Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/oDYIclyrAWRi91B5FaylAc6HKtM.roa
File: oDYIclyrAWRi91B5FaylAc6HKtM.roa (raw, json)
Hash identifier: 10TIRXqyiwC+1W3mUt4yaN3ccGs5VMJ1Qkde7eykI9c=
Subject key identifier: A0:36:08:72:5C:AB:01:64:62:F7:50:79:15:AC:A5:01:CE:87:2A:D3
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 018B039C1A3879A31A31470B5756E2272C0A
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/oDYIclyrAWRi91B5FaylAc6HKtM.roa
Signing time: Fri 06 Oct 2023 06:10:43 +0000
ROA not before: Fri 06 Oct 2023 06:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a02:3040:50::/48 maxlen: 48
2a02:3040:4e::/48 maxlen: 48
2a02:3040:4f::/50 maxlen: 50
2a02:3040:43:ff00::/56 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:03:9c:1a:38:79:a3:1a:31:47:0b:57:56:e2:27:2c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Oct 6 06:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a03608725cab016462f7507915aca501ce872ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:b4:fb:e7:4d:b1:49:56:36:d4:9a:45:e9:
2e:bf:fa:05:53:ae:47:16:03:75:f7:27:ff:15:d0:
98:3c:cf:4d:a0:33:6e:40:e1:8d:47:b9:a1:fe:83:
ff:41:9a:05:1e:a3:84:88:6f:c2:f4:71:46:6c:71:
b2:2b:ca:b5:ad:ec:1e:10:9b:74:07:49:df:0b:da:
21:aa:f8:22:7f:37:07:17:17:7a:a5:d9:ec:fe:c3:
69:1c:83:e4:4b:f5:8a:9a:a3:b7:6e:b7:4d:b8:62:
40:c4:37:25:b4:23:9a:31:36:3a:bf:6a:7e:c0:38:
40:88:38:8d:68:50:0d:a9:11:00:9c:68:0f:38:92:
47:65:58:19:84:df:a1:7f:f5:cf:29:b2:e1:d4:1d:
64:14:89:46:e2:e7:b0:7b:b9:45:85:63:35:c8:4c:
c6:06:bd:3c:41:98:bf:98:df:a9:4d:5f:f0:9e:db:
6c:a1:13:e9:02:10:19:98:ad:a0:f6:46:0d:0d:0d:
d8:df:7f:f3:78:66:ea:d3:2f:68:76:16:ca:56:da:
b9:ef:4f:df:a6:1b:df:2b:ce:d0:f3:53:84:78:e9:
11:a1:6a:7a:d1:9d:25:b6:ae:fd:41:e9:28:ce:91:
69:4b:02:66:60:a7:ff:55:da:a2:30:80:72:06:aa:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:36:08:72:5C:AB:01:64:62:F7:50:79:15:AC:A5:01:CE:87:2A:D3
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/oDYIclyrAWRi91B5FaylAc6HKtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
2a02:3040:4e::-2a02:3040:4f:3fff:ffff:ffff:ffff:ffff
2a02:3040:50::/48
Signature Algorithm: sha256WithRSAEncryption
94:bb:2c:bc:bc:d8:d1:ab:36:3b:dc:be:fe:8f:52:94:2a:99:
3a:ba:67:a2:12:c2:4e:a3:56:df:a0:ea:b9:39:ea:93:b6:53:
33:5a:0e:22:78:af:2d:f6:16:53:c2:4f:19:0e:f8:6a:1f:10:
3b:6b:98:a3:e9:c6:03:2f:b9:36:e8:ff:fa:15:e7:45:11:57:
fa:53:91:9a:22:fd:a9:f3:b0:54:b1:f0:52:25:64:d5:de:e3:
f3:76:6d:24:6e:4f:bd:8c:77:3b:21:62:49:43:4e:d4:ca:b2:
cf:34:30:27:c5:c7:b6:83:9a:86:00:aa:ad:1d:0b:ab:df:e8:
4b:d4:12:69:84:6c:46:16:6e:39:6b:66:4a:11:77:68:2e:2d:
7b:b6:4f:b8:9b:ec:32:6b:e0:52:81:f5:27:4c:0b:fd:73:2a:
03:d8:24:4c:68:4e:2d:2b:47:13:d9:2a:da:c6:8c:e4:ee:aa:
ce:ac:02:41:3b:89:f6:2c:f2:e7:49:ca:2f:d9:9e:00:ed:30:
e0:e6:14:31:26:d2:7c:ee:0d:6f:13:83:b3:19:85:8b:7e:2a:
5b:d8:c2:a6:ba:48:a6:55:cd:70:6b:f8:07:3d:87:c6:1c:8d:
bc:d3:51:31:34:8b:9e:ca:8c:68:df:07:4f:45:1d:b9:6e:3a:
67:14:5a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org