Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b3WNVfR1HexZTECKA9wkfEaBkwc.roa
File: b3WNVfR1HexZTECKA9wkfEaBkwc.roa (raw, json)
Hash identifier: 9UkRglxJXuEXlPYlpjppprWxjQhVzP/FyiuJvYm5edo=
Subject key identifier: 6F:75:8D:55:F4:75:1D:EC:59:4C:40:8A:03:DC:24:7C:46:81:93:07
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191266084F333CD32C82EB7777846DB9194
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b3WNVfR1HexZTECKA9wkfEaBkwc.roa
Signing time: Tue 06 Aug 2024 06:29:05 +0000
ROA not before: Tue 06 Aug 2024 06:29:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214645
IP address blocks: 2a0e:97c0:3b0::/48 maxlen: 48
2a0e:97c0:3b1::/48 maxlen: 48
2a0e:97c0:3b2::/48 maxlen: 48
2a0e:97c0:3b3::/48 maxlen: 48
2a0e:97c0:3b5::/48 maxlen: 48
2a0e:97c0:3b6::/48 maxlen: 48
2a0e:97c0:3b7::/48 maxlen: 48
2a0e:97c0:3b8::/48 maxlen: 48
2a0e:97c0:3b9::/48 maxlen: 48
2a0e:97c0:3ba::/48 maxlen: 48
2a0e:97c0:3bb::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 11:40:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:60:84:f3:33:cd:32:c8:2e:b7:77:78:46:db:91:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 6 06:29:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f758d55f4751dec594c408a03dc247c46819307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:69:05:ae:22:1e:18:5a:76:0f:81:bc:ac:3e:
08:4f:b2:6d:c6:70:f6:09:3e:dc:e2:79:95:ff:cc:
da:6b:1b:55:99:ed:f5:b7:45:6e:18:19:1e:04:cb:
06:ea:4c:40:6e:5f:67:34:7f:c8:c2:80:e4:76:df:
c9:18:6a:e9:e7:3e:2b:4c:19:79:16:3d:5c:c6:43:
37:67:67:f0:d8:c0:27:63:d2:1e:ba:95:ba:05:86:
c8:26:44:b3:57:2d:1e:74:08:b7:5d:d5:fb:0c:66:
1d:95:19:ac:b5:2a:90:a6:d2:d6:7c:11:94:02:8d:
32:08:e8:13:60:b2:e8:79:f0:e3:6f:05:f6:94:69:
48:b3:82:9d:e1:9d:77:eb:ac:38:80:87:31:7b:bf:
62:a1:e5:52:1a:2d:ef:4f:98:8a:b9:f8:a2:28:b6:
fe:94:d1:cf:b3:0d:b3:7c:b6:c4:bd:24:60:97:2e:
75:66:59:e5:22:63:f1:3b:f4:0b:04:52:23:6c:56:
a1:f3:2c:0e:18:0f:91:4a:e8:e1:74:a6:f1:91:79:
06:a0:9f:b8:62:fb:5a:fb:bc:65:b6:b8:cb:eb:45:
80:ab:ec:fb:28:d6:4d:9e:00:dc:e0:53:ad:f2:da:
2f:55:00:81:6a:2c:dd:52:56:28:03:9c:de:a1:52:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:8D:55:F4:75:1D:EC:59:4C:40:8A:03:DC:24:7C:46:81:93:07
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b3WNVfR1HexZTECKA9wkfEaBkwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3b0::/46
2a0e:97c0:3b5::-2a0e:97c0:3bb:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
38:6d:3a:1a:67:00:6e:7c:f7:91:69:46:ba:65:d9:59:33:87:
d6:09:04:eb:0d:01:af:24:49:7b:82:aa:a3:2c:bb:7e:20:0b:
97:b7:b0:a9:af:df:7c:8d:6f:d9:32:97:4d:6b:e6:be:ac:f8:
91:0d:4b:27:51:33:22:1d:a0:bd:f5:b3:d2:16:1c:2d:7e:27:
e9:96:73:aa:5e:d3:db:ef:eb:3c:7a:1e:66:fe:89:9d:75:74:
87:9b:98:26:33:37:64:09:43:39:c2:72:4b:27:04:6d:0e:a5:
cf:20:b2:fd:cd:92:3a:e4:a0:6c:b0:53:5f:34:ea:ff:e9:c1:
0b:67:5e:3a:da:d3:c9:d8:d5:b3:5d:80:62:03:ce:2c:50:d1:
41:fe:fc:9c:18:d0:9c:61:56:e8:7e:bc:86:b4:2c:35:7a:8c:
b2:cb:df:96:11:73:71:5a:2b:f2:1f:7b:e0:78:ad:d5:b8:fa:
dc:5d:e9:f0:cd:c8:c5:bc:f4:5a:2c:a5:94:bd:35:18:07:a4:
37:53:58:85:4f:a4:d0:5e:50:18:b2:22:92:f6:f9:76:fb:7e:
86:10:e3:39:8f:90:09:80:c6:d0:76:b6:3d:78:dd:28:b7:2d:
27:5f:60:c3:37:8f:98:c1:a6:ec:22:9b:01:2b:8f:2c:9b:2a:
dc:5e:e5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 15:08:08 2024 by rpki-client on console-ams.rpki-client.org