Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m7xAeE_WXACmqneFO9v8nQrLQro.roa
File: m7xAeE_WXACmqneFO9v8nQrLQro.roa (raw, json)
Hash identifier: Q0OoxIQJvKinrm8D5/toP8GCIrQc2dhhZRVwv2gPglQ=
Subject key identifier: 9B:BC:40:78:4F:D6:5C:00:A6:AA:77:85:3B:DB:FC:9D:0A:CB:42:BA
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246E3A726AA9A96607213C84C5F4B48
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m7xAeE_WXACmqneFO9v8nQrLQro.roa
Signing time: Mon 02 Jan 2023 11:38:46 +0000
ROA not before: Mon 02 Jan 2023 11:38:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211758
IP address blocks: 2a0c:9a40:8260::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e3:a7:26:aa:9a:96:60:72:13:c8:4c:5f:4b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9bbc40784fd65c00a6aa77853bdbfc9d0acb42ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:2f:dc:bf:40:3a:49:34:ab:9f:16:d6:53:
52:f2:64:1c:d6:b2:70:2a:fc:a3:b9:f7:09:20:0c:
8b:44:05:eb:c1:9c:37:b7:a3:32:d7:86:7b:6e:22:
6a:30:9d:83:20:17:03:22:4c:7d:6c:22:62:40:7a:
f5:5a:d2:a4:9e:c6:21:d3:dd:c0:bf:22:5a:fd:4b:
2f:f7:79:ad:9c:8b:34:98:18:82:16:71:5d:71:14:
8a:89:f0:1d:c4:1a:45:5b:de:c7:37:35:60:d8:e3:
05:29:0a:15:25:9a:ec:7d:c9:85:cc:09:22:2f:4b:
ca:07:ea:b5:8e:3f:ad:c9:c2:d8:ca:17:c6:7c:b6:
6a:dc:6b:89:ab:c8:39:e8:5b:be:73:55:94:7a:b2:
24:ff:fd:00:72:84:de:48:b5:c0:75:e4:d5:98:52:
63:f2:4c:da:20:24:35:3a:d0:39:1c:a8:bb:a8:f4:
df:6f:57:67:62:1d:d2:a2:c1:75:28:62:f5:98:56:
dd:23:07:d4:df:08:82:1f:60:d4:bc:8e:c4:c5:22:
a7:36:08:b3:8d:f4:5e:b5:3f:ec:2b:e8:41:2c:f6:
44:5b:35:fd:9b:49:c6:f0:6a:53:7c:3d:68:df:07:
9a:16:de:23:53:4e:9a:ea:a2:71:57:1d:d7:b4:cd:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:40:78:4F:D6:5C:00:A6:AA:77:85:3B:DB:FC:9D:0A:CB:42:BA
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/m7xAeE_WXACmqneFO9v8nQrLQro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8260::/44
Signature Algorithm: sha256WithRSAEncryption
6b:72:a3:84:9b:bf:cb:50:17:31:71:02:b5:6a:49:0b:73:0c:
68:7c:b6:15:34:a3:96:3f:a7:7d:0b:47:36:1b:59:94:03:ec:
75:88:8d:37:03:e0:72:37:b4:f3:54:4f:6e:ee:e2:b4:5c:34:
0f:6d:a8:34:85:cb:7b:51:9c:f3:31:8c:36:0b:7e:48:3d:6f:
09:a5:28:15:5a:01:32:cc:88:10:fc:32:df:8c:1a:bc:5f:5f:
39:31:0b:a1:42:c4:eb:a6:2d:17:0a:14:70:06:5d:4f:b7:23:
4d:cf:f9:b1:43:2c:57:22:ac:17:70:b1:39:e6:8a:c4:9d:20:
e9:5e:87:dc:66:9e:23:4c:66:a4:74:f3:7f:9c:85:23:33:4d:
5a:15:25:07:b8:6f:0d:9c:a2:cb:71:d8:21:3a:23:5d:6e:1c:
77:a5:01:64:f3:b4:cc:30:97:f8:a6:97:65:aa:6d:a7:63:37:
5f:b9:97:eb:1c:f9:10:bd:ed:4b:bc:2b:22:59:41:fa:0e:89:
39:9e:3f:52:75:76:6f:91:fb:1a:b9:cc:d1:78:b6:d0:13:90:
31:47:be:c4:f9:c8:09:e2:f2:bb:a9:48:f1:1c:1e:c7:e7:60:
12:da:7c:5e:36:f7:69:94:f6:1d:0c:12:5e:dc:b2:a6:49:1e:
6a:86:b1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:16 2024 by rpki-client on console-ams.rpki-client.org