Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ESlGM2yhN_05E9BHtAagDdDIeDw.roa
File: ESlGM2yhN_05E9BHtAagDdDIeDw.roa (raw, json)
Hash identifier: +jG8TdrRsGY5Ryozowt/86Uoo1uIhvanvYKRgUas3OM=
Subject key identifier: 11:29:46:33:6C:A1:37:FD:39:13:D0:47:B4:06:A0:0D:D0:C8:78:3C
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 0192666725D3D21A819B935D7AB7EB2567E9
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ESlGM2yhN_05E9BHtAagDdDIeDw.roa
Signing time: Mon 07 Oct 2024 09:54:48 +0000
ROA not before: Mon 07 Oct 2024 09:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a04:9a00:1480::/48 maxlen: 48
2a04:9a00:1484::/48 maxlen: 48
2a04:9a00:1488::/48 maxlen: 48
2a04:9a00:148c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 10 Oct 2024 08:13:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:67:25:d3:d2:1a:81:9b:93:5d:7a:b7:eb:25:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Oct 7 09:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=112946336ca137fd3913d047b406a00dd0c8783c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:df:9a:cc:fe:94:dd:dd:61:e5:71:a4:d2:
13:42:f4:f1:36:5a:5a:97:3a:d2:e2:66:59:ec:f2:
08:b8:cd:2e:7a:2b:d5:4e:5a:44:76:5e:af:18:23:
04:30:01:71:13:26:10:19:be:69:59:82:b7:9a:25:
72:aa:49:28:4c:1a:68:68:5f:76:b0:f1:70:50:f2:
22:18:23:23:1d:3f:38:a8:53:c3:0c:c6:aa:28:93:
0c:7e:c6:4b:5e:5c:0f:d6:fa:bd:45:1d:1e:b2:0e:
7a:8f:65:43:26:a9:ae:19:d9:4e:e6:68:ea:6a:65:
d8:fd:e2:5b:3e:1a:db:18:80:22:bc:0c:93:aa:94:
2e:1a:99:c4:42:ab:1c:70:38:26:1b:05:9d:89:f7:
fe:b8:a2:a9:23:9d:4f:fa:3f:40:bf:76:16:9f:f7:
7c:b5:c8:5d:2f:78:08:fd:d0:2c:da:e6:da:32:7d:
f8:4f:a4:70:e9:0e:74:f6:10:01:75:7d:f2:f8:aa:
10:78:a6:17:3e:e1:23:56:88:70:c3:ed:30:75:81:
bc:2e:08:d5:19:6c:07:f3:7a:f4:7e:91:58:dc:f2:
cb:e8:2e:78:3e:52:17:6b:e9:32:1f:23:b8:b0:51:
9e:e6:07:59:16:77:df:8d:16:89:bb:63:9e:8c:3e:
65:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:46:33:6C:A1:37:FD:39:13:D0:47:B4:06:A0:0D:D0:C8:78:3C
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/ESlGM2yhN_05E9BHtAagDdDIeDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9a00:1480::/48
2a04:9a00:1484::/48
2a04:9a00:1488::/48
2a04:9a00:148c::/48
Signature Algorithm: sha256WithRSAEncryption
4a:44:2a:e4:a2:83:e0:01:76:85:d9:e0:ab:22:1e:c5:5f:f2:
06:6c:8b:2f:ef:ab:90:52:0f:a1:d2:9d:3f:c1:99:83:a4:f0:
0c:03:18:fa:23:d8:14:d4:da:1d:b3:ff:3a:aa:9d:ee:e8:2a:
9b:a2:44:b2:4a:b7:4d:c8:2c:c3:5b:fc:5a:fd:bf:6f:8b:5a:
0c:10:aa:0a:d6:02:2a:35:97:5d:d2:1f:31:e4:16:f8:23:ce:
53:e7:6e:dc:6a:26:cd:9b:69:77:9b:73:f0:13:d6:3b:8c:78:
08:87:ef:ff:21:d0:b5:8c:d0:24:bc:f9:ae:91:5f:3f:49:15:
71:07:d0:82:17:fe:e6:86:86:94:5c:b7:b3:6d:57:6a:c0:7d:
17:aa:b2:75:1a:b8:2f:12:3f:46:76:d8:5c:ed:3a:a2:23:5e:
a2:cf:1b:71:80:d5:1c:7f:6b:1f:08:e1:c9:0a:31:a5:30:b9:
a7:61:0a:64:fe:c0:c0:19:9a:55:3f:1b:f8:4c:88:a6:16:85:
fa:b1:e5:14:da:80:79:7c:55:1a:7f:42:23:33:e6:ed:57:a9:
2b:2a:b8:87:88:c2:43:7e:44:cb:39:c3:09:67:0e:c7:b9:ba:
bb:8d:54:e8:5b:8a:0c:a3:7a:7e:95:fb:6c:46:bd:29:65:46:
7a:58:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:18 2025 by rpki-client