Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/m0Lq37kJkP68VMNxyS1YoeJUgn8.roa
File: m0Lq37kJkP68VMNxyS1YoeJUgn8.roa (raw, json)
Hash identifier: mQTWCbnwTpy3dcGrAaNtDStWqInr8RYea1N5sdVcf1E=
Subject key identifier: 9B:42:EA:DF:B9:09:90:FE:BC:54:C3:71:C9:2D:58:A1:E2:54:82:7F
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 0185A4633A1104E457A712CFFC7975AB5C2E
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/m0Lq37kJkP68VMNxyS1YoeJUgn8.roa
Signing time: Thu 12 Jan 2023 05:10:44 +0000
ROA not before: Thu 12 Jan 2023 05:10:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208861
IP address blocks: 2a0a:4780::/32 maxlen: 32
2a0d:60c1::/32 maxlen: 32
2a0f:cc82::/32 maxlen: 32
2a0a:4782::/32 maxlen: 32
2a0a:4783::/32 maxlen: 32
2a0a:4781::/32 maxlen: 32
2a05:fb45::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a4:63:3a:11:04:e4:57:a7:12:cf:fc:79:75:ab:5c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 12 05:10:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b42eadfb90990febc54c371c92d58a1e254827f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:25:6c:89:f5:0a:cb:48:85:51:44:b8:bd:0d:
2a:8b:35:5f:2b:cc:a7:62:6e:70:2b:93:57:a2:51:
b3:f6:bc:ad:79:50:b3:81:b9:05:39:c5:39:03:58:
24:c9:44:9a:ff:fd:2b:fd:2b:8c:82:92:6b:14:11:
8b:57:b5:e2:95:f3:c5:01:e7:eb:0a:ad:d1:a8:44:
7d:ff:b2:aa:22:b3:41:27:bd:7b:e8:67:8a:cc:f0:
63:70:d1:c4:a9:51:06:68:62:c1:da:bf:a2:de:b2:
bf:3f:92:fd:08:fa:7b:b8:41:64:91:53:20:39:ee:
a3:d2:be:66:ca:0e:e5:91:0b:9b:fa:84:62:97:5d:
d7:bb:51:23:17:cd:19:fe:22:31:f7:89:78:41:da:
89:c5:2b:45:d0:e4:f4:fe:9a:02:ad:87:08:e5:bd:
40:3f:df:e5:48:4a:c1:24:22:a0:35:5f:0f:87:a0:
a8:8b:c5:22:2c:cd:03:56:db:ed:fe:10:4b:c2:34:
ad:28:29:b6:87:fb:bc:e4:de:40:ad:f4:51:db:6d:
4f:84:fe:09:4f:6c:77:81:fd:4d:f8:a6:dc:d3:0c:
2b:fd:c8:1f:b5:83:f0:ac:bc:f3:3c:b2:8d:1d:e3:
91:f7:3b:c1:67:cb:4a:0a:89:1a:14:0b:1d:d4:10:
e0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:42:EA:DF:B9:09:90:FE:BC:54:C3:71:C9:2D:58:A1:E2:54:82:7F
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/m0Lq37kJkP68VMNxyS1YoeJUgn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:fb45::/32
2a0a:4780::/30
2a0d:60c1::/32
2a0f:cc82::/32
Signature Algorithm: sha256WithRSAEncryption
36:87:42:39:73:26:2d:19:70:0e:7a:0e:59:1a:60:8e:a0:4d:
f5:08:02:67:53:2a:6a:6b:aa:5c:89:0a:24:f0:60:b4:b8:0b:
0d:ec:5e:a9:05:60:fa:30:3f:70:ff:42:fd:ce:56:77:a1:da:
7f:78:ca:45:6f:b9:d6:80:9d:4d:11:e9:3c:aa:d7:38:66:48:
d9:04:3d:dc:12:cc:ff:cf:a9:1e:c4:23:96:99:dc:1c:69:56:
cf:9e:a8:8c:61:6f:b7:fe:4a:08:49:5f:be:ab:f3:c9:53:26:
d0:fd:c2:4c:54:00:7c:3d:f7:5d:6b:1c:24:03:74:41:21:f4:
ff:2e:90:1b:64:38:f6:00:b5:dd:40:ba:a6:c7:44:81:01:e9:
cf:e5:38:8b:0c:c6:47:5e:26:90:75:aa:06:f4:b1:d8:32:41:
1d:07:4f:b6:e0:f7:4f:d3:ed:1f:70:3c:d1:04:58:f7:23:4a:
65:51:bf:74:36:80:e2:84:9d:81:f7:1c:29:9e:69:14:75:d1:
99:2a:e0:df:5c:a9:ca:11:33:eb:12:e9:69:c0:e2:5b:2e:0b:
c7:0a:c9:04:6b:34:85:38:65:5c:f6:fc:9d:22:b1:bd:ac:57:
fb:7a:96:f7:b1:a9:13:20:cb:ad:44:e1:05:34:10:f0:fc:a2:
05:07:4b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:58 2024 by rpki-client on console-ams.rpki-client.org