Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/SknVGNVWdJmDVk1g7Gz1MSgWYso.roa
File: SknVGNVWdJmDVk1g7Gz1MSgWYso.roa (raw, json)
Hash identifier: TmBc78Im1pdgzYXhnThuAhHvcUnkld9XN3YnhzZR3L0=
Subject key identifier: 4A:49:D5:18:D5:56:74:99:83:56:4D:60:EC:6C:F5:31:28:16:62:CA
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 018FE4B21804857F31BDD98985873A1FFD73
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/SknVGNVWdJmDVk1g7Gz1MSgWYso.roa
Signing time: Tue 04 Jun 2024 19:20:27 +0000
ROA not before: Tue 04 Jun 2024 19:20:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a11:3c40::/32 maxlen: 32
2a11:3c43::/32 maxlen: 32
2a11:3c46::/32 maxlen: 32
2a11:6bc1::/32 maxlen: 32
2a11:6bc3::/32 maxlen: 32
2a11:6bc6::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 11 Jun 2024 15:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:b2:18:04:85:7f:31:bd:d9:89:85:87:3a:1f:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Jun 4 19:20:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a49d518d556749983564d60ec6cf531281662ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a4:dc:ed:00:9f:ad:ca:b6:67:d5:a7:c3:29:
9e:0a:5e:96:36:64:a7:33:16:00:ba:02:24:0c:ff:
4e:a2:c9:78:48:0d:5b:a2:bf:d4:23:75:1f:c6:80:
30:b4:ec:4a:94:b4:98:95:54:02:02:a0:44:fe:04:
1e:60:0b:85:d3:94:47:35:96:a2:6f:95:b5:26:c5:
17:96:49:69:69:d7:7c:3f:17:2f:79:f8:f9:e9:ca:
52:c8:d0:82:8a:82:1f:1d:85:a0:a1:33:b6:c4:a3:
44:26:c3:1e:dd:cc:03:85:12:98:94:90:cd:8d:ef:
7a:f7:55:de:ea:90:9a:0d:75:b2:12:43:86:91:bc:
b1:05:c4:e9:81:cc:b9:b5:e3:b0:e3:fb:6d:7e:2f:
15:c4:fe:ae:e1:c4:d3:79:e9:56:b8:7f:a5:04:0a:
26:3f:b1:7a:f9:62:34:a2:ba:d1:c7:32:54:bc:73:
e2:13:9d:50:f0:25:d8:44:11:11:6b:81:eb:32:4d:
3c:e0:ad:51:98:9b:35:ad:67:78:61:ce:a0:c6:87:
31:50:d8:7b:5a:e1:47:62:29:47:53:00:e7:17:93:
61:79:30:f4:b2:61:25:d6:8d:b5:1b:00:a8:87:d3:
51:b3:9a:b8:a9:5b:2b:51:af:fe:91:55:0f:d5:a7:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:49:D5:18:D5:56:74:99:83:56:4D:60:EC:6C:F5:31:28:16:62:CA
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/SknVGNVWdJmDVk1g7Gz1MSgWYso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c40::/32
2a11:3c43::/32
2a11:3c46::/32
2a11:6bc1::/32
2a11:6bc3::/32
2a11:6bc6::/32
Signature Algorithm: sha256WithRSAEncryption
8a:1e:c3:10:47:15:10:70:79:60:86:22:f8:bc:20:55:af:30:
e7:00:d3:ab:20:d7:74:91:f1:a2:67:5c:12:b9:48:a9:51:71:
55:3a:2e:f1:64:c9:b1:1a:e0:8c:83:92:3d:93:d5:5c:53:72:
d3:31:5e:29:40:25:11:a7:3e:2b:80:a9:88:5d:12:6a:a2:28:
01:68:f1:3e:57:3e:ac:31:87:c8:2e:b0:a9:5f:c0:b3:cf:b2:
97:77:71:04:4a:e5:af:6f:0a:be:2d:15:a1:df:3d:6a:ac:9c:
15:a5:51:78:5e:7d:1e:85:97:b2:0d:c9:17:af:5c:06:57:22:
eb:a7:29:0c:72:4d:7b:7b:45:ad:72:41:08:1d:95:64:e2:8b:
7a:09:c7:9f:c4:56:cd:a4:be:27:65:ef:0b:37:a4:c8:d1:7a:
64:cf:94:76:45:a2:95:b4:86:4f:10:89:9a:86:6a:fb:a3:45:
89:19:f8:af:a6:82:e1:5c:47:a6:cc:88:04:4d:ce:87:6c:5f:
40:ba:c6:28:d5:89:e5:63:e5:3e:5b:7c:37:9f:61:51:85:b3:
4a:8d:fe:b9:31:af:21:e5:bd:29:6d:03:a2:52:37:33:7f:f8:
38:d3:49:b4:49:34:18:96:80:eb:15:14:14:fa:e5:56:5d:da:
e3:4a:20:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 20:23:05 2024 by rpki-client on console-ams.rpki-client.org