Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/SSO99_SCKLtaR8TRW5T6uO511SI.roa
File: SSO99_SCKLtaR8TRW5T6uO511SI.roa (raw, json)
Hash identifier: NwS6LE6ZjRTqMKN5MFt3Mjcv9RF+AhBFNQUggOn3A+s=
Subject key identifier: 49:23:BD:F7:F4:82:28:BB:5A:47:C4:D1:5B:94:FA:B8:EE:75:D5:22
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 019133E708B2F8FEA5FA2C846D07AD7A3BBB
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/SSO99_SCKLtaR8TRW5T6uO511SI.roa
Signing time: Thu 08 Aug 2024 21:31:04 +0000
ROA not before: Thu 08 Aug 2024 21:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 2a0b:4140::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Aug 2024 17:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:e7:08:b2:f8:fe:a5:fa:2c:84:6d:07:ad:7a:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Aug 8 21:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4923bdf7f48228bb5a47c4d15b94fab8ee75d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:8e:97:22:3e:ed:46:f6:61:b5:3f:8b:17:
d9:f6:93:36:b4:91:52:73:25:86:9c:1b:b7:70:cb:
70:04:0a:f6:19:a5:c0:b9:bb:4a:0b:53:d2:e3:ab:
63:f5:b4:25:00:50:b1:2f:77:b1:fd:0a:cb:4a:ed:
df:38:e3:53:b3:8a:e5:62:24:d0:b3:a1:9c:a6:6a:
ce:a1:79:aa:e5:37:98:0a:18:91:fa:d5:f7:d8:b2:
9e:2e:ff:2d:5f:1f:1c:00:3a:7f:94:94:d9:47:a4:
90:a9:59:67:aa:21:bc:e3:63:ff:81:b6:34:34:d1:
05:f5:30:02:e7:60:ea:ef:31:20:e7:4c:ad:4f:7c:
bd:d4:4a:bc:06:4a:4e:2c:51:95:4d:64:b4:54:bf:
55:48:d6:4a:f7:21:ce:0c:08:08:28:8d:6c:86:f7:
e8:d9:07:a5:ec:29:c8:db:40:d8:e9:60:02:af:c2:
85:e6:58:4e:c0:a4:07:bf:1d:81:bd:1e:fc:71:32:
19:89:fc:f0:b8:14:a8:4c:82:7f:7d:47:51:ed:28:
68:7c:c4:a8:92:0a:65:34:c8:fe:9b:06:fa:e1:52:
0a:38:33:b1:d5:e3:52:b2:db:22:27:99:f4:d3:ba:
e1:01:cc:d5:d8:9e:23:77:14:99:da:c5:d1:ad:2c:
61:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:23:BD:F7:F4:82:28:BB:5A:47:C4:D1:5B:94:FA:B8:EE:75:D5:22
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/SSO99_SCKLtaR8TRW5T6uO511SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4140::/32
Signature Algorithm: sha256WithRSAEncryption
0c:3e:d4:cf:df:d2:4a:42:4a:cf:af:8f:9a:f0:2a:7c:eb:68:
c9:18:31:94:77:dc:ce:81:cd:80:8e:89:c5:e2:bf:0f:1f:5d:
92:d4:1b:bd:9e:65:93:aa:8a:6e:77:17:f8:2e:35:bb:72:04:
0b:48:dd:38:4d:89:29:2a:89:2f:a6:c9:91:b0:fb:e5:37:8f:
5f:30:1a:3a:17:c3:6e:7a:b7:1f:3b:25:01:fc:fe:31:22:3b:
cd:a2:94:7a:d2:5f:3b:84:46:74:32:00:00:a1:42:b7:cd:e4:
aa:5e:02:d5:dd:2e:4a:30:12:80:31:22:65:3a:72:9c:ab:57:
64:4d:7b:1e:f2:f8:37:84:88:63:58:5f:26:1c:60:fe:5d:88:
f4:57:21:f4:bf:13:b7:00:3a:27:71:3f:5e:eb:17:06:a7:56:
a8:6a:60:ff:a7:b3:eb:b6:a6:c7:df:87:23:b6:41:3b:d8:fb:
4d:d1:83:62:6b:e8:dc:d6:95:02:b4:8a:cf:d1:3b:62:6f:6d:
3d:10:63:81:d0:84:3e:0c:42:84:27:43:77:70:90:0b:dc:a9:
a7:0a:58:68:0c:c8:26:2c:68:55:8e:c2:1d:88:9f:fe:c9:c7:
f2:fe:00:f6:e1:dd:34:32:96:f5:33:b7:c0:8b:41:61:27:d5:
e1:ba:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:20 2025 by rpki-client