Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Sxwb951NQI_N_UCwiRidy2bvd8w.roa
File: Sxwb951NQI_N_UCwiRidy2bvd8w.roa (raw, json)
Hash identifier: gWApiM4y0fS/QYZdvwa0alkTY1mbzT2zFM+4hOFRPGE=
Subject key identifier: 4B:1C:1B:F7:9D:4D:40:8F:CD:FD:40:B0:89:18:9D:CB:66:EF:77:CC
Certificate issuer: /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial: 018ADD99380F14241166DAEEA0E8C54A365B
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Sxwb951NQI_N_UCwiRidy2bvd8w.roa
Signing time: Thu 28 Sep 2023 21:02:00 +0000
ROA not before: Thu 28 Sep 2023 21:02:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216435
IP address blocks: 2a10:500:fe00::/40 maxlen: 48
2a10:500:9400::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 30 Sep 2023 12:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:99:38:0f:14:24:11:66:da:ee:a0:e8:c5:4a:36:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Validity
Not Before: Sep 28 21:02:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b1c1bf79d4d408fcdfd40b089189dcb66ef77cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:f3:c7:0f:ca:a0:e8:b8:7d:08:8a:00:90:
38:c1:00:54:1d:a3:33:18:c8:81:3c:61:4f:81:8c:
e7:4a:15:c8:10:66:fc:67:7b:85:cc:0f:f0:92:25:
83:ff:e8:e3:c4:0d:f8:d4:f8:67:b2:ff:71:71:bc:
4e:49:5e:fd:9d:7e:4c:28:d7:48:0e:73:ff:81:e6:
1f:79:f2:bf:bd:fa:b0:7e:8e:1a:83:2f:db:98:20:
87:62:3f:ea:1d:d7:e1:84:a6:ad:65:5d:c7:51:31:
8f:5d:f6:a6:6f:0d:54:4e:e8:c0:84:a7:ca:89:48:
96:97:fc:be:d4:84:3f:bc:e5:94:19:83:f0:12:9f:
66:8c:67:c2:de:41:5f:4c:22:79:73:d8:11:e2:94:
34:a7:9d:37:71:e4:92:60:e6:bd:01:e0:02:3a:7c:
0f:c1:73:21:ae:02:5c:73:07:73:60:3a:7a:01:25:
c0:e0:a5:e7:f0:a3:aa:e6:44:a3:ad:8e:96:20:4f:
eb:a2:d9:81:e0:7a:52:ce:1a:a8:71:3e:32:de:95:
c9:f7:47:b4:26:86:0b:bd:a6:98:62:2f:14:87:76:
92:f7:12:30:9b:d4:0e:d5:47:fc:7e:8d:0c:cf:b3:
40:75:a5:8e:f3:44:9f:6a:2c:ee:42:41:2b:92:95:
ae:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:1C:1B:F7:9D:4D:40:8F:CD:FD:40:B0:89:18:9D:CB:66:EF:77:CC
X509v3 Authority Key Identifier:
keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/Sxwb951NQI_N_UCwiRidy2bvd8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:500:9400::/40
2a10:500:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
87:ec:ab:b2:d5:84:42:3d:e0:7e:bb:29:cf:96:ff:84:db:71:
5d:7f:42:4a:cb:e3:fe:96:63:6d:55:d4:e7:45:c5:0c:df:cd:
ce:16:7a:63:ac:12:56:5e:6b:72:d9:aa:db:bb:9b:fa:29:08:
c5:ee:a5:6b:9b:20:cd:91:a3:0f:b5:47:15:58:d8:18:05:0f:
17:b6:7e:5a:61:34:b7:4f:9f:79:eb:fd:47:79:0c:e7:58:6d:
62:63:03:25:79:e5:b5:5d:a0:8e:b6:17:9a:e1:69:4c:b4:89:
7b:66:c1:9b:9f:a4:d7:92:d6:eb:98:55:c5:0f:91:54:96:80:
59:14:f5:45:a0:28:d3:1b:e1:98:5c:ad:67:47:c6:16:55:3e:
71:ee:90:2b:a1:f2:fd:34:94:57:a9:43:76:e7:fa:cd:b4:1a:
4a:fd:fe:08:6a:a2:16:07:ee:5a:59:2a:95:c5:da:62:3b:27:
37:c6:e2:51:94:c1:e7:b2:fc:a3:e4:c8:95:84:40:76:5d:a8:
f1:02:5e:55:3f:b9:f1:7a:51:54:53:f2:6a:2a:ca:da:fd:bf:
33:ac:c9:90:9e:06:e7:74:d7:1a:76:ad:dc:91:81:ef:e9:d9:
e5:7c:ce:39:eb:54:36:bd:77:a3:06:a3:0b:31:96:0b:79:9a:
ad:7e:35:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:26 2024 by rpki-client on console-fra.rpki-client.org