Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b5oKQk1XvEG0N6msQIeSm4AhT7I.roa
File: b5oKQk1XvEG0N6msQIeSm4AhT7I.roa (raw, json)
Hash identifier: fwbrqGxHz5Dt0SUhPJs/HGYdBC4T19+79HE60uYmZmc=
Subject key identifier: 6F:9A:0A:42:4D:57:BC:41:B4:37:A9:AC:40:87:92:9B:80:21:4F:B2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD0F85751F16ECEB5ED945C2A5ACB5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b5oKQk1XvEG0N6msQIeSm4AhT7I.roa
Signing time: Tue 02 Jan 2024 10:34:19 +0000
ROA not before: Tue 02 Jan 2024 10:34:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205977
IP address blocks: 2a0e:b107:760::/48 maxlen: 48
2a0e:b107:765::/48 maxlen: 48
2a0e:b107:76a::/48 maxlen: 48
2a10:2f00:120::/48 maxlen: 48
2a0e:b107:764::/48 maxlen: 48
2a0e:b107:769::/48 maxlen: 48
2a0e:b107:768::/45 maxlen: 48
2a0e:b107:763::/48 maxlen: 48
2a0e:b107:768::/48 maxlen: 48
2a0e:b107:760::/44 maxlen: 48
2a0e:b107:762::/48 maxlen: 48
2a0e:b107:767::/48 maxlen: 48
2a0e:b107:761::/48 maxlen: 48
2a0e:b107:766::/48 maxlen: 48
2a0e:b107:76b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 14:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:0f:85:75:1f:16:ec:eb:5e:d9:45:c2:a5:ac:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f9a0a424d57bc41b437a9ac4087929b80214fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:79:fd:f2:c6:8f:21:87:ba:02:70:97:5e:
6d:7d:54:f8:2a:00:2f:b7:82:d3:92:81:2b:a9:2a:
b0:55:c3:25:df:74:e7:67:24:22:e4:1d:1c:c8:24:
1a:87:21:2c:18:d1:e2:2f:9c:2f:b4:22:c2:37:75:
6d:54:82:96:69:03:02:b6:a4:1d:b0:9f:3d:8a:9e:
f0:4d:3f:14:de:f0:19:d2:e8:5e:df:5f:7e:33:6a:
fa:04:d5:9c:08:7b:60:f4:92:fb:98:ae:e7:9c:ca:
e8:17:af:b2:88:49:8a:ff:85:c9:96:a3:08:94:3b:
fa:1b:ce:da:d6:cb:11:eb:42:df:b4:91:89:a6:95:
8d:f5:a0:80:cb:6d:b5:0e:9c:e5:09:9b:d9:60:8d:
f6:e0:4c:b7:52:71:a6:fc:93:b2:50:b6:8d:d3:bc:
1e:97:61:cf:be:ca:47:f9:f6:e7:85:ba:43:80:16:
d8:b5:15:55:45:ce:44:6f:f6:4f:d3:0a:4a:c2:75:
6c:70:47:04:af:bd:32:c1:9a:7c:af:06:1b:37:f0:
f9:46:6c:56:ff:43:76:07:2f:82:85:87:db:df:76:
19:cf:7b:1c:1b:24:e4:1f:f8:da:28:a2:5d:07:2f:
3f:aa:6f:73:13:b4:5e:60:3e:8c:c9:3a:92:f1:73:
f5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:0A:42:4D:57:BC:41:B4:37:A9:AC:40:87:92:9B:80:21:4F:B2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/b5oKQk1XvEG0N6msQIeSm4AhT7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:760::/44
2a10:2f00:120::/48
Signature Algorithm: sha256WithRSAEncryption
99:aa:5c:aa:cf:7f:5a:ac:0a:83:78:22:fa:3e:44:22:cd:dc:
34:2d:84:db:5a:6d:67:69:f3:11:2b:db:c6:9b:6d:2a:fd:48:
4b:7b:02:88:38:70:70:dd:57:5b:c9:f1:e8:7d:44:68:26:53:
37:bc:c0:0d:fa:c2:2b:8e:70:4d:19:77:14:47:5d:64:c1:ab:
a2:c5:51:69:ec:f7:f3:c8:b4:ee:1e:97:49:b7:b5:78:33:fa:
1e:dd:5b:91:9c:a2:c5:4e:ff:2c:1b:77:69:0a:41:24:38:26:
fe:a8:06:25:a4:b0:cf:ad:a5:e0:c3:bf:f2:62:2f:a5:b9:1a:
4a:b1:4c:11:d7:69:83:d5:8d:d6:29:e5:f6:c4:16:f6:dd:a9:
b2:ab:fe:22:13:a3:05:7c:dc:82:2c:34:d0:19:ea:d9:34:f6:
71:25:99:82:4c:03:44:67:79:ca:96:36:d2:36:33:86:c7:0d:
4d:0f:b9:9a:bf:f4:a4:ef:d6:65:e4:59:cf:6a:c8:c5:48:6d:
b6:b1:8a:06:69:ca:dd:9e:23:63:57:3c:9a:88:58:e3:ee:a1:
52:0b:3b:53:ba:36:d7:8e:c7:f2:6e:ae:64:67:cc:35:b1:50:
35:91:69:4c:6b:fc:92:dd:2d:2e:9d:b4:f2:33:63:4a:e8:fb:
3a:90:63:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:10:23 2024 by rpki-client on console-fra.rpki-client.org