Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/oxlvz-tj4aHIljYZvPFSzYvQgo4.roa
File: oxlvz-tj4aHIljYZvPFSzYvQgo4.roa (raw, json)
Hash identifier: j3xCwqlTf4NmSbe/jsvFiYJEQkrtJSbq8zp75gkeX+A=
Subject key identifier: A3:19:6F:CF:EB:63:E1:A1:C8:96:36:19:BC:F1:52:CD:8B:D0:82:8E
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 018570D51CDF5AF3F59D24A603064BC53E90
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/oxlvz-tj4aHIljYZvPFSzYvQgo4.roa
Signing time: Mon 02 Jan 2023 04:54:52 +0000
ROA not before: Mon 02 Jan 2023 04:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212465
IP address blocks: 2a0c:93c0:c002::/48 maxlen: 48
2a0c:93c0:8002::/48 maxlen: 48
2a0c:93c0:8000::/48 maxlen: 48
2a0c:93c0:c000::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:1c:df:5a:f3:f5:9d:24:a6:03:06:4b:c5:3e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jan 2 04:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3196fcfeb63e1a1c8963619bcf152cd8bd0828e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bb:11:fe:11:ea:46:87:e6:99:6b:d2:f7:9b:
75:95:92:d0:29:ac:f9:6b:0a:b3:9c:2d:30:e9:1e:
34:d3:a8:fd:ed:80:13:68:82:27:6a:74:dd:b7:b0:
9d:20:33:27:ea:27:0a:8a:4c:c5:c8:c6:8d:57:b8:
8e:9c:27:ae:dd:8d:f5:e6:f1:65:9b:20:6d:b8:3b:
83:20:85:56:ff:35:43:1c:1e:29:6b:f1:89:04:bb:
08:ed:3b:28:7d:ab:14:ff:59:8e:2a:32:50:15:eb:
46:05:f6:f1:3f:aa:05:59:8d:22:20:fd:16:d9:d4:
c4:68:af:10:b4:d6:54:82:98:e1:ba:7f:5f:20:05:
ff:44:81:c8:81:0d:ef:ab:13:1b:43:5a:3f:c5:63:
7a:d4:35:55:11:68:8f:75:b6:68:ec:02:a2:c8:41:
ef:30:21:76:5f:56:15:ea:5d:0b:1f:b2:20:f4:23:
e4:ae:df:07:b8:c0:eb:41:84:14:09:54:fd:f6:dd:
ed:af:76:54:79:9c:61:d0:4b:50:89:fd:3f:55:b2:
91:ca:bc:c1:1a:53:f4:26:67:f5:d4:f9:fb:48:11:
4e:89:4e:62:68:67:ac:cd:26:f2:ba:c5:5e:36:f0:
53:fc:b9:18:ac:0c:48:74:ef:aa:62:b0:e4:01:bb:
bb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:6F:CF:EB:63:E1:A1:C8:96:36:19:BC:F1:52:CD:8B:D0:82:8E
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/oxlvz-tj4aHIljYZvPFSzYvQgo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:93c0:8000::/48
2a0c:93c0:8002::/48
2a0c:93c0:c000::/48
2a0c:93c0:c002::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ec:77:37:68:80:75:77:a5:74:a2:65:03:ae:72:8f:fc:a5:
96:6d:f5:68:4d:1c:68:b6:b6:2c:b0:51:d2:29:f8:a0:e2:4b:
aa:39:8a:2b:d9:5a:d5:b5:45:d3:54:65:17:78:76:e4:66:ba:
e1:12:b0:34:64:f5:7d:7f:9f:d8:00:9d:e4:6d:64:15:da:90:
be:c8:8a:96:88:40:82:31:ff:62:ea:8c:75:47:21:76:e5:a8:
08:7b:a7:f7:de:2b:a2:2d:04:92:10:7d:4b:a9:83:5b:2c:b0:
b6:b1:79:65:34:7d:30:12:36:76:56:9d:ca:84:2f:57:ce:88:
b0:32:b3:b6:a3:40:ae:51:64:41:6c:74:8e:8f:43:78:f7:a8:
27:51:ba:75:3c:8e:16:28:ba:7b:1e:fe:fa:54:ce:da:54:fa:
1f:d8:d6:3a:6f:35:b3:9e:71:4e:c4:a2:55:5e:0e:55:2b:89:
c7:27:2f:dc:31:74:e8:1d:1f:97:84:ec:e3:8e:51:c4:44:9b:
2e:52:ff:bf:c2:93:76:1c:f5:b1:bf:35:19:bf:af:ab:2b:37:
82:80:7a:56:2b:fd:ee:ed:91:6e:d3:88:67:24:b1:63:be:f5:
a0:60:77:10:76:35:8c:df:ad:2d:71:57:a3:92:39:6c:66:a8:
ec:0c:58:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org