Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wM3HtzA2V6PoLAHru05-lxlE50U.roa
File: wM3HtzA2V6PoLAHru05-lxlE50U.roa (raw, json)
Hash identifier: uB9l7eEKimxmcIiH5O8F0rZ44opCPCB4mG0rz4ifDM8=
Subject key identifier: C0:CD:C7:B7:30:36:57:A3:E8:2C:01:EB:BB:4E:7E:97:19:44:E7:45
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018603CCA7504360DC16E092C55814AADA2E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wM3HtzA2V6PoLAHru05-lxlE50U.roa
Signing time: Mon 30 Jan 2023 17:49:49 +0000
ROA not before: Mon 30 Jan 2023 17:49:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211484
IP address blocks: 2a0e:97c0:3b0::/44 maxlen: 48
2a0e:97c0:360::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 17 Nov 2023 07:26:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:03:cc:a7:50:43:60:dc:16:e0:92:c5:58:14:aa:da:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 30 17:49:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0cdc7b7303657a3e82c01ebbb4e7e971944e745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:3e:f0:eb:cc:1a:b3:fa:f8:3c:da:71:1f:
be:78:f2:0f:70:24:aa:3e:88:01:50:74:47:de:8a:
43:e4:da:e1:09:80:a5:1f:da:1e:71:64:c1:36:a6:
f4:41:f8:08:e8:f5:76:83:9d:ff:74:b2:8d:35:01:
b7:f3:df:55:83:c8:c9:b0:42:38:ae:34:29:f7:2a:
ee:6e:6c:dd:20:28:58:c2:87:cd:e4:24:68:55:3f:
ad:8d:82:f0:f7:b8:a2:9f:2d:d2:87:da:66:78:d4:
fc:51:47:67:da:0a:26:f7:56:6d:c8:c7:1e:0c:ab:
d6:88:0e:44:0b:2f:09:d2:b3:e2:08:af:0f:39:9c:
a7:c2:ee:4e:8c:28:81:09:5b:8d:96:45:19:2f:ee:
b6:8e:e8:4b:33:5d:98:ae:a9:1b:19:de:a3:3c:61:
ff:39:36:cc:ed:8a:f3:cc:79:fe:05:d3:af:7a:d1:
e1:56:65:d0:99:6d:92:5d:92:85:6b:e6:5e:23:82:
a8:a6:9f:27:35:83:dd:a1:d0:77:e5:a8:39:8f:24:
69:14:6a:6d:c0:e8:7a:e1:a6:be:e0:1b:81:5f:86:
48:14:df:b4:2e:cb:42:87:f7:ea:90:56:22:cf:a3:
d1:a4:76:ec:83:07:19:3b:bb:d7:d1:c9:fe:60:5e:
d2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:C7:B7:30:36:57:A3:E8:2C:01:EB:BB:4E:7E:97:19:44:E7:45
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wM3HtzA2V6PoLAHru05-lxlE50U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:360::/44
2a0e:97c0:3b0::/44
Signature Algorithm: sha256WithRSAEncryption
9a:85:78:68:bd:42:dc:30:4f:66:18:c2:63:44:87:92:33:b7:
64:1a:1b:5d:e6:ad:ac:62:ec:75:e7:be:80:9e:09:14:19:1e:
4f:69:96:ce:30:58:81:37:27:72:94:cd:c7:11:a5:0a:ed:1a:
3e:6a:b4:87:c4:59:a7:94:52:41:56:2b:15:7d:d9:d4:1e:cf:
2e:c0:91:42:be:9b:8b:88:06:8d:42:cd:86:a2:f3:8f:2c:f1:
ee:d7:c5:68:70:95:f2:9a:36:ae:d8:89:5e:e4:25:5a:13:d3:
2b:0f:b3:91:1c:7e:70:d3:11:f7:7f:4b:b0:b2:56:8f:76:ef:
d7:fd:cb:b1:8b:69:8e:26:c2:62:b9:4a:df:a8:fe:d1:f2:d9:
d2:f6:ff:03:11:9a:91:70:eb:65:90:b4:32:06:cb:30:b2:de:
b0:0e:b3:e0:b9:11:2e:b0:0d:f2:e6:30:46:6b:64:e9:6f:58:
a4:6f:0a:fd:8f:bd:90:09:34:66:9b:57:ad:82:b2:41:09:51:
b7:c0:4b:56:04:c7:8d:2a:61:01:a9:18:cd:9c:14:b8:3d:3f:
6b:9d:90:3a:15:14:3f:74:1e:55:16:41:f1:9f:6f:bf:68:67:
a3:62:83:0f:e1:a4:3c:c5:89:d2:27:1c:a2:88:3a:0a:cb:57:
c0:f0:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:34 2024 by rpki-client on console-ams.rpki-client.org