Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wok3VfnWzRMXRKoVMKkaJXQF51M.roa
File: wok3VfnWzRMXRKoVMKkaJXQF51M.roa (raw, json)
Hash identifier: klZJNUQEXpHqtEyCATbq1xDD3Zcz5pMZI+BsFj7NmGg=
Subject key identifier: C2:89:37:55:F9:D6:CD:13:17:44:AA:15:30:A9:1A:25:74:05:E7:53
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E7BFBEB6087944EDC98C98B07F1619
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wok3VfnWzRMXRKoVMKkaJXQF51M.roa
Signing time: Mon 02 Jan 2023 05:15:14 +0000
ROA not before: Mon 02 Jan 2023 05:15:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204840
IP address blocks: 2a0e:97c0:3c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 30 Jun 2023 22:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:bf:be:b6:08:79:44:ed:c9:8c:98:b0:7f:16:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:15:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2893755f9d6cd131744aa1530a91a257405e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:e5:84:19:9a:d1:2a:93:80:67:0f:ea:b8:
61:2a:a4:c1:d0:a0:2e:51:04:de:bb:91:1e:b1:c5:
d2:cb:4f:76:40:44:bf:4b:3b:a1:76:34:5a:c7:ce:
9f:33:20:c8:e3:4e:e1:73:ea:a7:37:b8:24:11:59:
0b:09:c4:67:e3:e3:c7:d9:89:07:2e:c8:ae:f8:fa:
43:7d:43:f0:3f:80:96:fe:08:f4:f4:8f:98:75:01:
a1:22:12:e9:75:60:fe:7c:bc:27:e3:b6:49:0b:fd:
b0:b0:2e:77:6a:ba:4e:b8:62:74:4f:82:fe:c6:e2:
3b:47:54:56:8b:f7:6d:1f:59:6a:c4:8b:ee:53:1a:
9a:7c:70:58:85:1f:87:b3:39:95:58:32:dc:61:3c:
bb:54:bb:a0:13:1a:1d:57:48:16:1a:93:4b:2f:d7:
23:4c:bb:2d:37:4c:8b:81:d0:f9:5e:96:49:6b:3c:
e7:f2:ab:bd:ac:ef:58:9e:0d:56:9e:d5:b7:56:3f:
20:3a:9d:b8:26:a9:a2:18:18:8d:79:d6:09:35:5a:
7f:f1:1a:34:a6:c9:b6:ac:8e:42:0f:21:7f:25:96:
1e:18:62:4a:4a:08:42:6b:f8:2d:90:eb:a2:e3:d4:
6a:45:b3:14:95:92:6b:9e:0d:5e:ed:70:b5:bd:2a:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:89:37:55:F9:D6:CD:13:17:44:AA:15:30:A9:1A:25:74:05:E7:53
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/wok3VfnWzRMXRKoVMKkaJXQF51M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:3c0::/44
Signature Algorithm: sha256WithRSAEncryption
44:73:09:82:bf:2b:cc:8c:6d:97:cf:42:63:8a:aa:2d:c4:17:
89:8e:d4:2c:12:f7:21:e4:95:03:6b:fe:86:42:39:7e:b9:6e:
67:7a:2c:cc:46:9a:22:b4:4f:df:d4:1b:46:b5:25:2e:6c:ba:
51:91:d2:58:f4:9d:5c:79:e7:b5:b7:29:e1:b5:9a:d0:4a:26:
46:83:69:96:38:8c:55:6e:34:0c:fd:52:a0:b2:80:93:2b:14:
3c:97:41:75:61:05:c1:9e:e0:7d:59:54:3a:e6:d8:ae:69:13:
29:9d:a8:91:ff:b1:62:e0:73:c7:66:ca:b6:bd:ca:22:82:46:
2d:c1:97:92:a8:57:6d:5e:20:3e:6a:4d:b9:1e:7f:53:20:e0:
85:11:b2:6b:4b:d3:54:e2:c7:f3:0b:63:1b:1b:44:b6:36:65:
33:2a:b5:ec:e4:a7:3d:bc:25:0d:d8:ea:e7:26:c4:e9:54:63:
f5:50:07:19:8c:5c:5d:c8:63:ff:71:1d:ea:ca:80:47:cc:8f:
51:2b:81:ed:f5:c3:ac:fe:8d:07:73:f9:ac:d1:bb:71:f4:d5:
20:13:11:da:cd:48:15:89:e7:e5:26:98:a5:c4:f1:40:9d:a3:
9f:18:52:e2:a1:a2:ed:c9:69:91:3e:a9:1a:9f:07:b5:ff:f3:
7e:4c:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:34 2024 by rpki-client on console-ams.rpki-client.org