Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W91V0dylSlRQFErTNizs6ezcwDg.roa
File: W91V0dylSlRQFErTNizs6ezcwDg.roa (raw, json)
Hash identifier: 3+YpKZTvmhO7K8DDQPiTDFFb9xypVagyYDys1Fv9VoY=
Subject key identifier: 5B:DD:55:D1:DC:A5:4A:54:50:14:4A:D3:36:2C:EC:E9:EC:DC:C0:38
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018BDC2C725AEDFF0447A17E69799FC45C7E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W91V0dylSlRQFErTNizs6ezcwDg.roa
Signing time: Fri 17 Nov 2023 07:26:22 +0000
ROA not before: Fri 17 Nov 2023 07:26:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211484
IP address blocks: 2a0e:97c0:3b0::/44 maxlen: 48
2a0e:97c0:360::/44 maxlen: 48
2a0e:97c0:360::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 16 Dec 2023 18:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dc:2c:72:5a:ed:ff:04:47:a1:7e:69:79:9f:c4:5c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 17 07:26:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bdd55d1dca54a5450144ad3362cece9ecdcc038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:65:45:50:f0:b3:f8:b3:fe:87:a0:9a:ca:
24:ca:be:72:c6:28:00:5f:9d:bc:39:45:92:56:3b:
f6:cd:4c:85:bc:ac:fa:93:ed:31:57:3d:97:27:c8:
bf:8f:c3:64:2b:b0:74:98:c4:49:a2:51:42:5a:76:
64:eb:a6:b1:15:3d:c1:85:fe:ec:17:de:8c:04:4d:
a0:7e:43:24:25:ea:a8:70:ec:7b:2c:27:e1:f0:a9:
53:44:88:7e:58:1d:1e:bc:73:24:3f:30:a6:1a:10:
c8:0e:71:35:32:29:97:60:e2:c7:89:5e:b5:5c:c6:
2b:9e:2d:e2:94:28:03:a4:23:df:dd:7b:fa:5a:ac:
c4:71:5e:2a:ad:2f:fa:fa:c7:fa:6b:6f:02:41:ef:
bd:55:15:69:1e:06:a8:65:ca:26:5e:96:cd:50:63:
10:c1:f7:b4:fa:5a:46:cf:6c:db:59:96:9a:8f:7a:
0d:54:c5:06:37:8e:c6:90:f6:31:f3:53:e8:3a:c0:
46:d7:97:0b:87:12:81:69:7e:83:5c:ad:40:22:9f:
ac:46:4f:d5:13:28:80:bb:dc:26:6d:51:d0:22:cb:
30:37:63:22:3f:38:1c:b2:79:a5:a8:70:78:7c:a1:
73:31:cd:0d:fc:e5:d8:73:a1:62:19:76:1c:83:6c:
a0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DD:55:D1:DC:A5:4A:54:50:14:4A:D3:36:2C:EC:E9:EC:DC:C0:38
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W91V0dylSlRQFErTNizs6ezcwDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:360::/44
2a0e:97c0:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
2e:af:1e:56:69:73:c4:44:c3:04:12:de:a1:cb:6f:f8:0c:b2:
98:8e:f0:4b:f7:3e:bf:a4:dd:1f:65:05:d8:bb:6f:16:e0:43:
6d:37:eb:b9:f1:ed:97:72:52:05:86:de:b5:2f:cb:25:41:60:
62:34:25:76:1c:24:20:16:11:d5:5f:d9:cb:33:ce:da:9e:23:
34:be:4c:83:e7:df:26:9c:6a:db:ab:85:40:f0:bf:e6:2c:08:
40:1e:4a:f0:3f:99:49:60:29:5d:e6:db:9a:0d:6a:05:15:33:
e1:bb:28:a0:62:ff:f6:84:33:e5:39:31:f7:42:30:12:91:38:
f1:2d:03:5d:de:79:ab:e0:2e:18:be:ce:e3:d9:aa:4b:30:7f:
30:89:96:d0:55:01:13:96:c1:37:9e:09:ae:be:fc:e9:82:19:
b7:c2:75:c5:d0:bd:9f:70:c2:4d:b0:d0:1e:17:a1:00:8b:9c:
d2:47:37:6f:72:ee:45:94:0d:f5:4f:40:ed:71:85:c3:6a:be:
de:6d:a2:47:4a:17:e6:90:4a:36:8c:88:10:08:8f:97:3c:b4:
b5:8f:f7:67:30:06:6d:9d:f4:53:a6:fb:1b:15:ed:fb:e2:27:
f9:ca:77:e0:b2:61:15:1f:b7:8f:a2:67:78:c9:0f:4a:83:c0:
86:b5:22:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org