Route Origin Authorization
$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a3a2f33322d3438203d3e20323035383438.roa
File: 326130363a313238323a3a2f33322d3438203d3e20323035383438.roa (raw, json)
Hash identifier: USOO5ccEnUd3dkgak+VAorj33n1KmQPJYRCOFwByJP4=
Subject key identifier: E1:DB:FA:65:B0:9B:EC:54:A3:DE:FE:06:41:59:F5:32:32:98:0E:0A
Certificate issuer: /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial: 52CB8A17C1400A54E822058B8E35BB4AA9B76D9A
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access: rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a3a2f33322d3438203d3e20323035383438.roa
Signing time: Fri 02 Feb 2024 17:43:31 +0000
ROA not before: Fri 02 Feb 2024 17:38:31 +0000
ROA not after: Fri 31 Jan 2025 17:43:31 +0000
asID: 205848
IP address blocks: 2a06:1282::/32 maxlen: 48
Validation: Failed, certificate revoked on Fri 02 Feb 2024 23:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cb:8a:17:c1:40:0a:54:e8:22:05:8b:8e:35:bb:4a:a9:b7:6d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Validity
Not Before: Feb 2 17:38:31 2024 GMT
Not After : Jan 31 17:43:31 2025 GMT
Subject: CN=E1DBFA65B09BEC54A3DEFE064159F53232980E0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:9e:62:df:83:7c:db:32:73:e3:a9:cc:36:
ff:4f:f5:3b:30:a8:43:23:0b:5c:0d:d9:b0:ae:d7:
e6:68:0b:ee:49:49:d0:12:7f:f1:b9:00:07:21:3e:
81:ea:49:a0:3a:2c:17:ab:c9:b4:0d:80:c3:8d:63:
52:12:ef:05:e9:9e:f2:ea:72:ef:db:08:9c:d2:9b:
ca:3b:1a:52:33:fc:e7:4d:44:98:18:1a:e3:e8:5a:
d3:0a:64:50:86:2d:29:b1:a6:c5:42:b3:35:65:e6:
4f:83:5d:01:a2:67:54:60:84:1e:7d:14:d4:c3:e0:
71:7f:dc:27:0e:43:6e:d6:e5:bd:54:d7:8b:87:a5:
c1:88:6c:5b:00:eb:81:44:91:3b:97:33:fa:71:44:
a2:d8:34:c3:ea:8c:df:ff:23:a2:97:1c:48:36:e3:
21:4e:70:a9:9f:f0:7e:39:58:cb:43:9e:bc:a1:42:
83:8d:64:9d:da:27:86:c6:0c:23:22:4b:d9:2d:54:
79:b2:37:34:4b:b6:b3:96:0b:d0:37:7b:a0:a9:e0:
dc:32:4e:c7:df:00:6d:6c:ee:56:8c:70:48:49:3d:
35:e0:5f:04:b0:32:21:38:40:50:78:bf:2a:d4:d5:
8b:0e:73:79:64:0d:68:3e:80:03:db:8d:f0:35:1f:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DB:FA:65:B0:9B:EC:54:A3:DE:FE:06:41:59:F5:32:32:98:0E:0A
X509v3 Authority Key Identifier:
keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a3a2f33322d3438203d3e20323035383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1282::/32
Signature Algorithm: sha256WithRSAEncryption
58:d1:b2:f3:97:0d:1f:b2:55:e4:1d:bb:a7:d7:f3:be:03:e7:
be:3b:a4:78:73:03:56:6c:bc:d7:b1:26:0f:9d:3c:c2:0e:fa:
d1:c9:05:03:6e:95:a4:0f:87:dc:8c:60:c4:86:71:05:12:4a:
37:e1:b8:86:25:41:41:c3:a9:86:6e:e0:dc:10:f2:d9:47:06:
f9:43:6c:06:20:ec:06:50:e5:d5:84:77:98:47:a7:a4:d3:5c:
24:19:34:9f:52:72:f2:15:f2:71:13:41:18:87:21:66:1f:f0:
1b:68:d7:00:e8:f4:fa:7d:4e:da:da:58:17:1b:1e:81:5f:87:
fa:98:bd:25:ab:20:f0:47:39:b7:4a:b0:54:85:c3:b3:b0:43:
b9:03:b5:02:8b:3c:4c:00:70:b4:b7:78:a9:8f:ba:02:11:13:
49:89:ec:93:65:8e:91:91:c3:2b:09:26:ac:da:ee:40:fe:04:
24:dd:9b:76:9c:43:94:b4:3f:ea:eb:3b:31:cc:04:69:f7:55:
41:e6:39:18:bd:50:14:5b:cc:f6:ab:a5:31:84:81:88:5d:59:
c9:b9:6b:ab:6d:d2:3e:49:cc:7e:c8:8d:b9:20:cc:39:78:92:
c3:1a:7a:02:e5:0b:8c:c5:65:33:ad:da:3d:c3:5f:53:0c:92:
f5:4c:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:04:24 2024 by rpki-client on console-fra.rpki-client.org