Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/to_gLVOK61a7IXF8Yw7Dd3JICRA.roa
File: to_gLVOK61a7IXF8Yw7Dd3JICRA.roa (raw, json)
Hash identifier: o80bcnSakc4p6o9vf0wcbRegC2DCVdPSYD+sR5oC+eU=
Subject key identifier: B6:8F:E0:2D:53:8A:EB:56:BB:21:71:7C:63:0E:C3:77:72:48:09:10
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191234C40CB8C1971C1203E89A25D3762F4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/to_gLVOK61a7IXF8Yw7Dd3JICRA.roa
Signing time: Mon 05 Aug 2024 16:08:05 +0000
ROA not before: Mon 05 Aug 2024 16:08:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214645
IP address blocks: 2a0e:97c0:3b0::/48 maxlen: 48
2a0e:97c0:3b1::/48 maxlen: 48
2a0e:97c0:3b2::/48 maxlen: 48
2a0e:97c0:3b3::/48 maxlen: 48
2a0e:97c0:3b4::/48 maxlen: 48
2a0e:97c0:3b5::/48 maxlen: 48
2a0e:97c0:3b6::/48 maxlen: 48
2a0e:97c0:3b7::/48 maxlen: 48
2a0e:97c0:3b8::/48 maxlen: 48
2a0e:97c0:3b9::/48 maxlen: 48
2a0e:97c0:3ba::/48 maxlen: 48
2a0e:97c0:3bb::/48 maxlen: 48
2a0e:97c0:3bc::/48 maxlen: 48
2a0e:97c0:3bd::/48 maxlen: 48
2a0e:97c0:3be::/48 maxlen: 48
2a0e:97c0:3bf::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 05 Aug 2024 23:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:23:4c:40:cb:8c:19:71:c1:20:3e:89:a2:5d:37:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 5 16:08:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b68fe02d538aeb56bb21717c630ec37772480910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:69:e2:90:88:c9:df:0b:ed:03:45:f5:bb:64:
8b:2d:d5:99:d8:e5:0e:8e:d0:0a:b7:21:4f:e5:75:
ef:d3:ba:76:b5:d3:85:49:33:66:2b:68:af:b3:5f:
b5:ca:dc:d3:1d:28:81:cb:df:7c:3e:e5:a0:ba:7b:
6b:6f:c4:9f:1f:df:eb:3a:de:9a:09:b1:d2:9b:b8:
54:e6:13:fd:6b:78:53:2e:54:6d:f8:b1:9d:be:2b:
31:51:32:48:b7:94:47:0f:9c:b3:85:89:be:6a:17:
a5:1f:97:fa:7c:2f:17:04:25:bf:38:d2:67:a8:a2:
2d:2c:64:4b:e9:45:54:15:2c:cc:6b:76:9f:2a:34:
86:42:96:2e:ce:b6:0d:82:fa:d6:63:41:0e:14:3d:
43:53:25:f4:22:bf:76:60:88:d9:23:e8:4b:eb:a9:
a1:8e:c0:ae:d7:b3:e3:ab:f2:c4:15:37:c3:e3:e8:
60:02:13:97:4f:f1:28:73:73:14:b3:79:4b:4d:9a:
26:a7:42:a2:f4:f6:d9:eb:05:8c:6c:4c:61:25:05:
5e:f8:bb:e0:6d:5a:46:57:a6:a7:93:37:4e:cd:13:
d8:81:31:a6:fe:21:6f:44:b0:4f:46:36:2a:66:e2:
7f:d2:41:05:59:35:60:8f:b2:17:fa:53:91:e8:55:
84:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:E0:2D:53:8A:EB:56:BB:21:71:7C:63:0E:C3:77:72:48:09:10
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/to_gLVOK61a7IXF8Yw7Dd3JICRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
44:a8:06:2d:1c:6e:96:6d:92:bb:fe:ed:1a:88:0a:f8:99:d9:
d1:b4:55:9c:f0:78:d1:8d:10:63:fe:cd:9c:0f:47:3d:55:94:
7e:0d:4c:da:c0:55:8d:04:b8:28:89:93:02:31:f6:f5:e1:31:
85:c2:07:64:15:c1:9c:ef:c9:30:fb:b7:4f:56:a0:12:74:18:
68:20:d7:57:2f:3d:b0:dc:ca:d2:4a:21:76:82:37:85:31:bf:
18:0f:98:91:21:df:7e:80:be:0f:f8:50:50:bd:a4:9a:4e:fd:
d7:9c:1d:5b:26:50:5f:ec:76:9d:1f:1e:af:be:47:98:d3:15:
c1:20:64:27:d5:b4:09:e2:0d:96:d5:f3:f2:98:ea:4b:1f:80:
a4:05:26:2b:8b:a7:93:4a:5e:0f:bd:3f:3e:a8:2f:48:17:d4:
0b:39:88:5d:34:e1:68:03:8f:b3:84:d0:b1:bc:b4:8b:cf:57:
b3:e3:93:36:d6:3a:cf:c3:58:91:49:6b:ea:75:f6:c8:18:9b:
69:15:46:24:ee:df:d5:02:f3:27:07:3b:97:b9:34:20:9a:af:
fd:7e:82:e7:9e:64:2d:17:23:d4:8a:93:99:a2:f4:a4:59:b1:
cd:91:48:a1:2b:e3:d7:31:26:a5:ac:cb:ec:c4:de:18:0c:6b:
1d:14:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 01:47:03 2024 by rpki-client on console-ams.rpki-client.org