Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0TE4zanw7Aw2s5MmLiYh0lJFXXU.roa
File: 0TE4zanw7Aw2s5MmLiYh0lJFXXU.roa (raw, json)
Hash identifier: rotl/gOOktYhFcdZxUO7F8LWzo6yt1Rjqg+0N07zawQ=
Subject key identifier: D1:31:38:CD:A9:F0:EC:0C:36:B3:93:26:2E:26:21:D2:52:45:5D:75
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E74CA0AADD9CA296AC8A9B08C4FB
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0TE4zanw7Aw2s5MmLiYh0lJFXXU.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212996
IP address blocks: 2a0c:9a40:8d00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e7:4c:a0:aa:dd:9c:a2:96:ac:8a:9b:08:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d13138cda9f0ec0c36b393262e2621d252455d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:ab:78:eb:4a:46:9f:aa:9f:22:62:d5:22:
0f:aa:bf:83:e0:0a:10:69:17:bd:13:5f:ea:e0:34:
ed:0c:f7:95:02:c5:0d:c7:15:fd:64:0d:4f:20:1c:
41:b5:00:62:e6:db:22:4d:1e:dd:4e:32:ea:64:78:
ff:87:23:b0:22:33:0b:fe:ce:30:df:e7:e0:ec:5c:
da:4d:42:11:fa:c0:7a:41:8e:79:1f:37:11:51:dd:
f8:a8:ad:61:0f:7c:08:4e:ee:0b:2d:cb:74:0d:82:
a3:16:d9:cc:60:c5:b5:ab:80:fe:88:0e:c3:c9:66:
f3:b0:3a:b4:6a:0b:cf:73:e1:a5:31:32:f1:0c:4e:
fb:84:09:7d:bc:4f:c8:d0:92:2e:d5:44:b8:a6:7d:
12:ec:8f:47:b1:e5:a6:d6:12:92:8e:89:db:df:0a:
f0:92:61:4a:97:9f:4a:26:5f:2c:13:ed:c5:a8:20:
56:90:ff:d0:c3:54:b7:34:93:61:a5:11:ed:f6:c6:
a6:3d:fa:62:12:d0:fc:31:2d:9b:f4:d5:2d:30:d3:
64:4c:59:da:6c:4f:81:d3:42:ca:85:7a:45:e7:c3:
a9:ca:71:4e:5b:cf:71:88:bf:ee:32:69:67:33:ba:
8e:64:3c:6c:63:11:34:a2:46:13:a2:31:13:99:53:
cc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:31:38:CD:A9:F0:EC:0C:36:B3:93:26:2E:26:21:D2:52:45:5D:75
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/0TE4zanw7Aw2s5MmLiYh0lJFXXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8d00::/40
Signature Algorithm: sha256WithRSAEncryption
0f:8c:8e:c0:2a:ac:43:2e:a2:59:85:98:b7:2b:79:77:de:b2:
fe:43:22:f2:a2:94:d8:e7:63:13:3a:0f:c4:76:31:a1:25:d7:
32:d9:f5:62:53:73:9e:03:b0:42:dc:9a:1e:79:1b:b7:9a:8e:
46:e8:db:dc:14:4e:f3:f5:a4:63:84:f6:b8:a9:11:df:83:32:
11:28:c3:47:4d:30:4c:ca:34:9a:89:43:e7:44:d7:8f:2e:5c:
9b:5a:d5:85:72:2f:a9:04:c2:4b:7e:2b:62:c9:29:5a:9c:e4:
4f:d7:3b:7d:89:00:4d:b3:99:87:db:89:85:75:7f:e8:18:f2:
52:c7:6f:50:cc:4e:6f:e5:30:29:47:16:6f:fd:c5:47:7f:89:
e6:0d:15:56:c3:63:7b:5e:a8:9d:0f:22:42:1e:fe:cd:13:cb:
78:61:f0:fc:9b:6b:35:97:fc:fc:7a:5a:d2:6d:2f:d4:bd:81:
86:d5:14:af:06:1d:18:0b:83:14:4c:87:f7:c9:31:b3:7a:9c:
97:b6:87:30:7e:82:c2:02:ec:80:7c:cf:c4:e1:6f:8c:3a:2b:
10:5f:c8:b6:b4:c0:1d:e4:bc:7f:6e:16:86:d1:81:03:72:94:
bb:9b:65:fc:fb:e7:f7:aa:e0:e7:f5:89:99:99:3c:c5:80:3c:
68:76:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org