Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/r9CihZw9X-t0N7HiOD0hId5tmOo.roa
File: r9CihZw9X-t0N7HiOD0hId5tmOo.roa (raw, json)
Hash identifier: 8skUQi0iwh5XRi5e09H3VkDr/PPMKT38UCLeN24kZ8g=
Subject key identifier: AF:D0:A2:85:9C:3D:5F:EB:74:37:B1:E2:38:3D:21:21:DE:6D:98:EA
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 0187AC33195C75E52E374A51966D6035B69A
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/r9CihZw9X-t0N7HiOD0hId5tmOo.roa
Signing time: Sun 23 Apr 2023 03:40:42 +0000
ROA not before: Sun 23 Apr 2023 03:40:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57848
IP address blocks: 2a0e:46c6:500::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ac:33:19:5c:75:e5:2e:37:4a:51:96:6d:60:35:b6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Apr 23 03:40:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afd0a2859c3d5feb7437b1e2383d2121de6d98ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f4:d0:af:b7:23:2f:aa:89:0c:49:f9:c6:51:
44:bb:34:77:58:91:1b:64:f4:75:90:a5:0f:9b:39:
00:44:2e:eb:fd:36:e3:7e:4e:72:79:2a:42:2b:83:
13:6c:cb:f2:05:18:54:2d:20:64:cf:dc:3b:dc:76:
b0:ad:5a:4e:2a:a4:63:76:1e:ba:21:13:e7:df:ae:
f1:b8:4a:26:89:ee:fe:c6:da:34:ac:5a:13:cb:df:
31:94:e1:f6:5e:b9:70:c3:7f:69:52:33:f7:81:9f:
bd:df:b6:3d:95:5a:cd:67:a8:dd:f1:f1:f6:6c:b1:
82:fe:b5:a0:e9:d8:22:8d:a2:37:69:b0:9a:ad:94:
c6:43:e9:77:16:d6:d4:fd:46:cf:35:ac:76:69:68:
b0:07:72:40:0d:05:8a:4b:48:e8:31:2a:8f:1a:d7:
97:7b:e0:73:0f:64:95:c6:88:b7:a8:2e:d9:73:09:
ed:9b:c2:d6:ec:8c:df:b8:b4:5f:e0:56:d0:6d:b3:
6d:c2:e5:a4:bf:42:70:69:db:e3:ba:cc:5a:f2:b7:
80:7c:79:e6:a9:22:38:f7:4d:18:0b:ce:4f:5c:18:
fe:a9:e9:db:62:70:c6:a6:30:4e:aa:88:d8:bf:bd:
bd:46:ef:ac:35:9b:af:08:08:52:e8:b0:a5:ec:00:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D0:A2:85:9C:3D:5F:EB:74:37:B1:E2:38:3D:21:21:DE:6D:98:EA
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/r9CihZw9X-t0N7HiOD0hId5tmOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c6:500::/40
Signature Algorithm: sha256WithRSAEncryption
2e:59:48:76:f3:7c:d2:9e:9d:cc:66:b0:d4:4a:67:e3:2b:1b:
f5:1b:c9:ef:c5:cd:2e:58:13:fc:55:a9:9a:9a:9c:c4:3e:94:
83:d4:0e:c5:8c:e6:14:ab:57:9a:7c:a6:b3:74:e3:b4:b9:d9:
e2:d2:8c:aa:8c:a1:ec:8e:9e:d1:46:3c:68:de:52:e3:55:61:
7d:a0:28:db:2b:81:07:4e:f0:67:cb:d4:3e:9e:f6:20:77:0d:
e1:c8:6e:2f:34:e4:e7:91:fd:0f:d2:5e:a2:87:d6:ce:60:10:
a2:0c:d9:44:ef:68:ad:8b:38:4e:57:77:28:0d:b5:11:17:4b:
32:cc:f3:d7:a8:77:fe:68:dd:50:26:d3:2d:68:47:40:6d:c9:
76:a9:f7:7c:71:51:60:bb:e5:40:26:c6:45:b2:b5:72:de:73:
31:1c:cb:c6:37:e1:a4:c5:eb:8b:b3:01:58:ad:b6:2f:a8:51:
64:66:85:58:18:60:49:ce:f2:20:84:e3:8e:9d:7a:1c:d0:e6:
4b:20:51:41:3f:86:08:9c:d3:d2:8c:c7:5a:30:d5:1a:7b:b8:
b5:35:8c:35:2c:10:31:58:83:d3:a0:8e:7b:d0:69:97:b8:61:
b9:bd:f8:2e:d3:7d:ca:66:bf:4b:59:a8:53:88:5b:55:55:54:
fe:72:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org