Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OwP05brtRRnGp01N69TOaKmJbsc.roa
File: OwP05brtRRnGp01N69TOaKmJbsc.roa (raw, json)
Hash identifier: boMojimfZx9yGDGn895QMs/VXQlRrtBD84STg7QrV9k=
Subject key identifier: 3B:03:F4:E5:BA:ED:45:19:C6:A7:4D:4D:EB:D4:CE:68:A9:89:6E:C7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E79D51CD53436302B1D0CDF7A0BC6A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OwP05brtRRnGp01N69TOaKmJbsc.roa
Signing time: Mon 02 Jan 2023 05:15:05 +0000
ROA not before: Mon 02 Jan 2023 05:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149938
IP address blocks: 2a0e:97c0:376::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 May 2023 22:51:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:9d:51:cd:53:43:63:02:b1:d0:cd:f7:a0:bc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b03f4e5baed4519c6a74d4debd4ce68a9896ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:bd:3b:f7:c1:25:9a:22:1d:b6:18:66:78:
b3:0c:b8:b6:5c:9b:21:c7:b7:8e:14:1f:75:80:5c:
d6:64:76:b4:24:9b:7d:78:04:0c:72:db:5d:a2:d5:
48:b7:a5:84:0b:47:18:de:c4:7c:45:59:99:ab:e0:
44:f3:4d:84:d3:bc:30:5c:d3:b6:ed:8a:3f:87:ab:
65:4c:1f:15:10:d8:ae:b5:21:23:08:cd:6d:59:a7:
e5:a2:23:94:72:a8:5b:55:1a:61:8a:7e:43:e9:71:
6e:30:12:a7:32:2e:f5:24:92:4e:fd:4d:20:1b:7e:
81:ab:27:e9:81:00:a1:3a:b2:84:45:f3:e1:85:41:
33:e0:19:d1:e2:1f:47:de:80:06:3e:5b:a8:53:17:
87:95:06:e8:03:9d:8c:b9:31:2e:e2:04:df:04:c2:
c5:60:9b:e5:2a:e6:3e:46:0f:f8:53:6c:e8:12:91:
6b:ce:ab:d2:af:4c:ee:db:12:ef:12:ba:cd:b6:7c:
48:d2:c5:a7:74:7e:9c:1b:20:3e:26:29:8a:cc:5a:
a7:9f:b3:3a:6d:6c:74:72:22:8b:79:2e:66:f3:65:
7e:20:c8:bf:42:9e:be:d7:ea:6d:6b:67:7b:59:db:
83:b5:c9:16:fb:29:40:78:82:24:06:42:ee:bb:11:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:F4:E5:BA:ED:45:19:C6:A7:4D:4D:EB:D4:CE:68:A9:89:6E:C7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OwP05brtRRnGp01N69TOaKmJbsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:376::/48
Signature Algorithm: sha256WithRSAEncryption
02:96:b7:6c:6c:12:42:11:96:bc:ce:d4:96:34:f8:27:ac:f8:
e4:30:4a:43:eb:e8:5d:69:f4:ec:62:e4:5a:f2:65:b8:29:4d:
fb:9e:0c:2c:a6:8b:5e:03:61:ea:99:15:fd:75:3c:79:3b:1b:
78:09:24:fc:c3:fe:0c:63:25:cb:ae:a3:ab:1e:21:b4:62:1e:
bb:b9:13:06:69:50:2a:9e:e3:a8:c2:b3:2e:02:e2:b0:4f:dd:
ed:2e:5c:f4:fd:02:6f:4e:aa:b3:1e:0f:5c:84:ec:cc:91:46:
1f:41:6c:f3:68:5f:30:d3:58:8e:8e:18:90:62:15:a2:0b:75:
78:06:03:cd:c0:ed:34:87:be:b0:5d:cf:52:ac:a3:07:3a:d4:
ca:c6:fa:4e:e8:47:fe:12:ef:49:ab:e7:80:8a:3a:fd:12:84:
5d:98:fa:7c:4f:92:5e:40:e0:d2:3f:33:24:63:df:85:af:2c:
21:91:4f:c6:e1:25:a8:a8:5d:3a:65:17:60:ea:74:d8:ef:03:
af:96:3e:36:2a:96:96:6e:c4:3b:0f:1a:8f:a7:27:df:d7:6d:
0b:81:b1:9d:5e:73:73:46:c6:01:ae:c7:57:e8:59:06:4c:60:
b8:01:13:f6:48:d5:f7:c6:5e:49:ee:d6:75:15:af:f6:47:1d:
05:fa:63:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org