Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bEN5D298KrHREsj3JAjdbCN2tCw.roa
File: bEN5D298KrHREsj3JAjdbCN2tCw.roa (raw, json)
Hash identifier: 8NPOwcik6VBUV+lh30GLgqRu64V+NW3zjTNY/ilkjaQ=
Subject key identifier: 6C:43:79:0F:6F:7C:2A:B1:D1:12:C8:F7:24:08:DD:6C:23:76:B4:2C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8D2A5C0FC4B76007CF93540208D0E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bEN5D298KrHREsj3JAjdbCN2tCw.roa
Signing time: Mon 01 Jan 2024 20:30:50 +0000
ROA not before: Mon 01 Jan 2024 20:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:9c20::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 07 Jan 2024 17:42:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:d2:a5:c0:fc:4b:76:00:7c:f9:35:40:20:8d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c43790f6f7c2ab1d112c8f72408dd6c2376b42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:f1:f8:10:1d:2f:0c:91:4b:f3:89:ce:0c:
4f:8b:9a:d9:b0:c8:fd:48:ec:9d:fb:52:09:7d:e4:
ce:36:53:86:2f:d4:84:e2:b4:51:5a:b7:ca:d7:63:
7e:93:46:c2:04:2c:86:dd:e9:83:f7:fb:7e:19:93:
16:d8:cd:c7:5c:ba:46:04:7a:bb:23:53:63:33:74:
98:40:6d:88:e4:58:09:0a:5d:af:93:d5:39:aa:c8:
4e:47:2d:7c:9f:99:2f:3f:25:a8:55:5a:b7:1f:6f:
f5:dd:f3:27:39:a0:1c:b9:af:61:b7:1f:58:4c:99:
47:64:00:ff:1d:db:0f:ed:c0:d2:21:79:fb:1d:a9:
17:09:dc:7d:9a:29:39:54:0a:5c:f8:be:1b:a0:20:
fa:96:d2:3f:3f:08:d4:7b:21:d6:a3:6b:96:db:6b:
68:1d:4c:85:a8:eb:19:e9:fb:27:c9:cf:9d:c5:be:
fb:b6:13:ce:ab:7a:97:2f:0e:0d:2c:a8:dd:5e:c1:
ed:65:a1:01:77:4e:f4:91:48:2a:dc:98:a5:2e:a2:
0b:c7:8f:89:d1:0c:ec:f7:bc:e3:08:80:4b:26:a1:
24:15:6a:52:6c:53:74:31:8c:eb:e0:d1:5f:e6:7b:
34:31:f8:ee:a8:09:cc:e7:b3:0b:d8:be:cf:a2:87:
91:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:79:0F:6F:7C:2A:B1:D1:12:C8:F7:24:08:DD:6C:23:76:B4:2C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/bEN5D298KrHREsj3JAjdbCN2tCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:9c20::/44
Signature Algorithm: sha256WithRSAEncryption
6a:b5:6d:09:b2:08:87:8e:7e:4a:37:db:31:55:99:e8:0d:8a:
bd:db:79:93:a9:3d:31:85:ed:30:86:3b:6a:53:de:42:01:8f:
72:22:f3:32:a3:7f:24:e8:50:77:87:4f:cf:ff:09:1c:14:3b:
48:6c:34:ed:3a:07:78:39:03:45:0a:ba:b2:3e:f3:09:55:e9:
04:bc:4e:fd:bc:26:72:c3:e3:6e:10:36:0d:95:08:d0:e8:c0:
95:25:1f:cc:fa:c9:4f:1c:34:9b:3b:a2:24:8f:ca:ed:24:f6:
2c:9c:31:f6:7b:00:5f:c8:23:31:d9:b6:ec:7d:2b:08:08:33:
16:95:96:63:7f:12:80:f2:75:7b:40:84:62:6d:72:e7:b1:7a:
9b:fe:41:b7:f9:00:80:ea:58:49:d0:30:3c:b1:43:b4:01:60:
0f:6a:98:d6:c1:c2:cd:87:34:9e:00:12:9d:d6:e0:2c:60:61:
ff:3a:dc:09:46:0e:26:18:88:a6:e0:3e:4a:b7:b7:b8:3c:69:
59:c5:e3:02:8c:bd:83:21:76:b8:14:23:10:66:18:f5:5c:3e:
89:96:75:2e:e5:96:f3:22:ba:02:d1:49:49:cd:ac:45:ce:3e:
31:17:6c:fb:7e:9c:ac:28:7f:04:58:eb:59:e2:20:d3:19:97:
ff:83:eb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 20:48:03 2024 by rpki-client on console-fra.rpki-client.org