Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa
File: 4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa (raw, json)
Hash identifier: DHEy1kSYLWt7sIOA5VgOo732H4L/ljelS+FDGEcznug=
Subject key identifier: E1:B2:F9:02:1A:67:A5:43:93:6E:93:F6:D0:F9:F1:49:0D:45:3F:1C
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC4936F9FFB713051F07DC5631A4F1166
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50801
IP address blocks: 2a0d:2146:be00::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 15 Oct 2024 15:31:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6f:9f:fb:71:30:51:f0:7d:c5:63:1a:4f:11:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1b2f9021a67a543936e93f6d0f9f1490d453f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:49:f0:39:21:6a:97:fd:b8:ca:3d:0f:23:6c:
8e:38:68:bc:71:10:90:f7:19:ab:7c:ec:18:69:65:
e3:fb:08:55:a6:e6:80:f0:44:49:b7:05:1e:e1:f6:
54:d5:10:01:c4:3a:e1:89:2f:61:62:00:d5:1a:c3:
44:94:1a:b2:5c:df:e7:da:f8:4e:a5:27:13:1c:fe:
46:99:73:e0:ef:1e:9b:23:15:79:a5:eb:91:70:12:
1a:63:c9:2d:5d:33:55:51:d9:dd:ef:e7:7c:99:fb:
ee:94:d6:9e:87:e3:85:da:bc:ea:95:b2:01:58:fa:
4f:d3:6b:8b:3f:ae:75:f4:c8:6f:17:8c:b1:0b:5a:
d3:3b:9c:c9:19:85:15:a1:ef:70:8c:6c:74:43:c2:
b9:0d:a9:71:38:38:22:ec:51:3d:8c:eb:bb:12:80:
fc:e8:40:35:1e:4b:74:6a:8c:ea:b5:8f:81:f3:08:
08:7f:9a:04:65:bd:36:d9:b8:f5:b4:1a:67:41:06:
57:e3:f7:fc:8e:85:5f:71:0f:c9:d5:11:c9:e1:8f:
91:ad:1b:f4:77:12:f3:25:ef:74:4b:c9:0f:fa:62:
f1:44:6a:64:73:d9:35:93:fa:79:d8:ab:f8:4c:6f:
6e:7b:85:1d:58:bc:c4:b9:60:e8:4d:1e:02:fb:c2:
64:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B2:F9:02:1A:67:A5:43:93:6E:93:F6:D0:F9:F1:49:0D:45:3F:1C
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4bL5AhpnpUOTbpP20PnxSQ1FPxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:be00::/40
Signature Algorithm: sha256WithRSAEncryption
bd:fe:7a:28:85:57:35:26:32:78:6b:1b:fc:eb:8d:16:50:af:
65:4c:d6:71:91:3e:f5:87:4b:37:ba:39:06:9d:9f:8a:86:bf:
95:bf:b2:97:05:5c:9e:a9:05:99:23:d3:1d:e5:81:53:6d:8b:
73:48:dd:1b:f9:ff:82:17:52:f5:34:75:49:66:e6:22:3f:9f:
74:96:04:02:07:b1:4a:38:81:b2:40:63:30:f7:80:f5:80:06:
23:c0:7d:d7:30:8a:9b:cb:54:a3:5e:79:38:b4:04:1d:13:b4:
40:a1:f3:8c:c1:b5:9b:53:98:1e:4e:b9:98:f1:f8:97:b9:9f:
3c:ca:3e:9f:bb:08:59:00:b2:7f:90:36:55:77:b4:ff:0a:e8:
c5:66:32:cb:df:a4:70:ca:c2:1b:4c:e5:49:b5:2a:51:5d:73:
4a:b6:e4:8f:2b:28:dc:ab:3e:09:b1:4a:c5:ba:e2:12:bd:6c:
11:6a:04:3f:0e:e3:34:d6:b3:c1:81:08:5b:50:75:43:2a:c6:
85:8d:7a:2c:45:2e:49:5d:26:ab:f8:6d:d7:65:50:38:46:13:
34:b4:8a:ab:3c:c6:33:68:06:dc:95:02:a0:a6:73:9b:84:70:
85:3d:7f:26:2c:14:ef:1c:b2:78:1f:48:16:87:ce:ff:bf:4a:
f7:43:39:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 18:52:44 2024 by rpki-client on console-fra.rpki-client.org