Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/S2iG5q-xT134KBYuk2Kw8ZjAst8.roa
File: S2iG5q-xT134KBYuk2Kw8ZjAst8.roa (raw, json)
Hash identifier: Q6xxSwIVDJtuXyTZhuZIsmlPc7IFY0zCAQt9Jo/BGQM=
Subject key identifier: 4B:68:86:E6:AF:B1:4F:5D:F8:28:16:2E:93:62:B0:F1:98:C0:B2:DF
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F09C9D2094B37FFD72BF4E486F61A
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/S2iG5q-xT134KBYuk2Kw8ZjAst8.roa
Signing time: Sun 01 Jan 2023 08:24:54 +0000
ROA not before: Sun 01 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142632
IP address blocks: 2a0e:46c4:10d::/48 maxlen: 48
2a0e:46c4:10b::/48 maxlen: 48
2a0e:46c4:10c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:09:c9:d2:09:4b:37:ff:d7:2b:f4:e4:86:f6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b6886e6afb14f5df828162e9362b0f198c0b2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:38:cc:13:16:85:53:af:15:da:5d:bf:e1:
e5:47:ae:ca:bb:cb:7d:e0:eb:9f:86:0d:61:3d:3f:
0b:0d:41:2c:2e:a4:15:8f:9f:fc:88:5a:7b:b5:7c:
54:0d:42:02:fc:72:83:a2:a9:76:01:ed:21:b5:f1:
fc:b5:b9:92:3a:e5:f6:a6:76:9f:0e:0d:a6:15:9c:
c9:c3:0c:5c:f7:a1:2b:cd:05:89:80:34:69:e7:d4:
c0:a3:1b:ce:41:16:c2:e2:b7:42:64:e6:85:fd:05:
ea:e7:0b:7d:b2:37:f8:46:23:ea:8c:be:1e:79:b0:
af:d4:16:12:ee:58:e5:00:4c:8c:93:b3:6a:68:02:
11:88:74:dc:7e:cd:fc:0c:0b:99:34:64:7c:f1:84:
06:b8:0f:16:c7:25:95:db:3e:07:42:38:2d:b2:9e:
31:7d:a5:51:1e:66:87:84:cc:d3:f7:9c:1d:3a:82:
35:60:b9:a6:10:cc:60:15:a1:93:72:6a:a5:50:be:
9a:7a:1c:84:6a:ba:4b:ee:b2:1e:93:1c:97:30:cf:
99:bb:ea:9b:a7:59:e9:88:3f:5e:b1:ab:b1:76:17:
5c:c4:3b:04:30:52:67:e6:ed:81:58:ed:bf:1f:4b:
2f:6f:2d:76:4f:f4:ed:6c:5a:b0:df:22:79:74:45:
f5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:86:E6:AF:B1:4F:5D:F8:28:16:2E:93:62:B0:F1:98:C0:B2:DF
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/S2iG5q-xT134KBYuk2Kw8ZjAst8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:10b::-2a0e:46c4:10d:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:56:db:5f:48:3e:59:b0:83:a8:17:99:c3:55:93:de:28:b2:
64:4a:19:a2:74:db:19:5a:85:50:f4:d8:9c:8f:13:18:4c:46:
a9:6a:30:e8:82:f6:1a:cf:d2:bd:61:0d:9d:fa:14:59:02:06:
48:2e:b2:6e:81:ad:cc:e3:90:8d:6e:45:68:5f:90:89:7f:9e:
85:0b:4a:89:63:93:78:3c:74:eb:ae:85:26:d9:84:61:9e:f3:
b1:4f:a7:1b:04:64:1a:5d:c9:48:8c:29:ba:9a:a8:8e:9e:63:
71:83:b0:e4:dc:10:de:d4:f1:5a:0d:13:a4:c1:91:e9:1d:b9:
a2:36:bb:78:83:3a:a7:ae:3f:5d:86:59:fe:3e:84:d3:02:64:
23:44:d5:3b:a7:49:fb:91:59:46:ec:4a:a8:41:a5:c6:f0:8f:
14:6d:d9:fa:44:57:b2:71:00:a0:1c:61:aa:9e:41:f0:3d:fb:
08:f6:9b:9d:fa:4a:93:d7:32:92:9d:1a:dc:25:eb:17:fa:19:
1d:1d:5e:93:a4:eb:03:3d:29:3a:9e:60:1a:4e:fe:19:92:c3:
f0:87:79:bf:e1:84:86:36:52:d7:e4:d7:55:58:49:55:27:8b:
01:6d:ad:47:e8:63:40:2e:f0:4c:9b:80:7e:58:9c:93:5a:42:
1a:a2:fa:ca
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org