Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/SNo5jjjuOgUVwCM3t227AnsLvX4.roa
File: SNo5jjjuOgUVwCM3t227AnsLvX4.roa (raw, json)
Hash identifier: Si6lxALQsKrmL57XM07kaGzsAFcZ/4YDWXOzQ+iE33Q=
Subject key identifier: 48:DA:39:8E:38:EE:3A:05:15:C0:23:37:B7:6D:BB:02:7B:0B:BD:7E
Certificate issuer: /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial: 018EB4978A741431AF9B0771ACC7BE6FC7FB
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/SNo5jjjuOgUVwCM3t227AnsLvX4.roa
Signing time: Sat 06 Apr 2024 18:06:53 +0000
ROA not before: Sat 06 Apr 2024 18:06:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215185
IP address blocks: 2a0e:c5c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 13 May 2024 17:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:97:8a:74:14:31:af:9b:07:71:ac:c7:be:6f:c7:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
Validity
Not Before: Apr 6 18:06:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48da398e38ee3a0515c02337b76dbb027b0bbd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0f:b6:97:57:2c:62:e5:93:46:23:ca:8c:aa:
9c:5f:2a:90:ab:f9:ba:a4:df:5f:80:d5:2e:2e:cd:
6e:19:b4:88:4d:5c:c2:d1:15:a1:bf:d6:f6:81:9e:
dd:e8:ce:c7:f7:17:72:8d:a0:ff:a1:4a:0f:8e:6b:
60:72:1d:64:13:93:d5:27:bb:3e:5c:9c:81:52:e3:
cb:e0:b4:b3:a0:4c:1e:c9:5d:66:85:9f:7c:e9:3c:
aa:3f:fa:c0:04:6d:06:a4:d0:a7:69:4c:5f:92:87:
e0:51:8e:17:d1:5d:db:56:ca:cd:e7:c0:a3:3a:a2:
74:eb:8b:a9:d8:ae:1c:4e:21:e6:81:1e:bb:b8:fa:
b3:20:52:1f:6e:31:d2:cd:07:87:2b:e1:b2:6f:3c:
7c:7a:b0:a3:13:5b:e1:ae:df:7e:a5:03:f4:14:c7:
fb:78:39:55:d0:2f:e8:f8:ec:c8:aa:c6:b1:c4:50:
50:92:b7:bf:00:6f:08:ce:7e:70:02:a0:39:fb:2d:
4f:d9:1e:01:04:d5:2c:d5:74:57:40:73:8c:25:f6:
01:44:e1:1f:79:67:13:6b:68:4a:1d:ce:7e:90:d9:
d4:4e:14:61:ef:e2:74:ea:31:1b:f3:60:15:17:96:
b8:90:7b:c8:2d:bd:88:4a:d1:63:9a:64:7d:27:86:
0f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:39:8E:38:EE:3A:05:15:C0:23:37:B7:6D:BB:02:7B:0B:BD:7E
X509v3 Authority Key Identifier:
keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/SNo5jjjuOgUVwCM3t227AnsLvX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c5c1::/48
Signature Algorithm: sha256WithRSAEncryption
51:ac:0d:2d:f8:5d:34:13:9a:3c:51:b8:88:bf:35:b2:51:0a:
9b:0d:e2:4c:4a:d8:83:a5:98:0b:af:4a:38:f2:13:2d:2d:d9:
2c:d0:3d:78:3b:f4:cb:0f:c7:0d:27:da:c7:67:60:6c:ad:ff:
1b:c6:b7:6c:23:60:bc:84:97:e9:22:68:de:4a:32:53:5c:67:
e2:4f:91:93:f7:95:d1:b0:31:a1:65:7b:a2:0c:90:75:b0:d2:
3d:98:51:59:32:a1:14:ec:42:4f:60:79:05:28:92:3f:3b:e2:
7d:74:ef:0d:2f:4b:b0:47:9f:82:5e:28:9b:ae:0c:c0:04:41:
cd:9e:32:a6:e4:a6:fd:1e:d8:a8:1b:0c:5c:fa:b0:82:ed:fa:
e5:16:8c:8a:06:b2:fd:ee:8a:62:b3:c1:ff:49:fc:c7:1c:d7:
f8:47:ed:a0:08:09:3f:8a:59:23:f3:d0:0f:e2:4f:fb:fa:ca:
f1:32:f3:e2:60:fe:48:0b:6f:42:7a:b2:c2:7b:6b:eb:fa:f2:
6f:29:f9:e0:16:63:b6:6b:e9:c0:0a:43:09:3a:0e:8c:a4:95:
fb:d2:4b:95:31:17:e8:ee:65:85:6a:bb:54:0f:09:c1:cf:01:
0e:a9:b0:8a:63:22:46:c8:be:8a:de:31:bd:3e:14:cf:62:92:
70:08:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:44 2024 by rpki-client on console-fra.rpki-client.org