Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/onvBKWUhdP6ZTkqwcLeyATwyjJE.roa
File: onvBKWUhdP6ZTkqwcLeyATwyjJE.roa (raw, json)
Hash identifier: Um/LFoyuNfnFJ6YAGKdmCKTkJZ1tUvSIy3rCIlbjp3E=
Subject key identifier: A2:7B:C1:29:65:21:74:FE:99:4E:4A:B0:70:B7:B2:01:3C:32:8C:91
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018572BA8A1035C59ADA179DB51D4E9B8855
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/onvBKWUhdP6ZTkqwcLeyATwyjJE.roa
Signing time: Mon 02 Jan 2023 13:45:05 +0000
ROA not before: Mon 02 Jan 2023 13:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213388
IP address blocks: 2a0f:5707:fff7::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:8a:10:35:c5:9a:da:17:9d:b5:1d:4e:9b:88:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 2 13:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a27bc129652174fe994e4ab070b7b2013c328c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:37:04:c4:d5:f5:54:c4:5d:aa:7f:36:15:e8:
b6:92:ec:73:8f:8e:10:99:d9:c4:a0:33:c8:a2:35:
67:d2:42:c3:85:04:e2:bf:b0:52:b1:1a:a7:35:e1:
76:c3:ae:87:9c:6d:7a:b9:b5:3b:55:e6:80:58:d5:
a4:82:fd:ad:28:a7:64:b6:38:b3:1c:d3:7b:16:6c:
eb:87:35:aa:79:69:bf:86:c6:09:d6:46:92:53:4e:
92:3b:0f:a8:de:34:35:53:98:de:e1:39:d0:45:8a:
4d:a2:d3:e0:b2:e6:f1:ec:5b:42:3e:ab:24:b1:68:
9f:4a:c0:89:a5:05:76:85:da:30:92:7b:0b:e0:5a:
b3:53:11:c9:f7:e2:26:bd:01:f0:37:6e:71:77:67:
fb:31:12:c6:4e:2a:b8:8d:6d:2d:9a:b7:bf:c0:77:
4a:1a:e5:8d:9a:c1:63:a9:7c:90:15:7c:ab:f2:14:
b8:89:b3:ac:8a:c8:86:d3:01:6c:8d:32:be:a4:5b:
6f:83:f0:9b:11:2e:ca:65:bf:0f:a5:cb:07:40:f8:
f0:85:ca:ac:8d:7b:db:94:71:0c:a3:8f:ab:55:2b:
0d:1a:d1:86:f4:7f:5a:fd:40:6f:ad:22:02:e3:a1:
82:a7:dd:ac:9f:a9:26:d4:9d:3d:1f:c2:f5:9d:34:
0a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7B:C1:29:65:21:74:FE:99:4E:4A:B0:70:B7:B2:01:3C:32:8C:91
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/onvBKWUhdP6ZTkqwcLeyATwyjJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fff7::/48
Signature Algorithm: sha256WithRSAEncryption
4b:9d:f7:f9:65:2d:d5:33:9a:63:b7:93:3f:8e:0f:b0:ca:c4:
42:04:34:65:df:70:74:c4:28:f0:8b:11:61:98:84:41:69:9b:
d1:2a:55:df:d3:4f:42:0c:b1:1a:e1:d3:37:28:15:3c:39:85:
73:26:ed:f0:09:38:5c:3c:b8:c5:00:69:17:27:e2:61:1d:ff:
a2:08:94:8c:28:01:65:67:3f:99:86:18:aa:56:04:86:25:66:
d5:d6:5e:e3:19:a1:2e:f4:12:c8:a0:b5:b3:68:19:95:56:f7:
2d:6e:78:e0:32:37:26:1b:7f:3c:e4:e0:68:91:69:44:87:fa:
89:e8:34:2f:53:f5:1f:34:f7:53:89:0b:84:ff:c8:60:7c:8a:
1e:e3:3f:40:04:3a:f1:e9:5a:b0:d7:37:03:05:45:01:c9:21:
7d:1e:88:d4:03:fb:87:a2:33:0b:d0:24:de:9b:cc:ad:01:54:
66:61:48:68:dc:04:04:ee:cc:f6:32:74:ea:d3:ef:a5:f6:60:
c1:13:c0:fe:51:22:71:31:ca:f6:e6:d1:4d:91:72:e9:9d:7b:
6b:9e:e3:8a:3c:73:e1:c8:dd:0d:4d:17:aa:b2:9e:b1:50:a3:
a9:c4:d2:dd:9c:e8:c6:cd:3d:d6:d6:6c:7d:6b:53:38:ce:7e:
96:cd:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org