Route Origin Authorization
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/1/323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa
File: 323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa (raw, json)
Hash identifier: KWW+Uh7eAsLXPjhWMA7XUU210eSguU0WSxIJ8xs3wZM=
Subject key identifier: 9C:CA:D3:3F:35:BB:BC:D4:63:89:E1:4E:F7:5B:81:77:CB:54:B5:3B
Certificate issuer: /CN=45fad4649403f24502e9c3fa40103955bc3b5924
Certificate serial: 680D3B8C10B251702D49E969BC0A050BA0BE204C
Authority key identifier: 45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/1/323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa
Signing time: Fri 02 Feb 2024 17:43:31 +0000
ROA not before: Fri 02 Feb 2024 17:38:31 +0000
ROA not after: Fri 31 Jan 2025 17:43:31 +0000
asID: 205848
IP address blocks: 2001:67c:129c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 04 Mar 2024 13:27:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:0d:3b:8c:10:b2:51:70:2d:49:e9:69:bc:0a:05:0b:a0:be:20:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fad4649403f24502e9c3fa40103955bc3b5924
Validity
Not Before: Feb 2 17:38:31 2024 GMT
Not After : Jan 31 17:43:31 2025 GMT
Subject: CN=9CCAD33F35BBBCD46389E14EF75B8177CB54B53B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:39:32:ec:bc:fb:73:52:21:5f:37:41:df:
88:e9:85:4f:a4:40:6d:e5:a1:7a:6e:77:1e:d9:c8:
b1:d6:1e:08:48:b6:55:d8:07:d8:b7:0a:9b:53:08:
46:d8:de:ea:c4:f8:ca:ec:30:82:61:c0:fd:dc:89:
0c:f9:4c:df:5e:80:12:c8:67:df:3e:44:fa:19:0b:
d2:5f:21:66:b3:e4:5e:02:b4:c8:52:8a:4a:49:39:
c2:8a:b7:82:98:c7:21:69:be:7f:ba:87:fb:4c:a4:
d7:b5:16:81:15:0e:bf:2d:2f:c7:25:9a:b5:54:fb:
7a:94:34:35:1e:68:4b:c9:02:ac:2d:44:89:7d:22:
25:54:da:fd:4e:c8:50:0d:2b:b6:75:e6:b1:a4:63:
a7:50:09:25:74:7e:1a:94:0d:7a:12:0a:58:28:4e:
26:81:dc:fa:86:a3:e4:1b:4d:47:72:01:1e:9f:b8:
f5:40:7e:57:15:e4:09:d6:e4:ce:63:44:43:02:89:
e0:28:a0:ac:d6:7f:1b:2b:2b:d0:4c:f6:cc:2c:d3:
de:75:ef:b4:6a:c1:45:e6:82:9c:b0:d6:4a:17:7d:
08:11:11:01:ad:4f:65:8a:92:4e:3b:6f:ec:2a:ef:
e2:12:98:ca:8c:e0:3c:e6:75:3f:76:61:9b:d5:e2:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:CA:D3:3F:35:BB:BC:D4:63:89:E1:4E:F7:5B:81:77:CB:54:B5:3B
X509v3 Authority Key Identifier:
keyid:45:FA:D4:64:94:03:F2:45:02:E9:C3:FA:40:10:39:55:BC:3B:59:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/45FAD4649403F24502E9C3FA40103955BC3B5924.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RfrUZJQD8kUC6cP6QBA5Vbw7WSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/1/323030313a3637633a313239633a3a2f34382d3438203d3e20323035383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:129c::/48
Signature Algorithm: sha256WithRSAEncryption
ac:c6:74:e6:3d:50:59:4e:fb:af:d1:a4:a3:fa:9a:77:e3:01:
22:d4:ed:81:24:22:2e:0f:b4:c2:8a:e1:f6:c4:7c:98:8e:e3:
47:30:9c:f2:55:11:76:21:44:b4:1d:9d:42:38:b1:0e:52:a6:
03:94:10:71:c8:33:e2:76:b8:44:4b:42:b8:dc:9b:87:62:93:
08:3f:de:46:60:8e:5c:74:21:24:9c:05:d5:66:57:c6:63:2f:
a8:9c:53:51:01:bc:4d:78:b6:7d:57:a3:83:4b:09:ae:22:32:
b6:0f:2e:dd:70:f9:a7:fb:ac:68:c7:72:d3:2a:b4:f4:e7:5f:
ae:0c:61:7f:44:c3:a0:ba:6a:5c:8b:db:88:6b:c9:46:31:23:
a4:73:f8:e7:2d:e3:48:f8:18:1f:70:63:86:74:30:54:e9:11:
bf:e6:65:15:ab:49:67:16:27:5a:3e:c2:4a:cf:d9:65:c2:0d:
7a:61:9c:fa:86:b0:7b:5a:23:87:12:57:85:59:ce:1b:0a:ac:
16:0a:3f:90:47:80:90:22:22:ab:c8:27:9c:25:6f:06:ed:56:
33:8f:2f:03:e6:d7:db:ee:02:4e:1b:b7:f7:49:e3:4c:e2:1b:
05:ff:34:de:b2:00:c6:11:18:2e:cd:7c:6c:8d:fd:ba:93:69:
e1:00:ac:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:59:50 2024 by rpki-client on console-ams.rpki-client.org