Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AnsNe8cFGlcQliK4y-Dx9aswhKw.roa
File: AnsNe8cFGlcQliK4y-Dx9aswhKw.roa (raw, json)
Hash identifier: 4vo435IhIfdPyY57Cxtk7T5OsWlHtyNB6KoHpSNSNpo=
Subject key identifier: 02:7B:0D:7B:C7:05:1A:57:10:96:22:B8:CB:E0:F1:F5:AB:30:84:AC
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E40D22754E3E3147B1979C2EF21B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AnsNe8cFGlcQliK4y-Dx9aswhKw.roa
Signing time: Mon 02 Jan 2023 11:38:46 +0000
ROA not before: Mon 02 Jan 2023 11:38:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211760
IP address blocks: 2a0c:9a40:8c10::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e4:0d:22:75:4e:3e:31:47:b1:97:9c:2e:f2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=027b0d7bc7051a57109622b8cbe0f1f5ab3084ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:ca:a7:d5:4a:05:cb:c0:22:d1:6f:de:ed:
a5:ed:71:6a:f1:2c:ad:ef:6e:53:de:30:b4:9a:fa:
2f:03:2a:d4:22:b7:62:57:ed:ac:80:20:fc:de:45:
64:0a:e8:fe:ad:a0:40:f4:d9:61:00:17:e2:79:1e:
79:59:d7:e2:f6:4a:e8:02:2b:b1:6c:ba:56:12:ae:
00:02:2c:25:71:4f:b7:ec:10:97:c0:25:28:b7:9e:
8a:af:b7:a4:ec:90:6a:60:f1:ec:c6:83:a9:b6:d5:
93:0b:2b:f2:ce:ba:f8:5c:e3:a6:ca:02:c8:9b:52:
04:e8:46:3e:2d:fc:38:4e:a2:29:71:27:87:9a:79:
5f:a8:1a:a2:7f:02:90:14:1a:55:5a:ea:13:a6:2f:
09:e9:9e:41:ef:c6:11:00:66:df:86:2f:34:66:04:
01:88:90:03:3b:36:39:c8:4b:37:90:96:48:c9:fa:
81:ef:6b:39:8d:a4:80:fb:82:21:08:5e:42:cc:df:
3e:3d:df:7a:71:03:d9:60:3f:d5:6c:75:7d:15:1b:
fb:c0:04:cd:64:a8:ca:fe:07:74:f2:2a:1b:c9:28:
58:79:2f:77:0f:5a:48:d1:42:4a:29:e5:5b:67:c2:
e8:4b:cf:92:94:5a:ac:39:5b:84:20:46:61:20:6a:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7B:0D:7B:C7:05:1A:57:10:96:22:B8:CB:E0:F1:F5:AB:30:84:AC
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/AnsNe8cFGlcQliK4y-Dx9aswhKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c10::/48
Signature Algorithm: sha256WithRSAEncryption
cd:25:37:c3:19:17:c2:65:8c:66:a4:d6:6c:60:52:1b:d4:10:
c9:39:20:3c:4c:da:ce:a6:38:3a:b9:da:13:54:96:06:f5:c1:
2a:54:0a:90:cd:40:bc:77:1f:6a:54:b8:8c:b7:67:ab:e9:87:
a6:20:fb:46:c9:45:82:71:87:9a:1a:1e:6d:e1:f8:e5:c1:22:
fa:cf:d9:2c:4c:3c:84:80:6b:df:3d:08:b2:ff:6d:11:40:5d:
9f:ea:e7:c8:38:d1:bf:5f:ba:f5:c5:f6:fa:8b:94:45:c5:63:
83:84:61:ab:70:d9:3a:5e:50:40:b1:6b:8d:25:24:8d:c8:d8:
34:13:ca:d8:c5:a3:20:e1:74:09:e5:a9:64:41:9e:c3:fc:24:
9c:af:f1:cc:fd:d3:4d:b2:67:18:f5:bf:19:37:64:42:93:c8:
57:6d:30:e8:13:29:d1:26:1e:e3:44:c5:8b:ae:fe:2a:a8:86:
4e:0c:83:6f:75:f7:da:5c:2d:98:de:b1:30:04:13:d5:ad:4f:
a7:ba:f4:17:69:24:e9:7c:bd:d5:65:e4:87:fa:d2:58:c2:f3:
1b:91:0c:15:f6:89:e7:c8:f6:66:a2:5a:d7:fa:75:86:a8:4e:
dc:2a:08:f4:80:af:98:e5:78:48:a5:b4:f7:a8:80:c0:6f:b6:
3a:e3:2a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org