Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SW78HSF32Y8fy3mH7OsV58x916A.roa
File: SW78HSF32Y8fy3mH7OsV58x916A.roa (raw, json)
Hash identifier: GRf8VBSpENWbwmKrrVTxpKiFAp5Z3gOlU5BABC8PslM=
Subject key identifier: 49:6E:FC:1D:21:77:D9:8F:1F:CB:79:87:EC:EB:15:E7:CC:7D:D7:A0
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 0191411D4BB211EC0CD36B4654E983F71E1E
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SW78HSF32Y8fy3mH7OsV58x916A.roa
Signing time: Sun 11 Aug 2024 11:05:24 +0000
ROA not before: Sun 11 Aug 2024 11:05:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214419
IP address blocks: 2a00:7d81:0:1::/64 maxlen: 64
Validation: Failed, certificate revoked on Thu 29 Aug 2024 15:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:41:1d:4b:b2:11:ec:0c:d3:6b:46:54:e9:83:f7:1e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Aug 11 11:05:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496efc1d2177d98f1fcb7987eceb15e7cc7dd7a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:54:94:e2:73:08:fe:f4:f1:34:9b:af:52:43:
c6:bd:b6:88:e9:49:f1:c4:16:33:88:41:49:91:2b:
5b:d5:f8:5a:07:ce:8e:65:cf:3a:d2:a6:37:26:d8:
0e:d7:d2:f1:d4:1b:9f:67:76:ca:29:1e:9d:dd:e5:
07:fc:2c:40:ee:bf:48:bf:53:37:e6:18:36:6e:41:
57:48:e8:37:9d:f9:09:25:f7:77:a1:e9:ad:38:0d:
a9:6a:db:a5:0c:fe:23:f6:99:a0:95:6a:9c:49:12:
f6:56:81:0e:0a:17:2a:69:10:e1:2d:60:1b:66:9f:
6c:07:87:76:c0:5e:3f:8a:73:ae:63:05:c4:02:2e:
4a:9f:c7:50:93:c8:6e:4c:52:99:f3:79:3f:1b:89:
45:94:e3:dd:17:fd:d9:05:a0:e2:91:82:6e:98:bd:
04:de:73:f6:fd:71:c0:16:15:2f:64:25:21:f2:04:
fd:7b:4e:8a:d9:c3:58:54:bb:32:7c:05:20:c2:ed:
f5:1f:28:a0:07:75:12:a5:e8:24:f9:8f:1c:a7:53:
53:e3:be:0c:71:68:b0:2b:7b:4f:09:43:a5:02:1e:
0c:08:2b:40:c1:eb:3b:e8:55:14:0e:16:a2:cf:08:
85:20:f3:2a:52:47:ba:3f:83:0f:43:b5:c8:66:20:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:FC:1D:21:77:D9:8F:1F:CB:79:87:EC:EB:15:E7:CC:7D:D7:A0
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/SW78HSF32Y8fy3mH7OsV58x916A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7d81:0:1::/64
Signature Algorithm: sha256WithRSAEncryption
4e:05:9d:bd:d7:de:e8:69:71:2d:d4:b0:9d:67:63:03:6f:13:
f1:49:2c:c6:ff:44:4c:10:a5:2d:39:83:b3:ff:38:f5:ce:de:
ac:62:8c:58:32:33:12:43:bd:ce:11:b3:5a:b1:c0:3e:5c:4f:
05:97:38:16:e1:41:d2:e4:14:58:e4:35:11:ae:3f:7a:c9:a0:
3b:32:67:32:c3:9a:67:7a:2f:cf:b9:64:c9:a2:d4:7c:95:5c:
2d:ca:2c:fb:1a:59:2d:66:41:15:e3:25:65:1a:f4:d9:2d:10:
71:2c:12:6b:42:8a:20:c6:54:2b:b3:d0:b8:80:f1:f6:5d:d2:
c6:f8:c3:8f:3f:d5:50:c7:22:cb:f7:e0:80:9a:f0:4d:71:8c:
10:a3:45:c2:26:05:6f:df:2e:e3:16:37:70:50:79:c3:ae:5b:
83:b7:3d:5e:d9:b0:ee:f9:64:47:1a:f0:f7:44:29:10:80:00:
b5:4c:f1:6b:ba:85:78:2f:3e:73:30:90:fa:50:1a:a5:72:0a:
a7:3b:19:96:9d:4c:08:88:2d:d6:8d:4d:c3:00:86:a2:ef:c9:
03:c1:ab:c2:74:f6:8a:2f:0f:b9:53:01:f6:7f:a2:1a:57:9c:
11:f7:89:19:3f:7c:fb:7b:3c:2e:93:dc:5e:c4:4a:85:22:b5:
23:bd:bb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 18:38:15 2024 by rpki-client on console-ams.rpki-client.org