Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ENhmKGve6HMvvjL4B08HvaGV4EA.roa
File: ENhmKGve6HMvvjL4B08HvaGV4EA.roa (raw, json)
Hash identifier: 6CStQ7FoWQJcKj8Rn3yNqRvgfVEx9+rENvcvHJ3epDg=
Subject key identifier: 10:D8:66:28:6B:DE:E8:73:2F:BE:32:F8:07:4F:07:BD:A1:95:E0:40
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCCF2774A188BD25DE091196C3F179
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ENhmKGve6HMvvjL4B08HvaGV4EA.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34150
IP address blocks: 2a02:2698:9c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:cf:27:74:a1:88:bd:25:de:09:11:96:c3:f1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=10d866286bdee8732fbe32f8074f07bda195e040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0d:c1:70:94:e7:22:e3:a5:f3:f0:df:fc:df:
cb:f2:84:a1:cf:d5:ee:66:5f:e2:c7:bf:76:9f:e4:
79:a9:33:ad:e8:18:19:08:3c:ce:5a:82:99:6e:ce:
88:16:e4:24:b0:0a:54:c4:83:4c:28:c8:a6:a0:2e:
b6:51:4b:3d:01:51:12:b7:7f:66:a1:1c:c9:c7:1f:
1e:e9:92:05:87:11:35:32:f5:0e:0d:b1:7a:9f:47:
f8:3d:fe:0c:3e:46:cf:09:80:a2:10:d3:bc:ea:a6:
ae:91:89:d4:8f:92:0e:f7:6f:90:f6:e2:b5:7c:a3:
e7:cd:21:28:52:f5:07:24:c0:c2:c6:76:1f:72:7d:
49:2d:07:a4:de:56:f8:3f:0e:fd:17:d9:33:ed:59:
57:8a:9b:34:36:c5:17:ed:b2:3d:46:fe:14:0a:70:
95:2e:f9:2e:d8:7f:ce:76:6c:d3:b5:68:cf:45:7e:
55:c6:88:82:fe:0e:14:27:af:3b:ab:47:ae:de:35:
b7:93:ec:7a:8d:ac:6d:2e:97:d4:98:1b:02:7d:c0:
9f:62:11:43:bb:29:53:08:e2:e4:50:3f:7d:4a:5f:
85:b7:7f:94:1a:48:2e:95:df:68:2c:02:62:ae:6f:
fe:86:f4:44:dc:de:ae:c7:09:3d:3b:18:a9:ee:0e:
db:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D8:66:28:6B:DE:E8:73:2F:BE:32:F8:07:4F:07:BD:A1:95:E0:40
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/ENhmKGve6HMvvjL4B08HvaGV4EA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
22:66:c1:45:84:6a:66:b9:c7:aa:3f:c5:17:40:bc:a0:45:be:
95:08:ab:50:67:f0:9b:97:51:cf:60:33:1e:03:1e:27:16:18:
77:fc:6d:d7:b9:88:46:59:44:66:db:bc:7a:64:3f:ff:3c:65:
52:0e:49:db:e7:31:55:25:81:2a:25:bd:45:cf:fe:08:45:6c:
3c:e0:9b:7f:80:48:ff:26:67:56:73:48:a6:e2:64:6d:d9:33:
8c:01:49:89:f8:6d:86:f5:e8:10:be:76:27:9d:d8:90:b3:9d:
ec:b7:9c:12:40:c0:26:94:4d:04:63:91:b2:e5:0b:67:51:cc:
29:6b:98:07:31:48:83:3d:c5:fd:63:1f:20:59:97:0d:46:e5:
0b:e4:bb:32:f1:b1:88:e4:ab:ca:c9:17:31:b3:72:54:73:56:
ea:26:d5:f4:04:2c:f0:09:a5:38:5f:e3:aa:5d:95:df:24:7f:
8e:d4:eb:1c:f9:f6:5a:02:04:dc:a3:cb:d1:79:11:a7:37:c1:
d2:31:ed:fa:c9:b3:44:14:9d:95:a1:22:ff:72:db:f6:91:54:
4f:44:f8:b1:5c:55:3b:32:c4:73:c5:34:30:03:93:0a:b3:56:
4e:76:ae:02:c1:34:70:7f:85:c0:dc:74:c1:1b:8c:dc:7c:80:
9d:b4:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:22 2025 by rpki-client