Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PoOUWfoNI0qXlyKuEWMBW3hOYf4.roa
File: PoOUWfoNI0qXlyKuEWMBW3hOYf4.roa (raw, json)
Hash identifier: gz914rFfD3daDnFsFMHs/v/J3Bagh98Ee9oGsxTKwek=
Subject key identifier: 3E:83:94:59:FA:0D:23:4A:97:97:22:AE:11:63:01:5B:78:4E:61:FE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188911BB785E01DACC8CD3717A39A4B5E91
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PoOUWfoNI0qXlyKuEWMBW3hOYf4.roa
Signing time: Tue 06 Jun 2023 14:28:12 +0000
ROA not before: Tue 06 Jun 2023 14:28:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198304
IP address blocks: 2a0e:b107:120::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jul 2023 15:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:1b:b7:85:e0:1d:ac:c8:cd:37:17:a3:9a:4b:5e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 6 14:28:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e839459fa0d234a979722ae1163015b784e61fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:1e:c4:88:35:41:72:df:cd:58:14:11:44:
c4:7f:fb:e0:e2:6c:99:53:1a:e9:a1:9c:2e:97:81:
9c:47:60:59:4a:a6:fc:c2:b9:49:2d:cf:93:91:ad:
ec:2d:b5:c0:6b:23:3a:c2:e8:45:c4:98:7a:c9:16:
e5:d7:15:3a:13:7a:41:92:be:fa:7d:fa:0b:94:5a:
bc:05:4d:1c:27:b3:a4:99:83:ac:7f:0d:d9:cd:e7:
70:5b:63:34:9b:1d:47:2c:c6:98:b5:89:dd:a8:84:
8e:e0:b8:50:7d:8c:20:f1:46:16:1c:b9:30:b3:63:
ed:0d:28:f5:60:62:df:ee:82:b3:3f:c1:15:89:5e:
95:30:a9:fa:92:b9:0b:45:ad:13:3d:e4:80:41:01:
19:9b:1f:af:b5:72:68:33:a7:f0:d0:65:d3:b8:33:
40:93:cd:64:24:25:b7:d3:94:2e:4e:c1:26:61:40:
ea:e6:67:34:1d:03:d7:4a:60:7c:66:1c:40:13:6e:
53:c1:f7:35:66:58:f6:1f:b8:82:de:31:41:de:b7:
85:df:9e:9b:c0:a9:54:3f:d1:a9:9f:58:5b:a6:d4:
f1:ea:a8:55:e9:81:a8:20:37:27:90:40:44:69:a5:
f4:0a:d1:ed:ce:1a:7c:05:24:34:e6:4c:0c:a7:71:
b2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:83:94:59:FA:0D:23:4A:97:97:22:AE:11:63:01:5B:78:4E:61:FE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PoOUWfoNI0qXlyKuEWMBW3hOYf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:120::/48
Signature Algorithm: sha256WithRSAEncryption
5c:e4:a3:42:fb:97:19:4a:05:9d:fd:a2:47:7b:dc:7a:17:80:
a2:75:b2:9e:a6:b7:44:cf:84:27:43:42:c5:18:86:55:35:47:
40:21:48:6d:9d:9f:9b:7f:7c:f9:86:f0:4f:11:ea:ab:64:05:
69:00:c8:a7:3b:a6:b6:28:73:9e:f9:d2:86:16:61:46:93:04:
83:97:72:5b:ad:dc:c2:ae:d7:18:fa:de:d9:7c:e2:79:86:ff:
3b:a8:e9:1c:7b:da:88:d7:8a:09:3e:f0:ae:86:e5:1c:7d:cb:
40:6f:45:74:3d:94:d5:25:c5:0a:25:7f:05:84:1b:2b:6b:78:
89:97:c9:1a:76:d9:52:97:4e:ff:c0:7c:60:08:fd:8c:6a:95:
2e:b7:b0:d2:9f:5d:8e:7e:98:0f:07:b1:ac:b6:ef:d2:38:1a:
cc:ae:0a:98:fc:6e:50:15:02:60:71:b9:5b:0a:b6:f1:52:97:
78:47:18:53:6a:b5:72:bc:48:12:13:d5:b5:1e:6b:d5:b2:52:
61:11:2b:7d:82:18:95:da:86:ef:df:4f:ba:f7:47:3c:b2:c9:
76:64:5f:e3:c6:1d:21:59:7d:e9:f9:d0:9e:9d:de:e8:49:6d:
82:f8:19:5c:dc:96:af:64:8c:fc:94:53:39:3a:54:d1:a0:60:
fb:94:78:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:31 2024 by rpki-client on console-fra.rpki-client.org