Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/46-MV8kwZvqwfLwb9BeNsYah-Ck.roa
File: 46-MV8kwZvqwfLwb9BeNsYah-Ck.roa (raw, json)
Hash identifier: Hww5Q9Sy0lo4ve+iq19lggVIVMzoAagfxCr7riHvKVo=
Subject key identifier: E3:AF:8C:57:C9:30:66:FA:B0:7C:BC:1B:F4:17:8D:B1:86:A1:F8:29
Certificate issuer: /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Certificate serial: 018F59354F23FF45E63432D45E988113B852
Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/46-MV8kwZvqwfLwb9BeNsYah-Ck.roa
Signing time: Wed 08 May 2024 17:16:56 +0000
ROA not before: Wed 08 May 2024 17:16:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 2a0a:7740::/32 maxlen: 32
2a0a:7741::/32 maxlen: 32
2a0a:7742::/32 maxlen: 32
2a0a:7743::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 27 May 2024 22:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:35:4f:23:ff:45:e6:34:32:d4:5e:98:81:13:b8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Validity
Not Before: May 8 17:16:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3af8c57c93066fab07cbc1bf4178db186a1f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:9e:53:cc:53:d0:32:28:fc:59:92:5b:1f:
e2:24:c3:cd:4e:2e:97:d3:b3:0b:4d:9b:14:5b:7f:
61:e7:6a:ce:4c:eb:9a:9a:5d:eb:a4:ee:ca:df:df:
1c:f6:a1:93:43:50:cf:bd:9c:2a:51:f0:7e:e6:be:
57:55:f2:68:18:97:07:ba:ef:f7:f8:7f:00:76:a0:
79:72:39:72:fd:fc:bb:74:95:37:32:83:50:f7:7e:
33:11:46:95:0c:c4:a8:87:b5:08:7b:4d:5d:3c:56:
9e:06:41:f4:e2:fd:47:05:bf:e5:f0:f1:5b:3a:3a:
59:f1:3b:6a:5f:14:e9:a3:3b:1f:19:15:4d:d2:4c:
15:98:4c:22:84:b5:d5:5f:a2:9c:e5:89:fd:8f:d2:
f0:ea:56:51:3a:18:ca:f1:69:be:3a:a2:bd:63:2a:
c0:99:aa:60:59:9c:57:4d:65:21:d9:c5:23:95:64:
81:fd:da:d7:04:a7:8e:21:4f:b1:d0:00:6b:17:00:
30:41:c1:87:6c:22:d4:d8:4d:44:6a:89:89:f9:eb:
74:32:f8:69:57:95:c1:d7:e7:42:29:ce:7c:dc:1d:
0f:8a:3d:04:cd:ab:a5:bf:04:f8:68:7e:ff:e0:49:
b8:23:c8:d2:e3:74:e1:58:7a:62:cd:62:51:0c:2b:
1f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AF:8C:57:C9:30:66:FA:B0:7C:BC:1B:F4:17:8D:B1:86:A1:F8:29
X509v3 Authority Key Identifier:
keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/46-MV8kwZvqwfLwb9BeNsYah-Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7740::/30
Signature Algorithm: sha256WithRSAEncryption
05:9b:e9:28:8a:2b:e4:31:55:1b:89:69:15:12:58:f8:7d:bd:
f1:8f:88:ef:e7:15:16:6c:e6:92:82:54:31:b8:16:d1:f3:85:
4f:f8:5b:8b:65:70:13:66:1c:57:e7:ee:a8:1f:31:01:3f:5f:
60:79:5a:e2:3f:5f:da:92:77:bc:24:d2:5b:41:93:f7:0d:18:
b4:d0:6a:4f:37:06:50:d9:05:a9:c6:02:2d:2c:dd:7d:0e:61:
f1:24:5a:0f:79:6d:bf:49:29:bc:7c:7c:a8:1c:76:59:9f:38:
1e:c4:7d:72:4f:94:24:09:b7:46:b3:b3:77:6a:41:77:26:13:
0d:62:45:bf:a6:a5:e4:1e:4a:89:3e:b6:fb:73:ff:22:28:0c:
a9:94:1d:cd:8e:f9:e5:d0:a1:78:7a:ee:1c:7b:31:bc:26:70:
71:3d:75:54:68:9a:73:d7:1a:6e:6c:1a:33:2c:63:59:7b:bf:
3e:17:32:aa:7d:7b:79:6d:56:20:5d:4c:ce:e7:a0:3c:09:c5:
43:e9:87:6d:66:2d:52:86:97:24:17:8e:42:78:a8:f1:bc:cb:
06:29:b7:47:22:c7:3b:be:77:ed:aa:97:47:69:79:ca:70:83:
6c:bd:0f:ad:62:08:36:06:9c:0c:d9:ef:b3:d4:36:be:71:d1:
9a:9d:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:25 2024 by rpki-client on console-ams.rpki-client.org