Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O2aks6RRQ8J8d8uOzeuyAnHe2LM.roa
File: O2aks6RRQ8J8d8uOzeuyAnHe2LM.roa (raw, json)
Hash identifier: EtTKt08hetpAt6zn3rN6pR1BDsQIVAEDMeE6K+G1FCA=
Subject key identifier: 3B:66:A4:B3:A4:51:43:C2:7C:77:CB:8E:CD:EB:B2:02:71:DE:D8:B3
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD43DBDFE29D4E4226346F19D20798
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O2aks6RRQ8J8d8uOzeuyAnHe2LM.roa
Signing time: Tue 02 Jan 2024 10:34:33 +0000
ROA not before: Tue 02 Jan 2024 10:34:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212332
IP address blocks: 2a0e:b107:27b0::/47 maxlen: 48
2a0e:b107:27b2::/47 maxlen: 48
2a0e:b107:27b4::/47 maxlen: 48
2a0e:b107:27b6::/47 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Feb 2024 16:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:43:db:df:e2:9d:4e:42:26:34:6f:19:d2:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b66a4b3a45143c27c77cb8ecdebb20271ded8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d7:a2:a4:9a:0b:15:78:ea:45:8f:4c:81:28:
d8:0d:e5:e3:27:79:3b:55:c0:5c:4b:63:03:ab:85:
3f:c8:71:b0:7e:13:92:ce:97:a3:45:97:88:ac:d3:
f3:31:2f:a8:81:a9:b4:12:78:62:dd:cd:3a:4d:97:
50:71:9f:d3:32:b0:f1:b1:b6:ff:39:7a:f2:92:ec:
cf:50:32:c8:48:2e:88:dd:9a:28:61:07:be:b6:e2:
a9:c0:10:da:54:26:ae:7b:41:d2:65:73:49:92:3e:
bf:db:a0:9e:b0:3d:2f:a5:ad:71:32:70:54:47:a1:
88:66:5a:b2:7b:fd:31:2e:00:f1:ae:d6:03:fd:2c:
4e:29:34:99:7c:71:f9:27:33:e3:ff:c6:e0:1a:b7:
55:8a:68:c1:f5:d8:7f:22:7a:d2:33:11:5a:3a:90:
ce:d1:df:d8:8d:ea:f0:15:dc:e6:38:ba:a1:7b:10:
28:ad:7c:f6:a4:6b:0b:87:53:7e:be:6d:91:6e:dd:
08:6b:be:4e:b8:9a:74:a1:3d:f6:91:69:57:58:f2:
61:aa:d7:9f:b1:60:6a:ae:13:90:dd:34:5f:ee:eb:
4d:7c:85:64:e4:d0:0a:aa:c0:2f:b3:85:14:c8:45:
38:df:e8:f1:7c:c5:cf:c2:64:bd:01:62:66:89:ca:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:A4:B3:A4:51:43:C2:7C:77:CB:8E:CD:EB:B2:02:71:DE:D8:B3
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/O2aks6RRQ8J8d8uOzeuyAnHe2LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27b0::/45
Signature Algorithm: sha256WithRSAEncryption
74:dd:dd:c2:14:d4:61:fb:27:25:0e:1e:62:9a:b1:25:0a:c4:
3e:2b:81:56:b9:c6:02:f3:e6:bc:e8:fd:35:00:47:18:8c:f0:
ae:3f:cc:4c:ba:4f:42:a0:28:29:e2:3a:c9:6b:ad:f1:d5:ea:
4f:e8:a7:31:e7:83:4f:3a:b0:b7:2c:cd:62:09:98:db:16:5c:
cb:08:26:64:fa:b3:28:57:12:23:53:1c:88:07:e4:ab:55:84:
23:f7:86:83:81:77:20:91:b6:09:c9:9c:79:7d:c9:c6:7c:11:
6d:88:d2:e0:7f:fe:88:91:13:03:0a:13:e9:e3:89:69:47:38:
85:d7:4c:86:74:86:9e:1f:d5:1f:35:21:49:f9:66:30:9d:a9:
8b:b1:4a:36:be:07:bf:56:c7:b2:49:a5:a7:67:91:49:1a:e9:
71:1c:a7:17:57:6c:cc:da:f8:f2:9a:51:c6:0c:40:7e:2e:d5:
17:93:f3:73:7c:9d:20:68:51:6a:17:37:b9:7e:9b:53:77:a6:
7e:c4:54:2f:b3:79:e2:a3:e8:8b:31:83:c7:ed:fa:fc:68:92:
f1:d6:d6:e0:dc:9f:16:c1:8c:c3:a0:fb:f8:7d:d0:4e:9b:43:
17:48:9a:f4:74:a9:39:32:20:b4:44:66:1e:78:9a:02:ea:1e:
ee:96:e5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:30 2024 by rpki-client on console-fra.rpki-client.org