Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N2DcEMpsLek_t7RxIKNTM29ULNs.roa
File: N2DcEMpsLek_t7RxIKNTM29ULNs.roa (raw, json)
Hash identifier: Ep8poqp992OwsE52Bv0bJHYsAsquo5hZxzsXjF96PzI=
Subject key identifier: 37:60:DC:10:CA:6C:2D:E9:3F:B7:B4:71:20:A3:53:33:6F:54:2C:DB
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 01856B8A3CD99A6657861FC22EB8C86AB51A
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N2DcEMpsLek_t7RxIKNTM29ULNs.roa
Signing time: Sun 01 Jan 2023 04:14:59 +0000
ROA not before: Sun 01 Jan 2023 04:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35819
IP address blocks: 2a03:2887:ff10::/48 maxlen: 48
2a03:2887:ff15::/48 maxlen: 48
2a03:2887:ff0d::/48 maxlen: 48
2a03:2887:ff0f::/48 maxlen: 48
2a03:2887:ff11::/48 maxlen: 48
2a03:2887:ff13::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:3c:d9:9a:66:57:86:1f:c2:2e:b8:c8:6a:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jan 1 04:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3760dc10ca6c2de93fb7b47120a353336f542cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:48:f7:9f:da:dd:2d:ca:58:56:87:db:2a:4f:
44:ad:d4:80:20:e1:0a:be:66:58:5c:a3:47:f3:3e:
c4:e6:9b:1d:4b:59:4e:3a:0a:ad:67:e0:08:4f:e5:
c3:f2:df:66:8d:5e:c9:0a:30:9c:1c:e7:f9:83:ea:
47:43:68:f7:4b:36:9c:16:59:39:fd:98:3c:d3:6d:
57:b7:d7:83:26:50:16:8a:74:52:c6:58:5b:87:74:
1b:11:4e:36:11:25:02:e7:76:95:b1:f6:7c:bb:80:
de:c4:a0:38:ec:36:55:fb:02:43:47:c3:e8:3c:5d:
57:98:38:35:a6:6c:8e:21:bd:a5:7e:52:63:7f:b3:
40:da:eb:c7:1d:dd:9d:c2:c6:7f:f8:2d:b4:d2:51:
c9:54:ed:97:df:bb:d4:e9:c4:63:e7:44:8d:b5:5f:
94:32:4b:62:95:09:b5:74:d4:1f:9c:b3:97:e2:00:
c2:ea:20:09:f2:af:f4:83:83:55:01:03:b5:63:40:
a8:10:b7:0a:4d:a4:05:73:46:f5:07:fd:77:af:bd:
0f:42:30:91:79:1b:60:9d:52:39:3e:f4:aa:5f:b2:
ce:4f:f0:fa:13:02:09:20:af:9c:69:7b:17:38:01:
85:eb:ba:41:15:e0:c0:ad:02:44:6d:31:d8:49:21:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:60:DC:10:CA:6C:2D:E9:3F:B7:B4:71:20:A3:53:33:6F:54:2C:DB
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N2DcEMpsLek_t7RxIKNTM29ULNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff0d::/48
2a03:2887:ff0f::-2a03:2887:ff11:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff13::/48
2a03:2887:ff15::/48
Signature Algorithm: sha256WithRSAEncryption
97:bd:7a:dd:ab:08:83:3c:d5:04:5d:3b:db:03:a4:e6:a3:88:
f9:58:33:bd:2b:0b:e3:cc:56:9a:13:80:bd:6f:40:77:09:72:
78:3c:1c:10:83:46:07:d0:89:fe:79:a5:16:e8:fe:6b:55:0f:
d1:5a:e3:bd:df:d6:61:a7:6d:65:c7:39:78:78:db:d7:61:92:
8c:33:e2:d2:e4:6f:32:61:71:bd:04:13:31:c8:42:54:6c:1a:
2c:53:a2:6a:c5:4c:30:29:f7:53:4e:2d:89:c2:87:6b:0d:1d:
03:73:cb:8d:fa:75:3d:50:89:ed:0a:c4:30:35:68:bf:3e:ff:
fd:64:29:71:40:52:7c:34:cb:9c:0d:a7:e1:3e:ec:d2:98:43:
ca:20:59:34:25:4e:bb:42:59:45:70:99:73:a2:92:3f:86:4f:
7b:a2:5b:7c:e0:d8:8f:82:48:80:a1:c8:4d:17:5d:4d:d6:2e:
9d:d8:24:67:38:6f:27:f6:db:da:cf:0d:29:e6:64:d6:c6:cd:
52:cf:96:7a:97:71:7c:45:ef:08:8e:c3:db:1f:f7:4d:6f:19:
7f:26:eb:c7:e3:50:92:00:8a:8d:bf:d9:c8:3a:9a:9b:d5:5e:
43:f0:b7:e2:ac:83:02:7f:df:76:96:77:79:d3:bd:5e:e0:86:
7c:36:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:09 2024 by rpki-client on console-ams.rpki-client.org