Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/sNyRIxzrEkRao1acNQMASaCu_9Y.roa
File: sNyRIxzrEkRao1acNQMASaCu_9Y.roa (raw, json)
Hash identifier: SWErOoe40Tse/K8GeunlW+fQUMH8XG9F3grnm8gRMrI=
Subject key identifier: B0:DC:91:23:1C:EB:12:44:5A:A3:56:9C:35:03:00:49:A0:AE:FF:D6
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 0191EB5E43C50270E0076323B4995EDFFCE3
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/sNyRIxzrEkRao1acNQMASaCu_9Y.roa
Signing time: Fri 13 Sep 2024 12:31:48 +0000
ROA not before: Fri 13 Sep 2024 12:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50225
IP address blocks: 2a0b:9800::/32 maxlen: 32
2a0b:9801::/32 maxlen: 32
2a0b:9802::/32 maxlen: 32
2a0b:9803::/32 maxlen: 32
2a0b:9804::/32 maxlen: 32
2a0b:9805::/32 maxlen: 32
2a0b:9806::/32 maxlen: 32
2a0b:9807::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 15 Oct 2024 06:36:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:5e:43:c5:02:70:e0:07:63:23:b4:99:5e:df:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 13 12:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0dc91231ceb12445aa3569c35030049a0aeffd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:f8:07:ca:29:3a:77:f4:08:23:a5:9f:f4:
64:59:dc:26:74:10:20:79:6a:46:bb:37:dd:c6:12:
8c:ea:26:4d:ca:6c:ea:7f:f7:a4:72:4a:c1:f1:1b:
1f:5a:02:c0:0d:1e:18:7c:68:e7:8e:cd:c5:66:7c:
d8:67:2b:ac:e2:73:a8:c8:0f:9a:69:6d:41:f7:3a:
8f:a9:62:0f:8e:39:e1:65:7d:eb:02:7a:70:49:b3:
d4:82:f1:c4:34:e5:96:6d:e7:86:17:32:d9:9c:4b:
8d:7e:52:24:f1:cc:bb:5d:77:e3:50:3c:a4:3c:1e:
7d:99:78:95:48:41:37:08:3d:ff:4a:46:c4:03:d4:
f5:8c:e8:0c:e5:8e:10:9a:21:36:49:33:51:81:ed:
8c:ea:84:00:cb:cc:e1:5b:3a:3b:d3:2f:f0:2e:d4:
96:49:96:c6:7d:34:ee:48:7a:9b:66:47:f7:75:84:
8d:45:ce:5d:a0:00:64:49:7a:53:60:ae:53:30:a2:
dd:8e:24:9e:17:1c:00:b2:82:f1:bb:9f:cb:3d:a8:
19:db:de:64:24:26:b5:0a:64:60:af:16:97:45:7f:
1e:c4:be:99:3b:91:84:b1:04:7f:24:20:eb:27:eb:
80:90:6d:db:9e:6c:2a:71:29:b2:1b:6c:92:fe:df:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DC:91:23:1C:EB:12:44:5A:A3:56:9C:35:03:00:49:A0:AE:FF:D6
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/sNyRIxzrEkRao1acNQMASaCu_9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9800::/29
Signature Algorithm: sha256WithRSAEncryption
5f:dc:eb:94:8b:23:b5:cd:58:b0:05:83:14:b5:45:88:b4:59:
e5:fc:f4:2e:13:ef:40:a3:1b:39:f1:c8:a1:db:5f:48:96:25:
a1:3c:b6:7d:aa:24:27:6d:b6:c3:4d:f4:f4:00:20:47:5c:5c:
05:25:22:81:a2:d4:77:74:bd:37:34:bc:03:c1:e8:2a:60:5e:
72:4c:f9:2e:53:98:d3:3e:cd:a7:f8:97:23:5e:d1:3b:19:45:
0d:02:f3:84:41:19:b5:d7:59:35:da:2a:ef:da:bf:08:e7:2c:
26:df:1f:0d:42:4d:ab:8d:74:7e:25:1e:fb:8c:74:09:dd:f2:
b1:ba:e7:cc:9d:87:e7:ac:70:3c:97:3d:1f:29:73:9d:12:c5:
6d:a9:67:86:ed:de:f6:c3:02:68:3b:a6:ea:31:4d:76:dc:28:
95:0f:e7:0a:6d:1e:cb:e7:1a:58:3e:81:54:86:a5:63:69:7c:
c4:3c:b7:a7:00:73:bb:45:a1:5b:b8:77:eb:5a:44:4b:1a:92:
36:88:90:23:89:3d:47:88:56:5d:6a:29:a5:20:b4:05:a7:4e:
a1:3f:54:a3:16:bb:eb:75:7d:51:c2:e3:06:34:5d:eb:4a:e5:
78:cd:7b:36:28:46:38:61:ca:25:d9:cb:41:db:2a:be:89:40:
79:7f:f1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 07:36:29 2024 by rpki-client on console-ams.rpki-client.org