Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa
File: nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa (raw, json)
Hash identifier: kyNewgW1PioBleRNBoScSXYG70qK2G0yrxAjbqXBqig=
Subject key identifier: 9E:A3:2B:A3:DC:A3:FA:E3:8E:61:16:A3:D0:07:12:27:DC:2E:A2:A3
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C4169D2FC03BC90DF935088C5A8C1B9
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa
Signing time: Sun 01 Jan 2023 07:35:04 +0000
ROA not before: Sun 01 Jan 2023 07:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202776
IP address blocks: 2a0d:2587:c250::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 May 2023 08:11:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:69:d2:fc:03:bc:90:df:93:50:88:c5:a8:c1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ea32ba3dca3fae38e6116a3d0071227dc2ea2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:3a:b2:ec:a1:f9:de:69:d4:e9:10:bf:58:
94:4b:d6:d6:3c:bd:7d:1e:2c:24:80:6a:15:1c:e2:
c8:ff:9f:c0:dc:9b:b6:4d:fb:99:2c:c9:65:44:40:
79:03:91:df:c3:0d:b2:37:08:21:4e:f9:2e:6f:6c:
9a:20:49:c7:39:a8:30:e1:88:36:87:6f:96:5e:ca:
2c:99:63:c8:bc:c0:d2:69:94:4e:fc:9c:29:80:e8:
04:f0:66:00:ef:49:c6:35:d2:e6:10:d4:d9:f7:e7:
cb:40:e0:4d:8a:2d:59:3a:e2:bd:38:a8:27:b4:21:
3b:79:05:29:a0:4b:58:44:42:a5:68:79:b0:3b:16:
07:b5:51:36:26:6d:be:ef:df:e6:f3:b8:8e:e0:97:
d0:50:fe:d7:3e:7b:c6:32:9c:61:47:7b:5c:90:3a:
f6:4b:71:ef:0d:8c:8b:c4:ad:a4:6d:03:bc:ce:9b:
1a:d2:3b:cd:41:95:f6:f3:9f:1d:e6:3b:54:d6:ed:
7f:1c:cc:56:c0:99:e2:08:11:4d:68:9f:09:ef:f9:
a2:43:23:f5:ca:16:d3:6b:a4:65:80:33:7d:b4:df:
2d:67:0d:96:ba:1a:c0:0c:fb:20:24:88:d0:f5:66:
ff:66:6d:f2:dc:f0:9c:5f:a2:1c:49:ac:72:2f:67:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:2B:A3:DC:A3:FA:E3:8E:61:16:A3:D0:07:12:27:DC:2E:A2:A3
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/nqMro9yj-uOOYRaj0AcSJ9wuoqM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587:c250::/44
Signature Algorithm: sha256WithRSAEncryption
b7:b9:75:bd:63:32:1c:ee:4a:ba:bd:bf:16:5f:82:71:a4:79:
b1:b4:bc:7b:b1:be:55:e7:08:ba:7a:b2:a7:5e:1a:70:6c:b6:
94:d4:73:93:31:e9:39:0e:cd:84:96:88:97:ee:32:da:cb:bc:
91:d4:da:95:fb:d9:c7:6c:77:b8:ca:7b:cd:ee:38:d9:d2:9c:
e2:f9:07:2a:4c:f6:8c:2d:78:13:2e:42:36:5d:52:b9:34:9d:
44:e8:24:e0:93:1a:43:7f:76:95:19:42:2b:ab:b7:6d:54:75:
2c:0b:19:ec:26:c8:05:bf:06:3d:06:a0:5d:f3:7a:a9:33:e1:
48:ae:de:a7:d1:c1:23:4b:46:be:f5:cb:45:17:7c:9c:ca:93:
b8:18:e0:6c:b7:39:ca:10:df:31:95:23:8b:c5:4b:df:73:48:
65:0d:a8:11:68:80:aa:a8:8a:ba:84:45:73:4c:15:5b:85:fc:
c8:9a:f5:58:97:04:35:61:fc:a2:7e:46:48:ac:9b:2d:d0:63:
1c:9f:ca:a4:d5:2e:11:10:01:92:fd:fd:57:6e:e1:73:7e:2e:
fa:67:50:6f:b3:d3:13:e4:3f:7a:8e:e0:99:8e:8f:63:ed:b1:
58:7b:8c:63:69:ad:54:14:72:cc:fc:b2:05:98:4c:71:ac:71:
1a:60:0a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org