Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nL_fXoRhonH-8YftD6whCVwVyb4.roa
File: nL_fXoRhonH-8YftD6whCVwVyb4.roa (raw, json)
Hash identifier: d8pSsy/4rX8CJ+qeqkwX04ucT4/rDH1fzAnOxKWvo7U=
Subject key identifier: 9C:BF:DF:5E:84:61:A2:71:FE:F1:87:ED:0F:AC:21:09:5C:15:C9:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185DE40B342B2811E02536FC3F286B96EF6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nL_fXoRhonH-8YftD6whCVwVyb4.roa
Signing time: Mon 23 Jan 2023 10:51:00 +0000
ROA not before: Mon 23 Jan 2023 10:51:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211946
IP address blocks: 2a0e:97c0:145::/48 maxlen: 48
2a0e:97c0:148::/48 maxlen: 48
2a0e:97c0:143::/48 maxlen: 48
2a0e:97c0:146::/48 maxlen: 48
2a0e:97c0:141::/48 maxlen: 48
2a0e:97c0:149::/48 maxlen: 48
2a0e:97c0:144::/48 maxlen: 48
2a0e:97c0:142::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:40:b3:42:b2:81:1e:02:53:6f:c3:f2:86:b9:6e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 23 10:51:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cbfdf5e8461a271fef187ed0fac21095c15c9be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:66:b7:96:31:ab:b5:a7:1b:64:f9:18:ea:58:
cb:d2:14:a0:23:29:f9:28:1d:6e:e8:c6:9e:f8:ae:
8a:b2:b4:da:d8:3d:83:20:79:ac:07:2e:43:e1:22:
33:66:79:dd:41:38:f5:50:ef:a4:83:41:97:24:8f:
0d:c5:6e:23:84:1d:ea:d8:79:81:8c:df:e4:d4:07:
f2:41:db:9d:13:42:b2:0a:09:a1:27:6d:b3:41:2c:
a2:7d:fc:b2:4e:b4:e7:7a:47:4b:d2:56:04:3e:2c:
cc:85:db:dc:5f:f3:b6:61:f4:b6:92:17:26:93:46:
77:d0:ff:22:9e:9f:b4:7b:ad:6d:29:2b:0e:6b:54:
e2:e2:32:23:57:bb:3a:97:2c:41:e5:11:b1:07:4e:
b4:2f:86:0f:e8:bb:4b:56:11:e0:b9:24:e4:34:6e:
81:d6:65:35:d7:ac:a7:43:e8:24:94:69:7c:75:84:
01:12:4b:af:10:74:8c:22:bb:0f:6f:2f:cd:ee:25:
15:2e:b4:04:c7:f2:45:f7:99:aa:ce:a5:85:f1:39:
33:96:af:65:a3:c3:47:d7:52:11:02:42:be:49:cf:
5c:08:2b:66:c2:a0:0c:02:71:b0:fd:34:26:93:15:
41:5e:a4:7e:c1:4a:1e:ab:e2:a4:50:b2:7e:8d:cb:
83:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:BF:DF:5E:84:61:A2:71:FE:F1:87:ED:0F:AC:21:09:5C:15:C9:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/nL_fXoRhonH-8YftD6whCVwVyb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:141::-2a0e:97c0:146:ffff:ffff:ffff:ffff:ffff
2a0e:97c0:148::/47
Signature Algorithm: sha256WithRSAEncryption
84:be:50:62:55:a3:54:a9:45:38:e5:e2:db:17:ce:83:ab:be:
d5:50:29:58:01:5a:ea:7c:a5:c5:ae:7d:71:e2:f5:c5:15:13:
1a:47:01:65:67:f5:66:20:d4:bc:60:cd:25:d3:e4:9b:58:9b:
1a:c6:fc:3c:8b:6b:5d:1f:e7:99:c6:c1:b2:a8:15:15:63:84:
18:5b:ec:fe:95:87:7b:f0:d3:8e:c2:1d:90:ba:f2:01:86:28:
bd:36:3e:e7:64:3a:fb:69:b0:d6:3a:b4:e6:11:dc:fa:7e:b7:
a1:5e:1e:12:0a:6a:89:a4:72:88:ef:d2:0b:f7:1b:45:52:c6:
92:4e:5c:63:d1:a8:09:84:e5:05:51:8b:b3:a6:13:c4:31:59:
63:6b:54:cc:fa:1d:6e:9c:66:0b:59:e1:d4:f3:01:d5:be:10:
22:18:fd:03:28:0a:27:ab:4f:d5:bc:93:e3:03:f2:04:e4:a6:
18:45:71:26:d7:1c:4d:b8:a3:5c:38:bd:96:28:40:af:dc:d9:
d7:00:3c:2a:a0:b2:5e:66:55:a3:24:c2:d4:64:2e:e4:94:1e:
dd:fe:ca:c2:76:85:65:c4:6f:a9:f4:8a:66:c9:e2:3d:4e:6f:
fd:9c:ee:69:1f:35:8a:bd:12:72:a3:2e:f0:4a:4e:2e:03:82:
21:55:1c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:12 2024 by rpki-client on console-ams.rpki-client.org