Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/1-N5a2SinLU_ec5S5d-EK8kVqVWc.roa
File: 1-N5a2SinLU_ec5S5d-EK8kVqVWc.roa (raw, json)
Hash identifier: bp0XOo388G4r/OkGOCyC5yL16DwAxJK3b+kQMvg2hck=
Subject key identifier: F8:DE:5A:D9:28:A7:2D:4F:DE:73:94:B9:77:E1:0A:F2:45:6A:55:67
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 01856C0A3DDDDFCADEA6093AA278BD338CDA
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/1-N5a2SinLU_ec5S5d-EK8kVqVWc.roa
Signing time: Sun 01 Jan 2023 06:34:48 +0000
ROA not before: Sun 01 Jan 2023 06:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51731
IP address blocks: 46.36.32.0/19 maxlen: 19
2a02:25b0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:3d:dd:df:ca:de:a6:09:3a:a2:78:bd:33:8c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 1 06:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8de5ad928a72d4fde7394b977e10af2456a5567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:df:13:8f:d5:b3:8d:41:ca:bc:87:4b:c3:
17:5d:c5:f1:38:0e:53:0b:27:4a:d2:d1:56:6a:59:
4a:3a:4e:b4:b9:90:6b:b5:e1:8b:9e:9e:ae:a0:a7:
7b:bf:2a:b1:b4:a3:47:6e:79:27:11:db:7d:b1:37:
7c:d7:81:7c:04:db:7e:cf:f5:13:06:45:e5:05:9b:
55:5b:6b:a6:a1:0d:9c:0f:bf:89:5f:83:2d:51:52:
5e:5a:27:51:db:51:6c:3f:7e:bb:31:ca:11:01:fa:
28:88:03:61:61:37:b0:31:30:38:3f:95:f0:2b:0e:
ca:ec:67:d3:cc:16:0d:ac:b3:14:3c:cc:7c:b8:66:
a2:16:8e:a0:f7:53:5d:aa:f6:e5:08:28:57:3b:d3:
b8:ef:91:4d:f7:4c:ea:2d:71:d7:b6:e5:12:32:4f:
7e:fb:0e:57:06:2b:66:6c:72:e1:80:85:02:ef:f4:
9d:0d:cb:ff:69:e9:9f:5f:a1:49:1f:e9:97:b8:43:
b6:fa:c5:89:e4:a8:63:09:cd:04:55:da:bd:57:98:
fe:df:25:54:49:01:34:12:f5:8b:3c:e7:5f:a6:a0:
77:6a:49:4e:0c:13:1f:e5:ca:10:d5:d1:15:81:44:
4a:53:68:97:00:46:d4:9d:c7:cb:0d:7d:e2:81:8b:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DE:5A:D9:28:A7:2D:4F:DE:73:94:B9:77:E1:0A:F2:45:6A:55:67
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/1-N5a2SinLU_ec5S5d-EK8kVqVWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.32.0/19
IPv6:
2a02:25b0::/32
Signature Algorithm: sha256WithRSAEncryption
59:84:a0:ef:de:32:21:69:19:bb:1f:e2:0a:b1:1a:6d:05:60:
98:f3:63:90:14:d3:cd:ed:67:28:c6:6a:8e:a8:f2:28:a3:ae:
2c:09:a6:82:55:84:ea:cd:c3:b9:e0:e3:92:32:2f:11:88:90:
6a:1f:b0:7c:f2:e2:d6:91:ab:8d:d7:28:6d:d6:1c:5e:f0:94:
13:db:ce:dd:18:f1:6a:45:80:e3:e1:92:1a:9a:74:61:65:02:
d2:0c:2e:57:0f:38:07:c6:6f:da:14:a6:3d:42:3c:b1:e9:bb:
62:22:5b:c5:da:81:2e:0d:89:2d:93:27:fd:31:b7:d8:4c:25:
df:c7:a1:da:10:e0:0b:0c:10:dc:5c:13:43:b7:c5:1d:ce:93:
e6:d8:0c:8f:7a:bf:4f:00:ae:80:eb:26:1b:17:62:5c:2a:a2:
5d:5b:08:be:46:66:c9:f1:ab:78:7c:c7:1d:d3:1b:06:bb:fc:
da:f1:ce:3e:e8:32:67:d3:c7:0e:54:22:32:a2:c8:df:35:5e:
73:18:f7:9b:26:f3:fd:9f:64:a7:b5:4c:cb:83:48:79:1c:6b:
6f:a7:a4:c4:3b:8e:06:be:16:d6:10:d3:31:98:6b:a7:01:61:
30:d2:42:4a:dc:fb:94:58:ff:99:3e:f1:96:b4:c4:77:ce:37:
37:fd:09:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:25 2024 by rpki-client on console-ams.rpki-client.org