Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/JBnsZq-qsME4PsfF7K-Mj3dxl50.roa
File: JBnsZq-qsME4PsfF7K-Mj3dxl50.roa (raw, json)
Hash identifier: NYwXPgOWWvhX3trBOZHEhIYL5eBTDrWc9PKSUeXvbvg=
Subject key identifier: 24:19:EC:66:AF:AA:B0:C1:38:3E:C7:C5:EC:AF:8C:8F:77:71:97:9D
Certificate issuer: /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial: 018CC3B70F5BA67133669AA0EAE01AE26049
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/JBnsZq-qsME4PsfF7K-Mj3dxl50.roa
Signing time: Mon 01 Jan 2024 06:30:03 +0000
ROA not before: Mon 01 Jan 2024 06:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47869
IP address blocks: 2a10:1440::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 07 Mar 2024 09:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0f:5b:a6:71:33:66:9a:a0:ea:e0:1a:e2:60:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Validity
Not Before: Jan 1 06:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2419ec66afaab0c1383ec7c5ecaf8c8f7771979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:94:b0:e4:d7:87:56:23:cb:b6:d6:34:02:88:
db:0d:b5:21:06:98:a9:ae:f3:a2:9a:5b:2b:e1:2d:
7a:38:67:88:3d:32:3b:5a:14:d4:a0:e9:ab:a8:a5:
a8:ec:12:31:78:af:a3:77:89:10:ae:4b:c7:b6:90:
32:b4:2f:a6:20:81:6d:08:ce:d1:1e:73:57:68:58:
ef:d7:f8:fb:b9:1a:f8:18:25:a1:3a:0f:5b:63:00:
2e:c6:07:f8:8e:d0:9b:4c:8c:b5:78:fc:9e:3f:b7:
96:bc:be:ef:76:f8:9a:79:bc:ed:47:14:8f:f1:a8:
e3:70:94:f5:00:b4:0a:c5:39:4f:48:0d:51:3d:6f:
71:f7:c9:3d:12:3f:08:ec:de:fc:b1:e8:f9:cb:0d:
d5:73:d5:3b:be:a9:67:62:23:7d:66:ea:94:59:66:
18:48:cb:c9:ea:e1:d7:0f:af:1d:a5:94:4d:cd:83:
d0:86:24:89:b3:1b:2a:37:d0:49:1d:ef:07:f2:ec:
4c:1a:33:1f:04:bd:05:20:90:66:df:73:ac:ef:64:
9f:17:1d:30:d9:4d:7f:aa:ad:3c:3b:d4:47:21:3a:
06:94:41:53:a9:38:f0:65:31:a7:11:ad:4b:b7:5e:
7e:75:15:80:43:78:00:80:de:6f:b1:a0:e4:70:e8:
fa:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:19:EC:66:AF:AA:B0:C1:38:3E:C7:C5:EC:AF:8C:8F:77:71:97:9D
X509v3 Authority Key Identifier:
keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/JBnsZq-qsME4PsfF7K-Mj3dxl50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:1440::/29
Signature Algorithm: sha256WithRSAEncryption
2d:db:da:f4:fd:67:51:81:1a:ba:47:7b:3a:0d:40:e2:6c:37:
2d:5e:52:9d:bc:c5:fe:f8:3c:5e:9b:21:2d:70:fe:35:42:98:
1c:12:c8:0c:1e:6a:9f:a1:b4:03:58:d6:de:40:3c:99:fa:9c:
81:99:50:f1:9a:a2:e4:12:5c:5b:ef:2a:31:dc:12:af:13:e7:
96:6b:c1:00:d4:4c:46:9c:42:6a:85:12:1f:5d:96:d4:20:af:
b2:59:29:96:52:02:f0:79:4a:a3:92:fd:9b:18:af:b4:4a:fb:
60:46:66:5b:21:59:ec:54:00:78:a5:72:d0:67:c8:ba:41:83:
4a:fe:c5:d5:d4:c7:3e:02:0f:06:28:8d:f0:5e:dc:67:c2:a6:
2c:73:02:ab:80:6f:2e:dd:61:20:da:24:50:af:40:ce:32:da:
6a:51:32:e2:42:f2:d1:27:9c:4e:63:30:f5:9b:fa:9f:0a:38:
29:70:e1:6e:d9:e5:f8:b7:79:8c:8e:61:88:46:78:c5:d4:9c:
c8:55:ab:a5:27:e8:53:db:28:72:3a:3f:a8:58:2d:be:12:ad:
90:c5:7a:9f:93:33:86:a9:9c:62:cb:8b:5c:a4:55:36:b3:e4:
89:f4:f8:1b:b4:25:ec:a3:f0:08:95:0d:0c:8f:c3:f3:f5:5d:
39:fa:36:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 7 13:55:42 2024 by rpki-client on console-fra.rpki-client.org