Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/osioJHHq82kbYdbU_LUhtKmHSrk.roa
File: osioJHHq82kbYdbU_LUhtKmHSrk.roa (raw, json)
Hash identifier: LmRx0yg7ytSshbhvr62APh4RPLGCdzmNAqGoReYZPhg=
Subject key identifier: A2:C8:A8:24:71:EA:F3:69:1B:61:D6:D4:FC:B5:21:B4:A9:87:4A:B9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0192F7E3015F5C1112342605C88D903D0C52
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/osioJHHq82kbYdbU_LUhtKmHSrk.roa
Signing time: Mon 04 Nov 2024 15:55:02 +0000
ROA not before: Mon 04 Nov 2024 15:55:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213928
IP address blocks: 2a0e:97c0:190::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 05 Nov 2024 11:24:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f7:e3:01:5f:5c:11:12:34:26:05:c8:8d:90:3d:0c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 4 15:55:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2c8a82471eaf3691b61d6d4fcb521b4a9874ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:77:29:a0:c2:ca:07:5c:e8:61:ce:cd:9f:
b3:3b:55:27:df:3e:dc:f5:f4:9f:3f:5e:8c:b3:3a:
db:a7:1f:73:ec:3b:5c:db:71:78:8d:8b:22:5f:ad:
34:1e:ff:48:6d:49:bb:62:d8:cd:29:2f:f1:bd:d5:
21:a6:80:f9:47:05:6d:37:5e:9c:86:86:5c:81:68:
bc:e5:1d:42:d0:53:9d:57:f6:0d:a9:9f:0b:f1:b8:
7c:20:49:6b:5a:32:51:1a:f6:c7:ad:4c:18:e1:4d:
2d:42:23:a8:be:e4:02:de:91:88:f7:24:ac:25:d7:
24:ea:80:41:79:7a:9c:c7:42:62:30:ee:fe:3e:2b:
2a:9c:a8:4c:3d:5e:28:59:83:23:9a:c4:da:6d:b1:
c5:63:b5:68:88:c5:d1:6b:d2:0e:d6:8f:cb:58:69:
0a:f0:3e:c9:1d:03:0c:08:c9:3c:a6:c6:10:6a:41:
a7:1c:25:7a:73:76:46:e4:33:c0:ee:0d:b2:12:3f:
36:aa:e6:f8:12:19:8c:ca:39:2a:af:c0:38:d0:e2:
cb:e0:72:c3:3c:23:10:bf:c9:28:e5:54:1a:a5:5e:
8a:4f:9f:98:30:e0:19:d5:36:16:57:b9:01:28:f6:
7f:c6:6a:2b:a9:31:3c:61:c0:b3:5e:72:be:c9:0f:
2d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C8:A8:24:71:EA:F3:69:1B:61:D6:D4:FC:B5:21:B4:A9:87:4A:B9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/osioJHHq82kbYdbU_LUhtKmHSrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:190::/44
Signature Algorithm: sha256WithRSAEncryption
48:36:fa:ae:26:1a:61:ce:d9:90:39:40:85:c4:c1:eb:7d:4f:
fa:fd:b7:2f:fc:99:79:05:d7:47:c6:2f:da:d8:a0:4f:06:49:
a7:f3:59:19:27:7d:fc:f0:95:1d:b9:61:4b:4a:e0:45:96:fa:
18:d9:54:8a:98:01:cb:60:83:cc:df:9d:76:24:d6:86:b3:27:
67:a0:b6:1b:8d:35:95:b7:44:84:07:3f:1a:c2:24:8e:19:16:
5f:a5:b9:a1:6a:10:60:b8:51:dd:3b:b3:fe:a4:f4:5b:87:61:
9c:e1:37:9b:b5:50:e3:f6:f2:2b:b2:99:0f:be:5d:a7:95:8e:
4b:33:9d:42:86:b4:7b:1d:99:9b:48:e2:a6:cd:ec:41:ae:a7:
5d:0d:ed:c0:50:1b:d5:81:18:bf:2b:ec:93:0f:91:84:38:b7:
0d:ff:94:5a:c0:8a:5d:a0:aa:5a:11:73:90:2a:3b:af:d3:35:
77:e9:9f:b3:d6:d7:7c:bf:bd:c1:1c:aa:f2:0a:cb:54:0e:06:
43:6d:aa:3a:4d:69:c4:b4:ff:19:be:f1:24:f0:f7:6a:b6:4d:
6d:4d:7e:d9:02:6c:44:b9:13:b6:a0:19:ec:dc:e3:9d:ce:f6:
66:6b:10:c4:fd:55:6d:00:06:bf:a5:7e:bd:fe:c8:e3:c7:72:
46:2a:fb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:35 2024 by rpki-client on console-fra.rpki-client.org