Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/nI91I4YhIHejbEB4c0NyZ55SaKs.roa
File: nI91I4YhIHejbEB4c0NyZ55SaKs.roa (raw, json)
Hash identifier: NgxO9Psg+BGoCOrkVRJvvkjVYU+KeV4btwmhOryxj78=
Subject key identifier: 9C:8F:75:23:86:21:20:77:A3:6C:40:78:73:43:72:67:9E:52:68:AB
Certificate issuer: /CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Certificate serial: 018CD8C2B61D8FEA86983EC399DF4BF70BAD
Authority key identifier: B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/nI91I4YhIHejbEB4c0NyZ55SaKs.roa
Signing time: Fri 05 Jan 2024 08:34:48 +0000
ROA not before: Fri 05 Jan 2024 08:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a14:2a00:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 08 Feb 2024 08:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d8:c2:b6:1d:8f:ea:86:98:3e:c3:99:df:4b:f7:0b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b360f0097be481c21bb1d51c85d44f6574158aa9
Validity
Not Before: Jan 5 08:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c8f752386212077a36c4078734372679e5268ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:19:4c:2e:3b:8f:40:29:c5:64:3a:0e:72:
c8:03:46:e9:48:a4:e3:99:2b:e6:ac:bc:39:9e:62:
67:d0:6b:bf:e1:b7:4a:c9:76:67:47:94:f2:c0:58:
f3:d3:05:b4:2e:b2:d5:4a:24:84:1a:a5:06:70:66:
76:d3:01:29:73:98:30:b8:7c:48:22:c7:e0:5f:14:
95:cb:ab:fa:e8:d7:3a:13:2f:2f:eb:da:cb:4c:81:
ab:76:55:20:4e:e2:eb:25:c8:20:fe:8f:d4:a8:38:
2d:41:31:4b:8f:3b:ed:22:5f:b6:bf:a1:c1:28:c2:
3d:66:6d:b1:d7:1a:e6:41:c7:3a:99:06:1a:cb:fc:
fe:fb:8d:fb:63:15:29:4e:99:33:6f:08:ef:f5:b0:
94:db:e6:23:d3:bb:3c:e6:80:5a:a8:a1:41:5e:84:
0f:ff:0e:86:e3:ea:74:a4:f5:31:50:45:83:47:03:
f1:fc:2c:1a:38:07:50:ac:a5:9d:0c:50:bd:be:9e:
48:9b:e7:98:b3:ba:84:53:25:2f:b1:63:c6:b6:b9:
bb:59:ae:f7:30:d0:ab:d3:53:13:18:fc:df:88:90:
9a:57:9c:8b:d2:df:87:62:af:50:65:0b:46:99:0a:
78:97:5a:ca:f0:e6:13:89:6f:ec:15:b9:58:ac:71:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:8F:75:23:86:21:20:77:A3:6C:40:78:73:43:72:67:9E:52:68:AB
X509v3 Authority Key Identifier:
keyid:B3:60:F0:09:7B:E4:81:C2:1B:B1:D5:1C:85:D4:4F:65:74:15:8A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2DwCXvkgcIbsdUchdRPZXQViqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/nI91I4YhIHejbEB4c0NyZ55SaKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4aa5a7-8bec-4247-a15f-5a3612352b37/1/s2DwCXvkgcIbsdUchdRPZXQViqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2a00:100::/40
Signature Algorithm: sha256WithRSAEncryption
00:34:72:de:95:00:f9:b5:eb:ca:53:74:e7:24:23:95:18:75:
ba:5e:7a:45:32:61:d0:24:96:20:a3:3f:96:98:c6:b4:48:2e:
e9:b8:1b:b1:94:36:ae:0f:50:7b:ba:f5:54:3f:18:d9:02:a0:
a1:d8:1c:a2:05:f9:58:d5:38:e5:1f:a6:36:02:a8:bc:40:cf:
e9:8c:d5:09:a4:6c:d8:1a:83:5c:bb:07:01:c4:a3:06:ec:9e:
bd:60:10:15:55:74:72:88:8e:92:8f:01:8e:7b:9a:b8:3c:e1:
bf:3d:ee:e0:43:7b:07:3a:78:60:a9:5b:08:6e:d5:72:a1:60:
4d:c4:d1:3d:68:22:3e:cf:fb:7a:5b:fd:e2:f1:ab:fd:cd:26:
9b:85:8f:97:10:6e:15:06:fb:9d:1d:30:fb:4d:58:48:04:d7:
58:5b:86:b0:fb:e3:4a:7a:53:96:0c:0b:97:eb:d3:05:99:fb:
a0:7e:12:7f:09:b7:4c:84:eb:15:08:a6:cd:82:b1:78:20:e8:
84:b8:c9:ce:89:dd:b8:f2:36:e4:f2:1d:57:8a:93:10:86:a8:
14:cf:ac:a0:e0:ff:40:1c:99:4a:f4:bc:93:2c:b8:80:5c:b5:
2f:de:df:ee:33:3d:66:0c:67:22:94:4d:a9:a9:d2:75:ac:22:
0c:97:a7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:27 2024 by rpki-client on console-ams.rpki-client.org