Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/N5r25OIQwxE-iw63CSWpGtkDjRI.roa
File: N5r25OIQwxE-iw63CSWpGtkDjRI.roa (raw, json)
Hash identifier: SJFdQd1MfuRt+gQ9AOcVaOL3hSEI51oWxFy9EFYQqPg=
Subject key identifier: 37:9A:F6:E4:E2:10:C3:11:3E:8B:0E:B7:09:25:A9:1A:D9:03:8D:12
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA6BD1C0BE7B28872FF8236B44591E
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/N5r25OIQwxE-iw63CSWpGtkDjRI.roa
Signing time: Mon 02 Jan 2023 13:44:57 +0000
ROA not before: Mon 02 Jan 2023 13:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48126
IP address blocks: 2a0f:5707:aa40::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:6b:d1:c0:be:7b:28:87:2f:f8:23:6b:44:59:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=379af6e4e210c3113e8b0eb70925a91ad9038d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:5f:72:68:ce:3b:73:a0:f5:1d:30:59:fa:
f6:6f:24:b5:ba:7d:3d:2f:c9:fb:b1:e5:32:30:4f:
ec:c0:8b:38:a8:44:b6:7d:95:7a:71:8e:e9:f7:8f:
98:91:32:1a:2c:1f:2d:b6:aa:a3:e4:a7:59:0c:69:
62:ca:9e:ec:6d:c2:3f:9d:b3:f3:0a:e0:90:aa:46:
c3:f1:68:f1:5d:4a:3b:8d:b1:97:c8:c2:bb:ce:c2:
48:40:bf:6a:c1:91:49:4c:58:89:3e:16:ee:6b:cc:
35:d3:c7:62:83:1a:2c:8d:4a:b8:44:5d:c7:75:b1:
a7:87:c8:21:78:ed:29:45:46:1b:d4:4b:26:e3:2b:
ad:b4:43:79:97:c6:16:f9:01:05:9d:4f:29:4f:4d:
38:cb:d7:f9:2b:bf:7c:20:56:f1:9f:e8:d1:e3:2c:
26:80:a0:39:70:22:d2:38:3c:9e:b3:25:9e:0a:93:
6f:e0:aa:d8:5f:01:00:1f:2f:c2:e0:55:eb:c2:d4:
74:23:ef:61:68:a1:e9:78:92:89:a5:cb:26:02:1e:
fe:7a:75:8b:6b:c7:a9:f3:cd:84:2d:f3:c4:30:49:
53:28:61:78:ba:b5:b8:55:bd:8f:42:e4:73:4d:74:
f5:eb:ac:c4:d8:78:b9:94:2e:c1:de:c6:66:34:ef:
c4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:F6:E4:E2:10:C3:11:3E:8B:0E:B7:09:25:A9:1A:D9:03:8D:12
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/N5r25OIQwxE-iw63CSWpGtkDjRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aa40::/44
Signature Algorithm: sha256WithRSAEncryption
33:4a:40:0f:05:9b:4a:d4:9d:1e:98:19:6f:a6:a1:65:10:43:
82:0d:6a:10:0d:64:ab:88:5d:48:db:94:60:0d:40:18:9b:8c:
6b:98:a4:90:04:b2:5f:fc:b0:91:65:8f:3b:45:58:de:b9:d8:
3e:1c:5b:62:77:aa:6c:96:01:1e:14:2c:a5:bb:bd:c4:8b:f7:
2b:e3:da:89:44:87:8e:f2:e9:7e:9b:3b:80:16:fe:0a:d1:34:
6f:c9:40:0c:d9:37:09:26:5f:ac:5b:e6:5a:2f:1b:a5:4b:3b:
01:15:19:c9:77:e2:e8:94:06:b1:f6:48:d4:21:41:1f:0f:a3:
3e:59:b9:01:51:05:d7:a1:d4:20:12:e7:bd:df:cd:d9:c0:f5:
b3:f8:1a:4b:86:56:99:e3:30:ce:d6:69:3b:43:ad:3a:6b:8c:
87:ab:4c:cc:d8:b5:67:a6:80:b1:af:e9:08:a3:4a:da:e9:27:
62:61:a1:7f:88:51:bc:b0:78:e0:d1:c5:a6:96:f2:49:ea:0a:
a6:38:11:4e:03:1b:08:aa:a5:32:b1:c3:7d:09:c5:da:8b:62:
29:1b:28:04:cb:50:10:dc:97:56:87:7a:59:85:06:1c:4f:75:
a3:36:7d:68:04:11:7a:1c:49:1e:40:53:06:f1:50:db:66:70:
5f:a0:85:5f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVyumvRwL57KIcv+CNrRFkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjQ0YzExNTY4NTE4MDNmMzdhZGVlYzA4NzZjY2Y5ODlk
NWFlZjAwHhcNMjMwMTAyMTM0NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzlhZjZlNGUyMTBjMzExM2U4YjBlYjcwOTI1YTkxYWQ5MDM4ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt19fcmjOO3Og9R0wWfr2byS1un09
L8n7seUyME/swIs4qES2fZV6cY7p94+YkTIaLB8ttqqj5KdZDGliyp7sbcI/nbPz
CuCQqkbD8WjxXUo7jbGXyMK7zsJIQL9qwZFJTFiJPhbua8w108digxosjUq4RF3H
dbGnh8gheO0pRUYb1Esm4yuttEN5l8YW+QEFnU8pT004y9f5K798IFbxn+jR4ywm
gKA5cCLSODyesyWeCpNv4KrYXwEAHy/C4FXrwtR0I+9haKHpeJKJpcsmAh7+enWL
a8ep882ELfPEMElTKGF4urW4Vb2PQuRzTXT166zE2Hi5lC7B3sZmNO/EQQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDea9uTiEMMRPosOtwklqRrZA40SMB8GA1UdIwQY
MBaAFEpkTBFWhRgD83re7Ah2zPmJ1a7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3Mzkt
Y2MxYzliNWY2NjQwLzEvTjVyMjVPSVF3eEUtaXc2M0NTV3BHdGtEalJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82YjA3OTgtM2Q0Zi00MGU2LWI3MzktY2MxYzliNWY2NjQw
LzEvU21STUVWYUZHQVB6ZXQ3c0NIYk0tWW5WcnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg9XB6pA
MA0GCSqGSIb3DQEBCwUAA4IBAQAzSkAPBZtK1J0emBlvpqFlEEOCDWoQDWSriF1I
25RgDUAYm4xrmKSQBLJf/LCRZY87RVjeudg+HFtid6pslgEeFCylu73Ei/cr49qJ
RIeO8ul+mzuAFv4K0TRvyUAM2TcJJl+sW+ZaLxulSzsBFRnJd+LolAax9kjUIUEf
D6M+WbkBUQXXodQgEue9383ZwPWz+BpLhlaZ4zDO1mk7Q606a4yHq0zM2LVnpoCx
r+kIo0ra6SdiYaF/iFG8sHjg0cWmlvJJ6gqmOBFOAxsIqqUyscN9CcXai2IpGygE
y1AQ3JdWh3pZhQYcT3WjNn1oBBF6HEkeQFMG8VDbZnBfoIVf
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org