
Signature Algorithm: sha256WithRSAEncryption
c2:03:a1:5b:6f:a1:e9:22:09:15:bc:04:f4:ff:91:21:01:fa:
3c:32:2b:98:49:cb:d0:6c:0f:06:d7:66:fe:eb:e3:06:85:8d:
cf:67:db:0d:b9:33:76:2d:b5:2a:77:44:f1:6b:8d:95:41:9a:
e2:15:02:16:e2:30:a9:7d:db:c2:d3:f5:0a:b0:9b:6a:27:20:
29:42:98:4e:02:2c:e2:9d:bf:33:56:18:b1:ca:27:1f:19:88:
cb:a2:8c:cf:20:9a:2c:46:4e:a9:c0:8f:d4:ae:a9:0c:6d:e6:
49:be:13:af:1e:bd:40:60:67:f4:b9:7d:aa:64:30:b2:8a:86:
ef:ee:d9:c4:2c:a7:39:93:2c:71:a0:fc:65:71:5a:ed:b5:70:
6c:41:86:1c:7d:51:90:0a:b4:13:11:a2:4e:27:77:84:cb:f3:
92:9c:31:68:e9:39:77:5f:52:5b:94:34:36:c1:14:c1:44:6c:
ab:ea:8d:76:72:82:75:2e:38:81:fa:a5:bf:0f:07:2b:d2:0e:
6b:20:05:8b:ef:2a:66:1a:1e:c7:95:4a:69:68:57:04:ad:8c:
be:8d:50:86:f3:15:25:1d:20:57:1d:57:e6:c2:35:29:4d:e9:
14:32:c8:eb:66:1f:1d:d8:4a:1b:99:a3:0e:3f:ef:a5:12:8a:
d0:ad:a6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 00:04:04 2024 by rpki-client on console-ams.rpki-client.org