Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tX5Obm32mu2pYvTZYvvUMDgHRCU.roa
File: tX5Obm32mu2pYvTZYvvUMDgHRCU.roa (raw, json)
Hash identifier: pJYr21zhiqORuW6Cnt4nviTkyYeCWbrvXCJthxIw4gE=
Subject key identifier: B5:7E:4E:6E:6D:F6:9A:ED:A9:62:F4:D9:62:FB:D4:30:38:07:44:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0187DAF8121D0286836E39994B95192D78D3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tX5Obm32mu2pYvTZYvvUMDgHRCU.roa
Signing time: Tue 02 May 2023 05:38:23 +0000
ROA not before: Tue 02 May 2023 05:38:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211659
IP address blocks: 2a0e:97c0:261::/48 maxlen: 48
2a0e:b105:121::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 06:18:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:da:f8:12:1d:02:86:83:6e:39:99:4b:95:19:2d:78:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 2 05:38:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b57e4e6e6df69aeda962f4d962fbd43038074425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:8b:6f:06:bb:56:80:43:80:cd:47:59:9b:
6a:9b:43:3f:9d:7e:20:73:5d:a7:46:e1:91:c8:5e:
9e:8c:9e:55:e4:97:8a:6f:cd:fe:83:80:d8:44:d4:
06:ea:69:a0:2f:e5:e4:4c:8a:03:12:b9:b7:42:9d:
03:b3:09:ef:2c:21:c1:7e:83:ba:e2:64:bf:1d:6e:
54:1d:c0:c1:ab:b1:60:f4:39:9c:75:ec:a1:00:e1:
f6:d8:56:c7:78:6e:3a:30:1e:5a:c6:b1:cb:c9:f2:
b4:fb:ac:bd:cc:2e:95:04:f1:96:e0:2d:f5:05:9f:
9f:a2:e1:e6:44:4c:f4:cf:fc:fd:ad:d3:fc:89:fa:
ce:bf:56:29:f5:2c:f5:97:ac:52:16:5c:11:1c:05:
71:b8:4c:4b:0f:ee:98:a7:ab:6c:a9:82:93:39:e6:
69:ba:fb:78:c0:3b:a7:31:2c:77:94:06:00:29:b9:
56:53:42:32:6b:85:d7:a4:c3:f5:15:e7:13:99:79:
db:05:5c:7e:f0:68:24:48:21:77:f8:0a:5f:c5:f8:
72:f3:36:b7:6b:fd:f8:c0:b1:14:9c:e5:5d:8e:33:
ae:c2:8c:9a:b1:17:b0:9c:02:dc:11:cc:a4:55:49:
30:9e:cf:1d:c4:39:7b:43:0f:51:46:51:0f:99:59:
61:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:7E:4E:6E:6D:F6:9A:ED:A9:62:F4:D9:62:FB:D4:30:38:07:44:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tX5Obm32mu2pYvTZYvvUMDgHRCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:261::/48
2a0e:b105:121::/48
Signature Algorithm: sha256WithRSAEncryption
1c:ac:08:d0:21:54:8a:ca:dd:2a:ef:5c:51:18:c1:9d:84:cd:
7d:aa:ba:45:c7:eb:0b:2c:a6:00:26:87:3d:23:72:95:0d:f1:
b8:95:f7:ae:02:9c:ae:1d:e0:3e:c0:3d:19:57:6c:94:95:4c:
4f:c7:3f:42:38:a2:a6:39:88:9a:4e:8e:4d:54:c1:9e:0e:34:
4b:1c:23:76:f7:a1:ca:07:49:c1:ea:3f:85:c6:97:08:a1:7f:
5e:3a:69:ed:53:7d:c9:6e:6c:f0:b2:a3:11:20:a0:ca:23:b0:
f1:44:bc:2d:4b:b9:e6:9f:50:e3:bf:48:44:f2:bd:b1:db:fe:
ab:c4:69:e9:87:2a:6d:87:ef:df:33:ab:43:57:85:b0:dc:a4:
42:c6:0e:2a:9b:42:c4:a9:12:e9:aa:17:d9:05:3d:15:8a:dc:
c8:89:2e:e0:43:28:66:1d:5c:ae:d5:f0:fd:70:64:dc:b0:e4:
fb:e3:be:72:2d:b3:c2:09:44:82:20:a3:cc:c1:98:d9:c2:bf:
44:0f:ac:c1:c9:b4:8a:a6:7d:7d:b9:2f:19:41:e7:02:d1:f5:
88:31:10:c0:97:57:b2:4e:79:b6:13:d3:3f:81:5b:d7:f5:de:
ba:cf:96:9d:5d:f1:fb:c0:19:52:e7:f1:54:28:2c:3e:fd:ce:
99:a7:03:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:33 2024 by rpki-client on console-ams.rpki-client.org