Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/m6oKdZoS_8QH6zHRxGJwnPUu3pU.roa
File: m6oKdZoS_8QH6zHRxGJwnPUu3pU.roa (raw, json)
Hash identifier: 0J6F0+JELSmpk4+CcdjGhHUpO0Ng8BeXcGHoqKQ51hk=
Subject key identifier: 9B:AA:0A:75:9A:12:FF:C4:07:EB:31:D1:C4:62:70:9C:F5:2E:DE:95
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018F2D67683123C74B5D4EB0279B8C6212D6
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/m6oKdZoS_8QH6zHRxGJwnPUu3pU.roa
Signing time: Tue 30 Apr 2024 05:08:22 +0000
ROA not before: Tue 30 Apr 2024 05:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2a0e:b140::/32 maxlen: 32
2a0e:b141::/32 maxlen: 32
2a0e:b142::/32 maxlen: 32
2a0e:b143::/32 maxlen: 32
2a0e:b144::/32 maxlen: 32
2a0e:b145::/32 maxlen: 32
2a0e:b146::/32 maxlen: 32
2a0e:b147::/32 maxlen: 32
2a0f:db80::/32 maxlen: 32
2a0f:db81::/32 maxlen: 32
2a0f:db82::/32 maxlen: 32
2a0f:db83::/32 maxlen: 32
2a0f:db84::/32 maxlen: 32
2a0f:db85::/32 maxlen: 32
2a0f:db86::/32 maxlen: 32
2a0f:db87::/32 maxlen: 32
2a10:4700::/31 maxlen: 31
2a10:4702::/31 maxlen: 31
2a10:4704::/31 maxlen: 31
2a10:4706::/31 maxlen: 31
2a12:4300::/31 maxlen: 31
2a12:4302::/31 maxlen: 31
2a12:4304::/31 maxlen: 31
2a12:4306::/31 maxlen: 31
Validation: Failed, certificate revoked on Tue 21 May 2024 03:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:67:68:31:23:c7:4b:5d:4e:b0:27:9b:8c:62:12:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Apr 30 05:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9baa0a759a12ffc407eb31d1c462709cf52ede95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:32:47:1b:51:cb:af:10:e1:4e:c2:b2:89:6d:
91:92:3b:37:e5:73:76:53:24:35:d7:2b:05:a9:df:
f5:9b:a1:9e:4b:53:1f:1d:ce:90:ef:73:7c:26:1e:
29:94:9a:9f:d0:f6:6f:3f:f1:bc:31:5f:b8:27:48:
e7:a3:af:ed:c9:dc:3f:68:ba:2c:5e:7a:cf:05:7a:
17:51:da:31:ff:e7:1b:c0:76:66:e5:1d:71:66:c7:
96:8b:eb:c5:7e:27:fa:a3:71:2f:df:14:1e:2f:68:
a9:c6:79:76:2e:08:3e:ee:6c:39:c6:d7:d2:a0:4a:
ed:3e:90:7d:e0:78:6a:c8:9a:7e:78:f4:4c:f8:49:
43:1e:95:82:ec:f0:77:e5:5e:c0:9d:fe:65:72:04:
65:d3:c6:db:6c:80:81:fc:01:cf:5a:5e:42:30:ed:
87:23:1b:db:d7:63:22:5b:1f:61:e1:6e:cb:da:58:
77:98:36:6f:98:ea:f3:b2:c4:c9:e6:42:77:b3:5a:
59:a4:45:c8:f4:ce:4d:b3:63:b0:c3:bf:2e:fe:29:
c3:fa:c5:4a:fd:62:44:e9:fd:ec:4d:b5:c6:42:a9:
0d:24:ea:95:e5:00:f2:a7:f0:09:1a:46:06:04:21:
b1:3c:1b:82:c1:ff:0f:3e:4b:2b:37:a5:6e:da:a5:
6d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:0A:75:9A:12:FF:C4:07:EB:31:D1:C4:62:70:9C:F5:2E:DE:95
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/m6oKdZoS_8QH6zHRxGJwnPUu3pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b140::/29
2a0f:db80::/29
2a10:4700::/29
2a12:4300::/29
Signature Algorithm: sha256WithRSAEncryption
41:02:49:d8:e7:e6:f9:44:5b:0b:44:1a:8b:11:2a:69:27:e4:
35:b2:e6:96:4e:6e:6f:18:62:59:8d:78:d3:ec:3d:f1:99:ce:
c4:0e:ca:6d:c8:31:35:f1:15:17:6a:5c:cd:bf:ed:fa:c2:c3:
a8:63:c4:0e:cd:1b:66:79:00:e1:98:67:cb:a4:bf:4a:c2:2a:
12:f3:59:4f:e2:3e:89:c2:5b:47:c5:46:b4:28:89:cd:24:e3:
c4:1f:bd:e5:e2:87:36:e2:ff:5c:b9:71:ef:13:ad:43:7c:4a:
8c:0a:ec:2d:2e:5f:d5:0b:6e:a7:be:b5:06:ad:67:f0:72:53:
82:c3:5b:f0:da:36:0d:64:d0:9e:48:d0:a1:f0:d1:13:97:3d:
c0:c2:40:b1:38:72:59:75:1f:da:db:ba:f4:c9:bc:0b:57:d3:
dc:79:34:08:da:7f:6b:54:e0:9b:ce:2d:d4:02:6e:6a:2d:2d:
84:8c:f8:8e:8e:6b:67:4b:9f:42:82:1c:d6:f7:2a:43:c6:2b:
0f:9b:a1:46:a0:9f:a1:22:9b:de:c2:41:b4:b3:1c:c0:9b:e1:
8f:75:72:a2:e8:51:a6:70:8f:6a:d1:7b:db:2b:15:25:1d:98:
65:52:ec:21:b0:3e:ed:d1:47:80:75:cd:87:43:34:d9:8e:ca:
ac:a0:e0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org