Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/O32MRTrvMaXEzkqDn2L6bo9ZAj0.roa
File: O32MRTrvMaXEzkqDn2L6bo9ZAj0.roa (raw, json)
Hash identifier: ar2vyEIYu1jqJj09T/u+RgJlTi5tAbAO32byzNOb18Q=
Subject key identifier: 3B:7D:8C:45:3A:EF:31:A5:C4:CE:4A:83:9F:62:FA:6E:8F:59:02:3D
Certificate issuer: /CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Certificate serial: 01916CDCEAEE32D1A11158CB9B7A5BAC2124
Authority key identifier: 62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/O32MRTrvMaXEzkqDn2L6bo9ZAj0.roa
Signing time: Mon 19 Aug 2024 22:58:23 +0000
ROA not before: Mon 19 Aug 2024 22:58:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a01:e100::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Oct 2024 18:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:dc:ea:ee:32:d1:a1:11:58:cb:9b:7a:5b:ac:21:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d18b312e353e78fa8ee5f80d36f741cdcde3aa
Validity
Not Before: Aug 19 22:58:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b7d8c453aef31a5c4ce4a839f62fa6e8f59023d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:bd:19:53:07:09:07:de:0f:c1:11:14:a4:
86:2a:cc:d7:f5:9c:a1:f9:1b:11:22:14:e3:8f:1a:
04:74:a7:e6:5e:36:f8:bf:9a:94:69:ca:c8:40:4a:
52:74:35:c8:2a:e4:ef:bc:9d:d9:53:0c:94:f7:0d:
bb:df:f3:65:8f:8b:cd:d6:6a:12:d1:bc:c5:96:85:
83:5e:a1:f7:9b:e0:aa:61:ad:d8:bf:b7:c0:38:d3:
1b:08:90:d3:44:bc:39:ee:7b:ec:10:f1:2b:79:76:
e6:71:3b:7c:23:06:c0:14:0c:d4:61:7f:cd:55:e0:
bf:91:e7:81:1d:84:fe:1e:48:1c:5a:16:7f:b4:02:
c4:2e:61:36:96:eb:7e:0b:31:90:3c:be:99:57:f2:
62:29:ee:c5:94:8c:29:37:6a:49:4f:74:fc:5f:2c:
b5:b5:67:42:c0:8b:5b:0b:fe:b1:96:f5:79:b8:6f:
3d:cd:57:0d:29:a0:a9:ac:4c:84:42:62:a1:4c:a8:
91:d5:39:9e:dd:c7:7e:f3:5b:63:2b:28:aa:49:91:
13:90:58:1e:72:b4:78:d7:c9:a0:95:91:95:3a:db:
6a:ee:69:7c:e2:34:3c:b9:10:ac:53:f8:75:cd:76:
34:d2:8b:be:f6:76:62:97:5c:fc:82:e3:7e:ff:c8:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:8C:45:3A:EF:31:A5:C4:CE:4A:83:9F:62:FA:6E:8F:59:02:3D
X509v3 Authority Key Identifier:
keyid:62:D1:8B:31:2E:35:3E:78:FA:8E:E5:F8:0D:36:F7:41:CD:CD:E3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGLMS41Pnj6juX4DTb3Qc3N46o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/O32MRTrvMaXEzkqDn2L6bo9ZAj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3b9215-9807-481e-9a1e-732272023ec2/1/YtGLMS41Pnj6juX4DTb3Qc3N46o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e100::/29
Signature Algorithm: sha256WithRSAEncryption
69:c6:5c:d1:a8:a0:31:f7:cd:7f:20:04:33:39:f8:6f:1b:85:
61:c9:38:ed:d5:b6:fa:31:35:7b:21:64:16:d0:ad:9b:43:9d:
04:85:1f:d2:64:9f:b7:3a:88:b2:7f:75:88:86:17:68:c5:95:
6f:09:8f:91:34:a0:43:13:af:41:ce:35:c3:ae:77:9b:26:90:
27:15:9e:5a:13:9d:87:97:cb:5b:8b:94:84:a9:77:b9:ba:de:
5c:c2:02:d6:c7:e2:07:45:3d:19:a7:f1:68:06:e2:80:89:9c:
09:b5:a2:6a:6a:73:74:4e:51:c7:b5:e8:81:1f:59:df:a5:16:
14:dd:5b:e8:04:aa:fc:a4:22:71:9e:46:55:40:28:79:a0:6d:
2a:4a:41:4f:0f:4c:65:b8:fc:db:88:99:27:86:e1:02:a8:4e:
6b:03:af:92:25:71:68:73:c5:02:96:1d:7f:23:09:4c:ae:49:
d3:8f:5b:88:be:82:36:2e:a0:23:2e:ab:a5:01:12:5f:f5:25:
d0:a6:5e:ad:1b:82:8a:48:97:d4:66:a1:5a:67:cf:a7:4a:a2:
3b:50:50:85:42:b6:33:fd:87:cc:00:bf:b5:73:b5:9b:99:d6:
84:fe:23:0a:ab:6b:f5:fd:e4:b0:35:46:c6:ee:5a:81:6e:eb:
73:c9:bd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:49 2025 by rpki-client