Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5nDrDkm6i6Jfc9I5nVWJkGmEBpY.roa
File: 5nDrDkm6i6Jfc9I5nVWJkGmEBpY.roa (raw, json)
Hash identifier: Bz3coAOu8+vSoTEsJN8v7y/37gpu2Z/O5CaZ2Hl85uA=
Subject key identifier: E6:70:EB:0E:49:BA:8B:A2:5F:73:D2:39:9D:55:89:90:69:84:06:96
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018B10A273F0FE7488C7AAC8E7997A33F121
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5nDrDkm6i6Jfc9I5nVWJkGmEBpY.roa
Signing time: Sun 08 Oct 2023 18:52:43 +0000
ROA not before: Sun 08 Oct 2023 18:52:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47400
IP address blocks: 2a10:4640:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:a2:73:f0:fe:74:88:c7:aa:c8:e7:99:7a:33:f1:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Oct 8 18:52:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e670eb0e49ba8ba25f73d2399d55899069840696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:31:33:79:5d:65:93:be:0f:a1:c3:f8:a7:
3e:e1:55:17:4e:26:c9:4c:de:5d:da:4b:fb:61:f0:
05:54:cb:bd:0a:5f:1e:fd:69:d1:29:d8:3b:4f:01:
7f:9e:26:f1:7e:1b:09:0c:64:73:cd:20:11:a7:d1:
21:f4:bb:cb:4a:02:05:20:46:1d:44:34:9f:58:68:
ca:41:7a:d2:9b:5e:75:60:75:0c:74:29:2d:91:59:
0f:aa:5e:ee:6c:7c:fe:97:d6:e0:13:83:d4:27:11:
d1:9c:be:72:cd:39:eb:a9:cb:cb:8b:41:fb:00:f4:
b4:6a:20:ff:87:67:93:28:42:04:a7:a3:c5:7b:ea:
5f:fc:36:3b:ff:8d:a7:63:89:1a:2d:cc:29:cd:3e:
17:71:be:71:52:c2:f8:7b:ad:71:3e:c2:67:b7:81:
12:63:6f:41:97:f7:4a:3a:2f:5b:03:d3:40:3c:45:
16:0e:c9:56:83:3d:62:7f:07:bb:1f:5f:3b:70:cd:
ae:f1:eb:6e:62:22:41:05:0d:5f:20:c7:9d:2f:28:
1c:4a:fc:ec:9b:b9:29:ec:2a:75:06:36:e4:b2:0a:
6b:c2:ea:a4:7d:fa:3d:f4:81:f8:2a:af:82:c3:3a:
69:89:5d:37:c1:af:32:fe:31:08:8f:f0:eb:81:23:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:EB:0E:49:BA:8B:A2:5F:73:D2:39:9D:55:89:90:69:84:06:96
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/5nDrDkm6i6Jfc9I5nVWJkGmEBpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4640:7::/48
Signature Algorithm: sha256WithRSAEncryption
1b:76:3b:fd:b6:32:bf:a7:66:5c:83:d6:e6:65:0a:78:b1:0d:
c4:34:af:61:7a:0e:02:ed:84:b5:ed:b1:31:9f:57:11:c1:36:
c6:f3:dc:1d:31:5d:59:11:51:e2:05:24:a0:36:d2:b2:85:16:
f5:99:5b:c6:32:55:a5:98:0f:b1:44:79:11:1a:e5:3a:bf:fd:
1e:0c:9c:73:75:38:82:f2:e9:b1:a7:15:d2:3b:e2:39:54:f3:
1b:43:b1:ed:eb:b9:9f:23:0f:18:a3:0b:d1:52:05:20:3d:d1:
cb:53:5e:50:4a:ab:a2:eb:fb:41:6a:c4:09:e8:a6:99:b0:81:
91:a0:57:de:ef:89:c0:a9:af:86:83:67:f3:d8:34:65:1e:f9:
02:98:02:20:72:4e:82:2e:ee:de:5b:ed:8a:ef:66:19:65:c5:
14:24:c9:26:c4:06:40:b6:9f:e4:dc:54:88:14:a4:ae:7d:5a:
d8:25:52:d5:e2:ac:e9:92:2e:62:55:32:66:e6:77:8f:01:42:
73:8a:f3:ba:df:9a:50:c9:21:8a:bc:67:62:d0:94:72:7c:3f:
b5:ca:08:7d:59:ae:57:c5:5c:db:36:9b:86:9a:11:44:2a:6d:
6e:bc:ac:b4:e1:1f:ca:61:8a:3a:d4:10:4f:dd:2d:ce:37:ed:
58:37:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:05 2024 by rpki-client on console-fra.rpki-client.org