Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/penvPyBN9Hyp4h-cndSD0BBYEvU.roa
File: penvPyBN9Hyp4h-cndSD0BBYEvU.roa (raw, json)
Hash identifier: 3rHkdVEEXkzhyrTLjdXwKf7ppkBulJhfHDWWrzIXCas=
Subject key identifier: A5:E9:EF:3F:20:4D:F4:7C:A9:E2:1F:9C:9D:D4:83:D0:10:58:12:F5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01883DDF02EF4161F174FFEA635A49C76C8D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/penvPyBN9Hyp4h-cndSD0BBYEvU.roa
Signing time: Sun 21 May 2023 10:33:25 +0000
ROA not before: Sun 21 May 2023 10:33:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:b107:5d0::/44 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:97c0:76f::/48 maxlen: 48
2a0e:97c0:73f::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jul 2023 16:54:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3d:df:02:ef:41:61:f1:74:ff:ea:63:5a:49:c7:6c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 21 10:33:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5e9ef3f204df47ca9e21f9c9dd483d0105812f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:30:26:5b:14:40:a1:41:47:61:77:fd:ac:
b6:cd:9a:3a:70:a3:c1:8a:03:cf:f5:1f:67:45:b7:
30:34:12:bb:e0:44:75:b6:80:91:5c:a0:7a:c3:a0:
5d:60:e3:77:78:f3:d0:73:6d:4f:53:46:3d:f4:a1:
bb:d9:16:bc:50:98:11:50:a2:4d:3b:77:a2:62:f3:
3a:65:e4:cd:e8:54:c6:7b:48:74:49:0b:94:d1:b1:
20:d0:fd:4e:9c:46:2d:02:93:5a:b5:00:6a:8d:3e:
70:72:aa:46:56:fa:ab:40:93:50:ed:de:49:18:59:
4f:82:ec:ab:3c:c4:bd:b7:75:66:12:c4:37:f4:1f:
06:88:9c:4a:2b:0a:ee:a9:4f:c9:95:5c:cf:1f:79:
48:32:65:26:e5:50:73:90:23:56:a4:74:b6:4c:db:
82:e3:d8:fa:e6:6d:49:ef:53:af:1b:34:92:3c:51:
84:b3:8e:37:5b:74:9a:0a:8d:de:38:3c:c3:3e:4d:
e1:ed:e7:71:df:0d:ca:9c:e9:49:ab:0c:99:73:75:
86:13:06:29:ff:f5:8a:3e:c4:df:fd:bf:c9:fd:51:
91:a6:9d:2e:63:ab:39:8c:8b:13:0c:e7:71:c9:a1:
14:fb:d6:e5:2c:8d:f5:d5:ac:4c:e6:ea:ba:c9:cc:
4c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E9:EF:3F:20:4D:F4:7C:A9:E2:1F:9C:9D:D4:83:D0:10:58:12:F5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/penvPyBN9Hyp4h-cndSD0BBYEvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3b87:ff00::/40
2a0e:97c0:73f::/48
2a0e:97c0:750::/48
2a0e:97c0:76f::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:b107:5d0::/44
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
8c:24:f6:66:10:d9:18:6b:49:4a:39:db:2c:f7:21:12:a8:62:
99:bf:df:77:0e:a4:2d:09:7f:32:6b:c5:33:f5:b4:7b:75:42:
08:57:77:ec:9e:7e:05:9e:ed:e4:ba:37:42:7c:ea:00:b3:06:
29:d2:21:a9:5e:a5:d3:78:f4:47:90:e0:37:fc:5c:f5:ed:7b:
01:2d:60:18:06:0b:74:3c:9b:80:42:3b:95:0b:2d:ff:e6:75:
01:c3:dd:f2:31:a4:e6:86:4e:2d:82:dd:85:bf:05:39:08:21:
c6:0b:ea:3e:ad:72:87:83:41:69:42:9c:5f:6a:6f:76:53:b3:
a6:1c:3d:88:8e:21:83:27:1f:ef:8a:64:b1:4f:af:7d:71:b9:
46:e2:11:ce:bb:94:34:f1:de:37:fb:49:ff:53:82:f0:0d:a8:
d2:6f:55:a4:17:bb:fa:ca:87:80:c6:c6:65:2a:49:80:06:9b:
a8:ed:fa:d9:18:0c:00:5e:e1:08:8c:e4:5f:9c:d9:fa:d3:60:
1b:14:de:d5:9a:aa:7e:4c:74:3b:7b:0d:a1:70:f5:35:22:08:
21:92:a0:e1:65:eb:5a:31:f3:2c:01:66:49:65:33:1d:df:6e:
03:3d:72:1b:cc:fa:c9:8f:6c:0c:ff:ae:73:aa:0d:f0:d0:4c:
b4:5a:16:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:31 2024 by rpki-client on console-ams.rpki-client.org