Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/5mw-eRnIcmaCs1sXt8abJZrkTo0.roa
File: 5mw-eRnIcmaCs1sXt8abJZrkTo0.roa (raw, json)
Hash identifier: sCqZXfdPLF2G79NfW5W3tsiFL7C0c7AVaXk9jKcB5zQ=
Subject key identifier: E6:6C:3E:79:19:C8:72:66:82:B3:5B:17:B7:C6:9B:25:9A:E4:4E:8D
Certificate issuer: /CN=fce2fd8df1a266ce13457fbe0f938b9abe3aa761
Certificate serial: 018570DE49F21BDD6D73B345A15FED303D26
Authority key identifier: FC:E2:FD:8D:F1:A2:66:CE:13:45:7F:BE:0F:93:8B:9A:BE:3A:A7:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OL9jfGiZs4TRX--D5OLmr46p2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/5mw-eRnIcmaCs1sXt8abJZrkTo0.roa
Signing time: Mon 02 Jan 2023 05:04:54 +0000
ROA not before: Mon 02 Jan 2023 05:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35297
IP address blocks: 2a03:e500::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:49:f2:1b:dd:6d:73:b3:45:a1:5f:ed:30:3d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce2fd8df1a266ce13457fbe0f938b9abe3aa761
Validity
Not Before: Jan 2 05:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e66c3e7919c8726682b35b17b7c69b259ae44e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:83:19:93:5d:4c:15:cd:47:db:ad:49:83:
2d:23:2b:19:e5:11:ed:8c:f2:cc:ca:3a:33:2c:82:
b0:46:60:87:01:d1:67:99:dd:85:e5:34:4b:57:25:
74:f9:6e:b1:2d:a7:5b:c0:b5:1e:aa:50:48:37:e0:
9d:2a:71:61:26:cd:c5:c1:da:a5:9c:20:85:c9:1c:
08:9e:55:9a:70:1e:d4:71:67:1f:ae:fb:78:19:02:
2f:79:a1:45:0f:42:0d:8a:a1:01:27:de:0f:43:d8:
dc:13:34:4a:04:1e:fa:68:0c:e8:7a:89:f4:09:16:
a5:35:01:f7:27:0c:68:25:1f:b0:78:11:ce:66:10:
02:89:84:10:b6:9d:ef:32:b4:e0:42:af:78:33:8d:
4a:3a:72:49:32:76:d7:e1:75:07:2f:d1:a6:b5:b5:
87:c2:79:fa:8d:45:03:c1:97:20:94:77:f2:43:6d:
11:54:f0:49:e6:53:4d:94:12:5f:9c:42:78:d3:46:
bf:b6:35:3f:cb:6f:6c:10:62:18:f7:3a:43:e5:34:
74:e3:3d:4f:33:3d:b8:39:ff:72:eb:1d:10:1c:4e:
eb:73:56:cc:94:02:21:d2:38:1c:b3:ce:b3:07:6b:
a9:c0:c2:71:75:86:59:93:04:20:99:2d:0c:cd:6f:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6C:3E:79:19:C8:72:66:82:B3:5B:17:B7:C6:9B:25:9A:E4:4E:8D
X509v3 Authority Key Identifier:
keyid:FC:E2:FD:8D:F1:A2:66:CE:13:45:7F:BE:0F:93:8B:9A:BE:3A:A7:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OL9jfGiZs4TRX--D5OLmr46p2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/5mw-eRnIcmaCs1sXt8abJZrkTo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/91641b-fc66-4e6d-b9dc-7ef54afc4372/1/_OL9jfGiZs4TRX--D5OLmr46p2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e500::/29
Signature Algorithm: sha256WithRSAEncryption
83:22:ae:ac:c2:5b:10:24:5f:cd:2a:95:a7:b9:db:b3:fe:61:
78:cf:97:f1:8f:6d:6f:e9:6e:a9:62:d4:db:da:cb:33:0b:1e:
dd:e8:47:b3:5c:a8:eb:1c:8b:fa:44:e5:a3:4e:45:6a:ea:19:
97:fe:53:8c:87:3b:e2:f6:ed:91:16:ae:94:be:e6:81:0c:c1:
62:50:28:56:f2:e9:76:bb:bf:21:a7:a8:8e:a3:3e:8f:2e:63:
04:92:3e:ea:19:45:35:a3:58:cf:c4:f1:2b:47:47:7b:d6:17:
72:ea:62:ba:ed:7c:ff:cd:ef:ae:04:ec:7e:44:59:39:52:c8:
fb:0d:79:d1:6f:ce:f9:65:92:92:29:bc:4e:c1:30:db:8f:97:
bd:76:1d:d8:4c:08:43:66:96:8c:9b:f6:09:bc:3a:66:57:6e:
31:94:ad:29:15:33:77:b0:ed:09:df:b0:26:2c:9c:d3:71:9b:
c8:76:e8:b8:a2:58:24:53:a7:d3:ec:45:d5:08:46:6e:b4:e4:
7e:5e:05:32:51:a7:a5:fc:eb:b7:6f:3e:89:a5:fe:8c:d3:28:
50:d8:a7:37:2b:fc:a0:76:c2:19:31:47:f4:99:93:c1:2b:18:
bd:d6:0a:06:9f:a9:7b:d0:0b:0c:0f:a4:c3:e2:a4:d6:dd:f8:
da:85:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:18 2024 by rpki-client on console-ams.rpki-client.org