Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I-OOMNhw_HDL4mIMQ-LhLOZppl8.roa
File: I-OOMNhw_HDL4mIMQ-LhLOZppl8.roa (raw, json)
Hash identifier: YvV2QtW8rVERIGixQsRoifU1PWI93xQq7raQxfDYUOA=
Subject key identifier: 23:E3:8E:30:D8:70:FC:70:CB:E2:62:0C:43:E2:E1:2C:E6:69:A6:5F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FA14067CF1DC82ED5D35D580A58376D16
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I-OOMNhw_HDL4mIMQ-LhLOZppl8.roa
Signing time: Wed 22 May 2024 17:01:43 +0000
ROA not before: Wed 22 May 2024 17:01:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215011
IP address blocks: 2a06:de00:50::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:97c0:8a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 30 May 2024 13:45:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:40:67:cf:1d:c8:2e:d5:d3:5d:58:0a:58:37:6d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 22 17:01:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23e38e30d870fc70cbe2620c43e2e12ce669a65f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:50:98:e7:cc:fe:d4:68:59:13:97:10:4f:
c4:f4:ab:44:71:ec:4d:6f:4d:3d:f4:cc:60:58:fd:
9e:85:a9:9b:c4:9a:f4:bf:a7:97:cb:28:f2:8b:64:
0d:9f:cf:24:05:ef:b2:29:ca:62:e9:9b:ec:6a:f7:
d4:69:ea:95:1f:d6:c6:6c:f9:21:de:73:77:31:9e:
9b:28:f5:79:be:e3:eb:66:50:4c:b2:5d:6e:9f:70:
fe:91:dc:c0:56:f5:bb:39:63:1d:0d:64:fe:ed:d5:
bb:a7:9c:de:a1:f0:bb:e9:a0:1e:c9:28:8f:54:ef:
8d:84:fa:44:0c:a0:1d:e6:b0:fd:d7:71:bc:96:54:
ed:fc:63:ee:96:be:2b:ae:f8:03:81:e1:54:93:d0:
76:eb:54:79:72:5d:06:d4:c6:72:01:fb:eb:ed:d5:
b8:65:10:ac:ab:aa:d7:69:d2:99:4d:19:98:8f:63:
3c:0a:6c:62:27:61:38:b3:c7:66:3c:cf:d7:32:82:
0d:72:54:bf:8e:06:8c:01:ef:67:e4:b4:13:a6:1f:
f2:74:fd:ed:f8:7c:df:fe:4d:8e:c5:3c:7f:94:61:
ef:56:5e:ae:6b:c1:47:40:ab:d2:79:0e:06:5c:00:
e0:70:de:1d:66:d8:37:b5:36:e1:28:cf:dd:c6:2e:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:8E:30:D8:70:FC:70:CB:E2:62:0C:43:E2:E1:2C:E6:69:A6:5F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/I-OOMNhw_HDL4mIMQ-LhLOZppl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:50::/44
2a06:de01:d0::/44
2a0e:97c0:8a0::/44
Signature Algorithm: sha256WithRSAEncryption
11:1c:89:14:11:d2:82:b4:1a:1c:25:ad:c4:26:13:d9:96:20:
37:26:a8:22:3d:56:c0:9d:03:08:aa:df:21:df:c6:1a:2b:7a:
8b:df:46:b1:bf:31:90:9f:5b:fb:77:55:99:8c:9f:bf:22:9f:
ff:b2:b7:82:71:28:27:cb:f5:23:53:a9:5d:f5:e5:16:d1:0a:
d8:ee:b7:69:25:3e:53:36:34:b5:f8:66:3b:ca:46:eb:e3:cd:
26:3c:28:66:02:e9:26:8f:8a:1b:47:ed:81:33:9e:f0:85:6d:
68:0b:65:e6:e8:8c:95:e5:ab:af:61:f8:1d:40:f2:2f:b2:f8:
6f:66:39:e6:f5:cc:9d:87:2e:09:bd:94:26:3d:a2:d8:74:85:
db:52:a5:a3:cb:46:de:73:c2:bb:3e:8f:8c:4e:70:e6:68:6c:
c2:fd:41:37:37:b0:12:72:35:2c:ac:12:c2:ff:96:a9:74:b2:
a2:81:bc:90:7e:96:e6:ee:ac:66:bc:99:7d:ee:bd:6d:26:db:
17:e0:00:11:20:ef:c7:b8:6a:37:2f:8d:98:cb:ed:d2:3f:41:
75:df:7a:17:0f:de:2f:f8:8e:f3:1d:d4:d1:49:fc:1f:59:ce:
68:5d:55:62:8f:82:e4:28:4a:7b:02:78:b4:7a:70:f7:08:85:
b3:79:5c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org