Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/n6WsUm782oUsgXgDcyPfSbGMvWI.roa
File: n6WsUm782oUsgXgDcyPfSbGMvWI.roa (raw, json)
Hash identifier: z0g/fvO86Uwa7lO7/goWg2pxy3PpqNxEqRX0C2PkJVc=
Subject key identifier: 9F:A5:AC:52:6E:FC:DA:85:2C:81:78:03:73:23:DF:49:B1:8C:BD:62
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EC47652B1981E0F659CE5CB9A3168255E
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/n6WsUm782oUsgXgDcyPfSbGMvWI.roa
Signing time: Tue 09 Apr 2024 20:04:32 +0000
ROA not before: Tue 09 Apr 2024 20:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a11:e8c0::/29 maxlen: 29
2a11:ff40::/29 maxlen: 29
2a12:2e80::/29 maxlen: 29
2a12:3c00::/29 maxlen: 29
2a12:8a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 10 Apr 2024 06:56:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:76:52:b1:98:1e:0f:65:9c:e5:cb:9a:31:68:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 20:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fa5ac526efcda852c8178037323df49b18cbd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:4c:5d:47:e1:e9:f6:f5:70:7d:ed:4d:91:
c9:41:46:be:45:79:d2:49:01:53:23:9d:70:e7:50:
f9:d5:19:72:67:25:07:52:85:f6:bf:55:fc:c9:1a:
5e:e9:9f:ec:8c:ce:09:06:02:3d:f0:32:28:8f:38:
8f:d0:65:4f:cd:11:b2:94:7c:1c:08:dc:a0:42:73:
0d:88:19:2d:15:b1:e9:e5:2a:6a:ab:39:df:88:73:
ba:97:2d:81:5d:52:95:5f:a0:b3:20:4b:7d:7c:78:
03:c8:3b:6a:6e:ac:0c:af:8b:e1:10:5d:fb:31:6f:
c2:26:7d:4e:00:f9:64:d5:9b:6a:f3:cb:a7:8d:8b:
48:e6:ca:61:d4:eb:d8:a8:27:ad:ca:c9:b6:92:69:
87:9c:47:ea:5e:08:c2:20:77:c9:e3:ed:05:dc:a0:
a4:09:06:6d:3c:cb:cd:f0:2e:73:b0:52:d0:a3:b6:
51:cc:81:3f:46:f5:16:bd:fe:fc:ed:2c:bf:04:6f:
f3:4b:49:4d:f2:e3:88:7d:6a:f4:ca:5b:13:1f:57:
66:09:a6:6c:eb:e5:b6:6f:d5:1c:f0:37:9a:6c:86:
d7:ee:65:f0:ae:32:0a:40:8c:51:9f:9e:50:35:f7:
c6:b0:85:96:49:dc:a2:19:00:82:cf:de:14:01:c6:
a0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:AC:52:6E:FC:DA:85:2C:81:78:03:73:23:DF:49:B1:8C:BD:62
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/n6WsUm782oUsgXgDcyPfSbGMvWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e8c0::/29
2a11:ff40::/29
2a12:2e80::/29
2a12:3c00::/29
2a12:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
83:6d:09:b9:5d:d9:12:4b:2c:8f:c2:e5:28:3f:91:e3:7e:b9:
f5:2b:22:ed:d8:7e:19:af:95:b8:45:04:50:0f:5e:1f:5a:1b:
2d:39:f7:49:ea:91:5d:cf:ef:4a:e1:09:70:e9:e1:57:39:f0:
24:e2:14:f3:f8:45:29:98:76:58:98:bf:63:3b:fe:6d:6e:8f:
e9:9b:75:e3:0b:7f:94:2b:1c:99:a8:6a:31:4f:bd:c8:09:fd:
9d:67:26:d4:4c:8a:29:50:6a:97:33:11:20:2b:93:a7:e8:13:
95:0e:44:47:ba:3e:e9:5a:d5:bb:da:94:e9:dd:d2:e1:81:bd:
65:92:11:29:15:36:8f:7a:8d:90:40:26:14:6f:ec:50:c6:2c:
0d:d9:8a:a9:19:72:9b:51:ac:70:c9:9c:33:d0:8b:ff:55:01:
ba:76:25:fa:fc:46:53:1d:a7:42:f5:da:8d:28:b1:94:8c:20:
92:45:5a:6e:a7:64:a4:d0:98:54:94:23:cb:aa:da:64:91:65:
3e:e7:9d:90:8e:73:9a:f2:db:ec:ab:37:87:3a:56:a7:42:65:
73:ad:0a:44:cf:0b:ac:cf:ff:fb:b6:59:44:03:0a:c1:02:85:
8f:52:68:65:57:b3:58:6e:c9:67:d6:c2:46:12:6a:cc:21:4a:
10:71:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:08 2024 by rpki-client on console-fra.rpki-client.org