Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/poCrpDMj07KctrxFnmuFR-GwjUA.roa
File: poCrpDMj07KctrxFnmuFR-GwjUA.roa (raw, json)
Hash identifier: g5/5PUKw2ZcayGT8sG03lTkxAwu/jYnoJriZch4SDLw=
Subject key identifier: A6:80:AB:A4:33:23:D3:B2:9C:B6:BC:45:9E:6B:85:47:E1:B0:8D:40
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC493739575A335C0E04E7540467A9AC0
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/poCrpDMj07KctrxFnmuFR-GwjUA.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 2a10:4646:240::/44 maxlen: 44
2a10:4646:170::/44 maxlen: 44
2a10:4645::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 20 Mar 2024 21:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:73:95:75:a3:35:c0:e0:4e:75:40:46:7a:9a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a680aba43323d3b29cb6bc459e6b8547e1b08d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:c0:d1:b4:a3:07:31:8b:d7:6a:5d:1c:d1:
c6:e3:f5:62:ad:8f:97:9d:d1:a6:d0:7d:5a:19:6d:
d9:68:5b:98:6f:c9:72:4e:19:88:62:20:1c:91:b3:
a5:17:64:6a:f8:e6:43:d9:16:1d:32:53:d1:27:19:
72:b2:7a:da:53:6a:82:1a:87:64:46:e0:98:c5:0b:
06:ef:fc:83:b6:e5:ff:f7:76:16:0b:98:1e:70:b9:
9b:88:13:32:7d:57:3b:61:07:18:a8:16:7f:e1:e7:
85:73:29:d6:e3:f9:88:9d:1d:c8:10:62:9f:7f:16:
34:78:0a:a8:1e:60:6c:5e:df:0f:5b:b6:2b:48:72:
c4:fd:a9:4e:ca:8d:53:41:b2:7b:a7:75:1a:a2:dd:
27:b3:6b:d5:64:26:8f:ee:85:03:9b:99:25:a8:7b:
7e:d9:85:f2:4b:79:3e:1d:8e:65:0b:9d:98:0e:6c:
f0:ce:eb:05:e5:23:7a:22:fe:b3:0b:d0:5b:6a:b9:
d0:8a:14:3e:ed:29:1f:5e:c4:5d:ae:18:da:6d:74:
32:60:9d:47:ef:e4:c4:55:78:80:c7:45:92:df:8e:
3c:2a:c9:4f:6a:b3:ea:27:87:b5:6f:b3:a1:9a:7c:
81:8c:9a:97:37:7e:76:9d:82:b6:dc:2c:81:78:be:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:80:AB:A4:33:23:D3:B2:9C:B6:BC:45:9E:6B:85:47:E1:B0:8D:40
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/poCrpDMj07KctrxFnmuFR-GwjUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4645::/32
2a10:4646:170::/44
2a10:4646:240::/44
Signature Algorithm: sha256WithRSAEncryption
3f:80:a7:f1:40:a7:06:93:2f:42:55:60:8d:26:46:a8:b1:e6:
47:66:8f:6a:46:c1:84:e4:00:fd:5a:e2:3e:bd:f1:5f:e1:7f:
48:48:8a:78:b8:c7:6b:ea:79:45:f5:c9:25:03:ef:6b:5c:c3:
ab:0f:c3:01:78:88:ef:7f:4c:6d:fa:be:e8:85:e1:ad:2c:1f:
93:a0:e5:c2:21:65:36:44:b9:27:44:d5:0f:da:09:e2:47:62:
ef:00:e2:09:09:6c:8e:ec:15:d5:c3:c0:54:09:41:d1:b1:53:
60:0e:79:02:e2:b7:a6:c0:34:4c:94:c8:8e:82:2c:63:89:a8:
2b:db:39:9c:84:40:82:cb:34:dd:76:a4:5f:fc:83:d1:4f:45:
1d:ff:50:12:d1:e2:61:94:53:df:9b:23:d4:0d:de:3f:e6:5a:
80:9e:85:96:2c:d9:67:4d:54:a9:dc:ec:a7:72:c9:e7:bc:e0:
81:15:ed:32:80:c7:cc:e9:a5:e6:08:32:e0:0e:8d:92:9c:cf:
3d:af:a5:31:d8:28:dc:5a:06:fd:ad:e3:5e:3b:f8:60:cd:74:
1e:b0:04:c1:56:51:4a:83:ea:e8:bb:58:99:22:10:41:8d:8c:
8c:e8:b6:d1:01:ac:77:c0:d6:00:2e:73:c9:6f:61:c5:78:96:
2a:36:8d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org