Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/JnAEwk-yv1J0jmm8z6e_Phgfnn8.roa
File: JnAEwk-yv1J0jmm8z6e_Phgfnn8.roa (raw, json)
Hash identifier: l6xIoOm6jFmR6ZVOjLVZH8A8VdS0ni/9QwVQZw2m6JE=
Subject key identifier: 26:70:04:C2:4F:B2:BF:52:74:8E:69:BC:CF:A7:BF:3E:18:1F:9E:7F
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 01856C93997A02DEFA4F1C5311008C07E1D4
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/JnAEwk-yv1J0jmm8z6e_Phgfnn8.roa
Signing time: Sun 01 Jan 2023 09:04:50 +0000
ROA not before: Sun 01 Jan 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209309
IP address blocks: 2a0e:e0c5::/32 maxlen: 32
2a0e:e0c2::/32 maxlen: 32
2a0e:e0c1::/32 maxlen: 32
2a0e:e0c6::/32 maxlen: 32
2a0e:e0c4::/32 maxlen: 32
2a0e:e0c3::/32 maxlen: 32
2a0e:e0c7::/32 maxlen: 32
2a0e:e0c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:99:7a:02:de:fa:4f:1c:53:11:00:8c:07:e1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 1 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=267004c24fb2bf52748e69bccfa7bf3e181f9e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f2:3c:3a:d4:1e:f3:6f:a7:a2:18:b7:d0:e1:
7e:2a:07:68:e7:c3:bd:47:90:3a:5b:40:30:3a:df:
3b:38:dd:ec:6a:0b:60:e8:4f:10:38:ec:77:f3:cc:
ba:2a:02:87:44:d1:a9:ae:d6:45:50:cb:e1:ea:64:
8f:48:07:83:71:21:47:c1:bb:a1:32:ba:f8:88:0a:
66:85:c3:89:5d:c8:3d:c7:84:38:9a:c2:66:a4:10:
c8:51:b6:ce:5d:f4:65:1d:4b:08:1f:50:c7:b7:a1:
86:25:f2:ae:04:d5:5d:e4:30:5a:15:d0:3d:b3:bb:
ec:7e:33:d5:90:32:1b:01:7e:64:77:d9:f9:70:b2:
36:d3:34:e8:1b:d1:bd:ee:a4:4f:98:f5:0f:92:32:
41:aa:97:ae:58:0e:47:4d:9c:9d:6e:20:0c:11:5e:
39:c4:c1:a1:3a:04:cd:d7:48:ad:fa:76:65:2c:6d:
ba:35:e2:59:3c:0f:67:cf:cd:cd:36:2a:2d:5c:92:
ab:3e:27:b4:ac:04:cf:ca:a7:8a:c5:40:52:1a:53:
ba:ab:09:58:dc:c5:d5:01:c0:4b:53:6c:6e:2f:09:
40:48:cc:23:13:d1:db:ad:b0:79:80:d5:64:07:05:
80:23:f6:49:02:64:76:86:5d:a2:71:3c:2a:2e:a2:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:70:04:C2:4F:B2:BF:52:74:8E:69:BC:CF:A7:BF:3E:18:1F:9E:7F
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/JnAEwk-yv1J0jmm8z6e_Phgfnn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e0c0::/29
Signature Algorithm: sha256WithRSAEncryption
24:cc:9b:93:20:d4:26:fe:d8:1b:3b:28:1a:21:fe:39:45:a8:
10:06:ce:42:e9:f4:ae:db:83:ea:c2:c4:c4:b0:16:84:b2:56:
dd:45:ff:0a:da:71:e0:ed:0d:aa:59:0e:41:a3:3c:66:14:b5:
ff:89:06:98:ab:52:38:f3:7e:9f:fe:83:ab:31:41:25:1c:cb:
5a:24:7a:53:48:eb:3d:db:8e:7d:54:e7:21:5c:d5:77:9b:3f:
b3:ec:36:a2:b9:0e:77:e6:f4:6d:59:e5:c4:ea:ba:5c:21:e7:
7a:65:aa:90:d0:1c:29:a8:7e:fe:17:10:06:e4:93:bb:2d:90:
1d:6a:36:3d:3f:f1:76:9e:ef:26:49:ca:0d:1c:4f:2a:a8:76:
57:f5:df:96:9d:28:fb:7e:44:01:78:c6:07:be:d5:39:fd:2c:
a8:34:f7:cc:0b:64:e8:f7:1c:e8:61:8a:23:a4:f8:b3:8e:59:
8b:9f:7f:4d:a8:a3:9a:b1:11:04:17:2f:4e:1e:02:95:6a:c3:
a2:04:66:7a:96:c2:09:49:87:8f:4e:95:a0:0b:1e:08:33:fd:
c7:c5:04:a1:0a:e5:4f:26:73:99:7e:de:63:ae:6b:ed:b0:f0:
70:7f:f4:42:95:e6:42:fb:63:a8:e3:8e:ff:5a:23:df:04:30:
6d:13:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org