Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/R3w6lQiZi8uCAeJjZAYxd9-46WI.roa
File: R3w6lQiZi8uCAeJjZAYxd9-46WI.roa (raw, json)
Hash identifier: 6U49XY0DDGt3vt7nIxJ3oV0LyN6SRNVEDTjLL98a4EY=
Subject key identifier: 47:7C:3A:95:08:99:8B:CB:82:01:E2:63:64:06:31:77:DF:B8:E9:62
Certificate issuer: /CN=219885ea020e65006314ee9480def3b3efc039e3
Certificate serial: 01856C1C7BF750A155E569F2BF58AFFAE0A3
Authority key identifier: 21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/R3w6lQiZi8uCAeJjZAYxd9-46WI.roa
Signing time: Sun 01 Jan 2023 06:54:44 +0000
ROA not before: Sun 01 Jan 2023 06:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51559
IP address blocks: 2a0a:db00:2::/48 maxlen: 48
2a0a:db00:d::/48 maxlen: 48
2a0a:db00:8::/48 maxlen: 48
2a0a:db00:3::/48 maxlen: 48
2a0a:db00:6::/48 maxlen: 48
2a0a:db00:1::/48 maxlen: 48
2a0a:db00:c::/48 maxlen: 48
2a0a:db00:7::/48 maxlen: 48
2a0a:db00:a::/48 maxlen: 48
2a0a:db00:5::/48 maxlen: 48
2a0a:db00::/48 maxlen: 48
2a0a:db00:b::/48 maxlen: 48
2a0a:db00:e::/48 maxlen: 48
2a0a:db00:9::/48 maxlen: 48
2a0a:db00:4::/48 maxlen: 48
2a0a:db00::/29 maxlen: 29
2a0a:db00:f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:7b:f7:50:a1:55:e5:69:f2:bf:58:af:fa:e0:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=219885ea020e65006314ee9480def3b3efc039e3
Validity
Not Before: Jan 1 06:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=477c3a9508998bcb8201e26364063177dfb8e962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:90:d3:12:cb:28:43:10:ed:58:8b:4c:14:
96:dc:7a:1a:1d:9a:79:68:04:23:5e:8d:1b:4a:a2:
44:a3:d1:24:1c:fc:6d:75:48:8d:aa:6d:d3:0e:82:
f4:2d:57:d5:9c:ac:9e:f0:f4:d1:b8:7c:5d:7f:30:
47:d8:95:90:4e:01:8f:5d:a3:c6:aa:9e:b4:35:73:
e4:c1:09:37:f8:02:1e:22:51:c8:73:07:2d:0c:00:
72:d3:10:19:10:c7:7c:98:3f:0d:1c:3c:3f:e5:db:
0a:4c:49:84:a6:8a:cb:2a:46:cb:c7:85:c6:d7:00:
d2:1f:ef:2b:6e:6a:f1:d5:65:e6:08:ad:7f:20:30:
59:94:d8:3e:13:52:13:f9:ff:61:3d:e6:0d:67:08:
23:d7:9e:30:ba:1a:53:59:db:11:fa:57:78:ef:10:
28:88:20:8d:44:b2:61:6b:91:9b:5f:9e:e9:a3:ef:
54:12:3b:63:c9:7b:74:c4:d5:27:33:d5:13:0c:60:
f2:d7:f9:40:13:3b:d9:c9:f6:96:5e:0f:d7:74:dd:
9f:ae:fb:bd:79:8a:5c:4e:28:82:85:f2:a9:19:d7:
bb:6f:56:80:c2:8e:d0:d5:eb:28:e3:c1:b6:dd:12:
d4:1c:f1:b6:78:c8:b2:d1:19:ba:02:33:e0:df:96:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7C:3A:95:08:99:8B:CB:82:01:E2:63:64:06:31:77:DF:B8:E9:62
X509v3 Authority Key Identifier:
keyid:21:98:85:EA:02:0E:65:00:63:14:EE:94:80:DE:F3:B3:EF:C0:39:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IZiF6gIOZQBjFO6UgN7zs-_AOeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/R3w6lQiZi8uCAeJjZAYxd9-46WI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/fe04ac-a190-4804-913c-ffc025831f4f/1/IZiF6gIOZQBjFO6UgN7zs-_AOeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:db00::/29
Signature Algorithm: sha256WithRSAEncryption
01:37:6a:2f:08:15:e4:c5:1c:8f:d4:1b:3d:d0:1e:9d:5d:f4:
6e:19:db:54:df:33:37:c0:7d:6d:d6:5b:03:22:66:56:3b:39:
66:f0:b2:39:c7:95:58:09:ba:e3:a2:64:58:86:02:af:b3:87:
7b:5a:be:40:dc:3e:c4:18:86:21:ff:33:e7:01:33:b1:bb:f8:
a6:37:a9:05:88:47:70:27:4c:25:11:b1:88:e0:bc:05:dc:6e:
e1:be:1f:87:dc:b3:53:72:1b:01:d9:7e:43:c6:ca:80:f8:30:
b2:1e:7c:a4:4d:81:4b:cc:82:3b:2e:f4:60:38:13:8e:7e:dd:
01:84:83:d7:55:12:b8:06:5a:14:01:30:b3:79:f0:07:35:95:
f4:b3:a2:d6:47:a2:82:39:61:7c:2f:5e:9e:aa:af:a1:36:a8:
fb:64:fc:21:28:6e:c8:d6:be:f9:55:fe:df:4b:34:22:cd:30:
28:f3:4e:f3:f0:c0:ea:e1:20:0f:75:07:80:96:ab:3d:d0:f0:
27:0a:fa:4e:31:53:9f:86:8a:7f:ea:7f:a6:cf:22:f7:57:c1:
0b:b7:ee:f1:1e:8e:e3:53:2e:b5:34:16:0e:f0:f4:88:b5:b3:
b5:db:5a:2f:df:8b:b4:5e:a9:59:90:cb:d8:83:0f:05:08:08:
62:1d:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:37 2024 by rpki-client on console-fra.rpki-client.org