Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V34NiJTo6XdA_NS38jfTnXO04Tk.roa
File: V34NiJTo6XdA_NS38jfTnXO04Tk.roa (raw, json)
Hash identifier: AH+aFEIC2KXPjLvZm+kbaAKUCpyJC+AIBTBPkMHQU1M=
Subject key identifier: 57:7E:0D:88:94:E8:E9:77:40:FC:D4:B7:F2:37:D3:9D:73:B4:E1:39
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191277E28E18161EEA4FE307D6923CFA170
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V34NiJTo6XdA_NS38jfTnXO04Tk.roa
Signing time: Tue 06 Aug 2024 11:41:05 +0000
ROA not before: Tue 06 Aug 2024 11:41:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214645
IP address blocks: 2a0e:97c0:3b0::/48 maxlen: 48
2a0e:97c0:3b1::/48 maxlen: 48
2a0e:97c0:3b2::/48 maxlen: 48
2a0e:97c0:3b3::/48 maxlen: 48
2a0e:97c0:3b5::/48 maxlen: 48
2a0e:97c0:3b6::/48 maxlen: 48
2a0e:97c0:3b7::/48 maxlen: 48
2a0e:97c0:3b8::/48 maxlen: 48
2a0e:97c0:3b9::/48 maxlen: 48
2a0e:97c0:3ba::/48 maxlen: 48
2a0e:97c0:3bb::/48 maxlen: 48
2a0e:97c0:3be::/48 maxlen: 48
2a0e:97c0:3bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 15:53:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:27:7e:28:e1:81:61:ee:a4:fe:30:7d:69:23:cf:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 6 11:41:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=577e0d8894e8e97740fcd4b7f237d39d73b4e139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:88:1e:11:5e:8e:66:ee:ea:49:56:19:49:ef:
5e:06:96:7a:b2:a8:a8:ab:bf:e1:40:b5:f6:51:ca:
96:c4:48:39:85:f9:a9:54:0e:2e:88:88:96:54:06:
02:2c:66:95:0c:31:75:05:ca:da:d9:61:b4:e8:01:
e4:ea:a4:2c:36:f7:0c:53:b7:82:82:6a:4e:95:b4:
dc:55:b9:48:92:43:68:e8:b2:95:32:69:2e:f2:90:
f7:6e:e0:7b:d8:f6:f8:2a:1d:8e:9d:05:53:b7:0c:
04:64:22:56:19:22:18:6b:45:27:30:29:6d:a5:b5:
a8:ee:8e:94:0c:56:1a:a3:46:17:44:3e:33:7e:30:
c2:89:a9:d5:60:63:aa:c6:1c:cd:b4:cc:a3:5b:10:
cd:b1:f2:e6:31:f3:09:72:da:71:5d:b8:14:6c:08:
65:ad:98:95:b4:2a:05:b5:00:bd:28:27:d4:49:d9:
fc:ba:2a:49:f3:6b:d4:9c:bd:b2:82:2c:17:62:fc:
03:38:cc:78:39:27:9a:0f:b4:2e:3e:11:26:27:19:
77:c3:7e:5f:d7:45:e9:5b:da:28:fc:9e:8d:7b:61:
4b:ab:58:56:bb:84:3d:bc:ee:d8:bc:4f:8c:13:f9:
f9:e2:3b:43:1a:c5:e4:10:12:df:44:cd:c1:82:68:
86:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7E:0D:88:94:E8:E9:77:40:FC:D4:B7:F2:37:D3:9D:73:B4:E1:39
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/V34NiJTo6XdA_NS38jfTnXO04Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3b0::/46
2a0e:97c0:3b5::-2a0e:97c0:3bb:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:3be::/47
Signature Algorithm: sha256WithRSAEncryption
ad:84:f6:b3:80:6a:a1:ac:f8:e1:7f:8e:da:36:4f:76:c8:20:
e0:4a:96:d3:90:b0:1c:c6:ac:b4:19:f0:88:ee:51:d3:e1:78:
e2:e1:23:73:d5:7d:61:87:4f:e0:77:f0:6d:36:22:a5:dc:d5:
0b:17:7d:99:2e:4f:43:21:ba:a4:8a:57:13:ca:86:61:ba:56:
6f:53:1f:74:62:90:e3:27:b6:cc:70:b2:de:91:7e:ea:cb:74:
83:58:b7:e8:be:e2:79:28:77:82:ed:f9:31:77:e8:01:79:fa:
74:96:bd:ee:a1:fa:6f:cf:15:e9:c4:13:ab:54:34:8e:5e:56:
b0:d6:67:cf:d5:b9:bd:6e:d8:36:80:03:a4:b1:1b:03:da:d7:
1a:89:78:26:dd:94:55:24:40:dd:de:48:41:15:d8:8a:f7:18:
27:57:da:c6:13:aa:5e:99:3f:fd:46:ee:6e:d7:94:75:33:f7:
20:d8:2f:d3:1a:58:ad:f0:2a:dd:12:f8:7b:09:4f:06:a6:f3:
48:8f:fe:bb:80:b6:24:bb:f4:39:b5:c4:2d:43:c0:15:51:0c:
6d:c5:bb:f3:cf:ba:ca:95:db:a9:ae:ad:3a:87:16:6c:54:04:
8d:f8:f6:5c:86:b8:6c:3b:d9:71:dc:f9:13:97:43:25:85:23:
d2:21:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:38:01 2024 by rpki-client on console-ams.rpki-client.org