Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/n9qHX_jIKxTgfp3W-OAfwV3p2as.roa
File: n9qHX_jIKxTgfp3W-OAfwV3p2as.roa (raw, json)
Hash identifier: g/5e6QlTD2J28WmN5hl8ZX2Oi9fDKjJoN7VxUWhNHl4=
Subject key identifier: 9F:DA:87:5F:F8:C8:2B:14:E0:7E:9D:D6:F8:E0:1F:C1:5D:E9:D9:AB
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018CE861BB32708035FCE7598D8779F50929
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/n9qHX_jIKxTgfp3W-OAfwV3p2as.roa
Signing time: Mon 08 Jan 2024 09:22:48 +0000
ROA not before: Mon 08 Jan 2024 09:22:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 2a03:32c0:5002::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 03:18:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:61:bb:32:70:80:35:fc:e7:59:8d:87:79:f5:09:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 8 09:22:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fda875ff8c82b14e07e9dd6f8e01fc15de9d9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1f:b3:91:f5:cb:56:ff:2d:19:05:39:f5:b9:
da:f8:ae:d1:20:57:a5:7a:b3:0f:0c:e3:03:69:b9:
80:af:e4:c1:29:cf:78:40:5c:ff:f5:80:16:ce:36:
7f:df:a4:4a:f5:3c:42:4f:76:11:c5:64:13:82:7f:
41:4b:32:fd:6f:6b:a9:18:4b:33:05:18:51:1b:36:
6a:9c:a2:d1:1a:2b:1e:bb:d3:01:5f:b4:e4:d0:3b:
17:49:a6:22:65:4b:d0:bb:e6:7f:99:e1:15:93:8b:
7b:94:38:86:f5:28:7a:98:8f:89:49:15:52:5f:b7:
2c:e2:c9:a9:9c:21:bb:41:0e:01:82:ae:60:7b:83:
6c:5d:6b:d0:a0:2b:27:7b:2e:dc:82:c4:68:87:2e:
ae:65:1c:77:c8:2b:88:5d:38:d4:9c:de:67:51:1b:
5c:00:84:cf:5b:d5:dd:0d:05:07:24:e7:9f:62:32:
3b:37:8d:f8:e3:23:cf:ed:7b:6d:50:88:a3:31:a4:
e0:5f:24:bb:78:71:2a:64:bc:6b:9b:32:0f:9c:2d:
04:47:15:87:ab:75:fe:c1:8d:7f:43:8c:f3:7f:81:
b2:03:91:ff:27:41:6d:4b:80:fd:3c:20:e1:7d:0a:
6f:c3:37:e0:33:cc:11:8a:d3:21:ef:5a:d6:76:b3:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:DA:87:5F:F8:C8:2B:14:E0:7E:9D:D6:F8:E0:1F:C1:5D:E9:D9:AB
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/n9qHX_jIKxTgfp3W-OAfwV3p2as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:32c0:5002::/48
Signature Algorithm: sha256WithRSAEncryption
12:af:9d:7a:ad:97:ba:8d:7b:4e:a4:e2:7d:1f:16:66:9c:1f:
09:e5:15:e5:cb:49:23:4e:c9:36:4e:3b:ff:ce:83:c1:59:f3:
d7:bb:84:f3:c9:1f:89:cd:60:e8:52:81:61:4c:1c:93:78:16:
09:0e:63:ef:25:ff:4e:57:b0:8b:b5:30:96:e0:dd:c4:4c:08:
b9:c8:19:1e:16:98:1c:e2:c0:d9:a3:a1:e9:fb:df:c1:f5:a4:
51:9e:72:66:7b:72:7e:9c:3e:15:aa:ed:5b:b6:7c:1e:77:ea:
d1:df:dd:98:1b:d3:15:70:c5:0a:8c:59:2a:98:20:0a:53:4c:
e8:17:cd:15:3b:5a:ac:80:72:09:81:35:12:39:b6:b5:73:f7:
39:cd:c2:e3:39:ec:d1:c2:22:ea:74:76:03:b8:08:14:17:31:
98:7f:cf:ab:25:88:ac:15:91:9a:8c:19:5d:26:e7:37:75:a6:
e8:7f:67:27:f6:b8:a8:a5:fb:0e:c9:03:ba:d3:8f:16:26:a0:
14:84:91:8d:29:f8:42:85:89:47:d1:c0:fc:34:73:e1:3b:9c:
7d:e4:44:78:69:e3:39:b6:cd:99:f1:13:5f:24:04:72:0b:22:
64:92:aa:7e:10:32:43:e9:93:c8:23:c6:64:51:5f:b2:6e:d1:
ff:ba:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org