Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/SWNLZKklSnE3leVBXsx3xKyULzY.roa
File: SWNLZKklSnE3leVBXsx3xKyULzY.roa (raw, json)
Hash identifier: kVPQwuH+0ivKpZJh7THckZJffpLxLHcDI4G5IWtxI8A=
Subject key identifier: 49:63:4B:64:A9:25:4A:71:37:95:E5:41:5E:CC:77:C4:AC:94:2F:36
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 018CC86F58FC8C47630ED50EFF750591A350
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/SWNLZKklSnE3leVBXsx3xKyULzY.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 2a07:db83::/32 maxlen: 32
2a07:db80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 21 Jun 2024 11:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:58:fc:8c:47:63:0e:d5:0e:ff:75:05:91:a3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49634b64a9254a713795e5415ecc77c4ac942f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:24:14:f4:13:df:a2:5c:4c:b3:80:8a:9b:
d3:29:26:26:40:76:3c:e9:9f:0f:ee:af:24:e0:40:
eb:f1:50:2f:95:32:04:e8:d2:33:17:63:74:df:e9:
41:e4:13:c4:18:78:cd:1b:2a:0d:81:5d:6e:a5:8b:
47:6e:99:75:ec:35:01:a2:08:0a:98:fb:e5:27:4c:
8b:15:02:6e:71:3d:9b:53:c5:ac:8c:3e:f0:58:cb:
13:b9:e9:71:2d:20:d1:6f:f5:62:f8:eb:0c:80:c5:
ee:1d:73:da:b3:74:ea:25:45:9e:6c:12:46:17:81:
f8:9c:53:d9:3a:2a:99:56:f1:c6:2a:fc:6e:5a:b9:
73:b7:d0:40:90:06:0b:db:2f:21:9e:e6:2a:e1:57:
8f:38:26:f2:79:64:27:49:d2:64:e4:53:6f:31:ae:
07:50:f1:42:e8:22:ec:23:0f:4a:a8:d3:e1:1d:4e:
16:65:f3:69:29:21:81:04:82:41:4c:d1:34:f1:7a:
2b:f2:1a:1e:9a:44:e3:ed:64:37:fd:5d:68:d4:65:
2e:95:2a:ca:9b:48:9e:dc:06:f1:2a:9e:84:ac:b5:
be:c1:67:b2:66:6d:64:20:a4:2a:91:b3:16:f2:79:
5d:43:77:94:8b:f8:ca:78:5f:b6:61:d7:0c:4e:44:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:63:4B:64:A9:25:4A:71:37:95:E5:41:5E:CC:77:C4:AC:94:2F:36
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/SWNLZKklSnE3leVBXsx3xKyULzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db80::/32
2a07:db83::/32
Signature Algorithm: sha256WithRSAEncryption
57:15:ec:72:75:09:79:49:83:17:e4:62:00:78:1b:94:39:ef:
6f:d3:cf:c8:82:c7:e6:6b:43:c8:29:65:08:52:05:0e:0b:fa:
5d:68:82:bf:7a:62:76:de:f9:81:56:d0:56:fc:d2:42:56:b2:
b3:0a:a2:1e:f8:2a:28:aa:45:ef:e1:da:e0:04:0d:9c:01:f1:
07:f9:64:05:f3:72:1f:87:ce:fa:e0:50:38:ae:33:ab:84:2f:
ab:94:b4:2a:85:8b:8d:e6:a4:4d:1f:73:eb:e6:36:3a:c9:80:
33:36:5f:74:af:0a:f9:fd:8b:de:08:39:af:64:23:ad:c2:6b:
92:39:3b:8e:8f:69:2d:d3:76:73:3b:a7:2b:1c:dc:a1:13:12:
b1:65:c1:76:a9:a0:6a:ea:40:86:ef:e2:65:21:c1:e3:05:0e:
9e:90:57:34:f7:a4:e5:96:72:97:e5:f9:fa:1d:c6:62:6b:0e:
a6:5f:3e:a3:0c:27:b7:59:7e:59:3c:d2:a6:33:98:ac:a9:cb:
75:47:3c:b6:a2:9e:94:1c:e2:3b:d5:b1:d4:ad:00:d4:ad:22:
39:26:19:aa:dc:03:96:26:35:32:ad:47:d4:93:1b:44:11:eb:
18:dd:84:40:18:c1:7d:01:7c:e3:e3:20:af:c6:e1:e1:ad:34:
5b:df:27:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:17:26 2024 by rpki-client on console-fra.rpki-client.org