Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/w5xcG4YkrkmiwSeCzS0YUf9QcAY.roa
File: w5xcG4YkrkmiwSeCzS0YUf9QcAY.roa (raw, json)
Hash identifier: 3Ag1vldfZ/TzDnPD+kqrltbTH0pRetnUaRwFj7pHvbI=
Subject key identifier: C3:9C:5C:1B:86:24:AE:49:A2:C1:27:82:CD:2D:18:51:FF:50:70:06
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01884A9EDC44993B4D711FD1215332106FB3
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/w5xcG4YkrkmiwSeCzS0YUf9QcAY.roa
Signing time: Tue 23 May 2023 21:58:24 +0000
ROA not before: Tue 23 May 2023 21:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47484
IP address blocks: 2a10:4646:2f0::/44 maxlen: 44
2a10:4646:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4a:9e:dc:44:99:3b:4d:71:1f:d1:21:53:32:10:6f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: May 23 21:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c39c5c1b8624ae49a2c12782cd2d1851ff507006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1a:06:5c:d1:74:73:4d:eb:d3:24:e6:36:6a:
be:7b:eb:3e:f2:d2:34:8e:e6:66:48:c2:b7:d9:cd:
b1:51:85:14:0c:60:e3:cf:42:bd:af:1e:f5:54:5b:
de:50:aa:5c:c1:1c:88:ba:29:47:b0:c7:69:0b:d9:
9c:45:b9:e0:4e:30:df:71:ea:9b:cf:5c:72:00:d9:
99:8e:0c:56:37:c8:14:61:09:59:84:a7:6a:b2:65:
de:e8:c5:49:3e:10:cd:08:a9:1c:66:03:cc:8b:da:
b4:04:36:70:01:65:31:be:f6:43:54:76:32:c9:80:
8a:04:f9:85:da:b0:c3:fe:da:56:a0:37:a1:d2:46:
78:93:ab:55:05:52:d2:47:22:66:bb:1a:f5:d6:62:
d9:1c:05:87:e2:8a:af:0d:fd:b1:cc:60:9a:90:24:
3c:95:c0:3a:7a:6f:d8:52:9d:56:29:35:25:8c:77:
b8:ad:af:c0:e6:aa:75:8b:cf:9d:1f:88:06:21:97:
b2:fd:44:61:60:d8:0c:e2:4f:2d:e5:a3:4d:ef:49:
e8:b8:16:d0:2d:d1:cb:b2:dd:21:de:91:90:81:30:
00:fc:e4:5d:62:f6:42:69:02:7e:9a:fe:9a:13:ff:
40:fc:0e:65:11:d0:fc:7d:fe:6a:c8:cc:f9:7f:3c:
d6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9C:5C:1B:86:24:AE:49:A2:C1:27:82:CD:2D:18:51:FF:50:70:06
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/w5xcG4YkrkmiwSeCzS0YUf9QcAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:6::/48
2a10:4646:2f0::/44
Signature Algorithm: sha256WithRSAEncryption
38:5c:44:ff:17:57:f7:55:c2:5d:cc:8f:52:c5:51:af:94:88:
fa:25:66:ed:db:65:95:e0:cd:90:0e:5d:32:6f:c9:e0:6e:46:
48:c1:a4:52:d9:34:ae:c1:c4:c2:fc:e2:eb:cd:42:20:5c:d9:
7e:9e:cb:56:2e:89:06:71:10:31:70:68:a1:6a:ca:19:6d:ee:
38:eb:01:02:0d:76:35:f4:4b:ef:44:9f:77:41:f1:88:39:4d:
eb:71:63:d7:c9:ae:0d:9b:63:a1:e5:82:01:b1:c8:2a:d5:89:
71:70:fd:73:43:9c:77:af:9f:8d:65:e5:2c:23:15:2b:b1:4b:
f7:ec:c9:62:da:11:22:46:fd:55:bd:54:b6:9e:a4:80:19:26:
40:ec:a3:82:58:cc:17:16:3a:ce:70:d3:f3:20:c4:e4:f0:98:
04:7e:f0:d2:da:50:11:e5:90:ef:4b:e4:85:ce:77:f2:89:90:
08:de:e5:6a:bf:72:08:6a:df:8a:3c:6b:93:03:66:0d:a3:e1:
f6:9d:88:cb:d5:ad:dc:b6:f5:7d:89:37:ca:bf:4a:e9:66:2f:
03:a4:d6:f8:0d:2d:26:2b:f8:2f:d9:54:c4:d3:e9:c8:78:4b:
4c:9a:0b:2a:e4:04:b7:0d:40:e8:c2:5d:63:c1:23:1e:fe:33:
94:1e:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org