Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/njlJbacdL1KVaVc-RP4ZyNoCd6o.roa
File: njlJbacdL1KVaVc-RP4ZyNoCd6o.roa (raw, json)
Hash identifier: 3feHJdN8+GNVr2x3pSSkJGeGIC+Y32A/qEUpikQ9qxY=
Subject key identifier: 9E:39:49:6D:A7:1D:2F:52:95:69:57:3E:44:FE:19:C8:DA:02:77:AA
Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial: 018D03F196EF1A24A155D1FAF95BD32338C1
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/njlJbacdL1KVaVc-RP4ZyNoCd6o.roa
Signing time: Sat 13 Jan 2024 17:49:40 +0000
ROA not before: Sat 13 Jan 2024 17:49:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48407
IP address blocks: 2a00:8b20::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 15 Jan 2024 16:05:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:03:f1:96:ef:1a:24:a1:55:d1:fa:f9:5b:d3:23:38:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Validity
Not Before: Jan 13 17:49:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e39496da71d2f529569573e44fe19c8da0277aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:39:a4:52:49:e3:f4:61:3e:b5:d1:9b:88:
f9:ea:d4:52:73:2b:67:4a:b8:83:9d:84:c3:8b:78:
61:46:9b:b3:3a:7d:7a:2e:a9:e5:ac:12:3f:22:e0:
7c:9e:d1:ed:e7:60:16:38:e2:26:69:1c:6e:2d:ae:
58:72:9d:6b:35:fb:c0:00:b5:db:8f:ca:08:20:d1:
de:da:89:4d:37:63:4b:89:14:68:07:6e:64:37:8e:
7f:74:2b:a9:8f:0f:56:6d:e2:ca:67:dc:a7:80:e7:
e7:60:0a:6c:0f:cf:da:29:38:4b:f9:88:92:36:41:
c1:b6:4f:38:74:de:7a:d7:9b:78:a4:ea:b6:39:49:
19:87:41:ac:fd:a6:f6:fc:50:a5:e1:cb:af:2e:45:
8f:69:ec:fb:be:50:29:5b:dc:f5:b2:65:de:ae:84:
d3:54:75:08:8d:ae:be:04:cb:0f:8c:7d:3e:67:be:
e8:19:17:ea:6f:34:73:43:88:d9:93:26:1a:2c:7f:
1b:31:63:40:3d:2b:5b:11:af:b7:c4:59:30:95:c5:
27:ac:c7:69:7c:a6:37:c6:a7:e6:8c:82:a5:81:23:
5f:7e:4d:1a:8f:5e:3b:d6:6d:43:5c:34:6d:0a:7d:
11:84:9f:3a:48:a3:b4:74:d0:1c:44:14:5e:8c:d3:
77:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:49:6D:A7:1D:2F:52:95:69:57:3E:44:FE:19:C8:DA:02:77:AA
X509v3 Authority Key Identifier:
keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/njlJbacdL1KVaVc-RP4ZyNoCd6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8b20::/32
Signature Algorithm: sha256WithRSAEncryption
3f:fc:e9:31:72:80:76:ca:72:bd:3c:6d:af:ae:fb:90:86:77:
58:a6:68:18:d0:0a:56:04:7f:fc:f0:ef:a8:df:d1:b4:c4:5c:
2d:4e:91:0c:a0:8f:f5:ee:34:9c:7c:7b:69:0d:ac:df:dd:7e:
b8:9e:79:36:45:02:67:16:6e:f8:b2:99:9f:7d:af:df:bc:35:
d1:36:16:e9:30:da:ec:a3:e2:67:68:cc:cf:0d:76:3b:4d:a2:
ce:dd:41:f1:15:2b:d2:85:8c:08:85:65:c4:9d:26:96:97:f5:
15:76:77:46:29:83:c4:2b:6b:cf:40:ac:dd:13:8b:da:b7:27:
f3:32:44:87:99:aa:44:4e:7f:73:47:56:e0:2d:1d:9f:90:d3:
3c:eb:79:52:36:d8:0b:42:64:ac:c1:26:9d:08:dc:2e:35:5c:
14:a3:f6:27:10:1e:e6:b8:7d:8e:7a:cf:31:d0:c6:a4:5f:a1:
6e:b5:ea:d8:fb:fb:27:1c:44:35:92:be:e1:54:e3:08:10:35:
54:d9:34:e4:c5:88:6c:26:8f:42:30:fb:0b:9b:4f:91:ca:46:
b2:5e:13:a2:db:c7:3e:62:c6:5d:c8:fd:33:ca:8f:6d:e0:49:
aa:60:d9:8f:62:ea:dd:3e:16:6f:1d:f1:82:6d:16:47:6d:ad:
b7:25:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:15 2024 by rpki-client on console-ams.rpki-client.org