Route Origin Authorization
$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430633a3a2f34382d3438203d3e20313938393830.roa
File: 326131333a646638373a623430633a3a2f34382d3438203d3e20313938393830.roa (raw, json)
Hash identifier: 7GpBJTvCrPA/wXBX+RyrWO8YLj8HKH1sAAurrUn/wn8=
Subject key identifier: B2:E3:E2:B2:C1:C9:2E:F0:B8:DA:2D:C1:34:3D:A3:47:16:54:1E:82
Certificate issuer: /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial: 6666EFD5A45A4BAFC084B9D597ED0BB5F40D96F6
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access: rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430633a3a2f34382d3438203d3e20313938393830.roa
Signing time: Sun 07 Jan 2024 17:11:14 +0000
ROA not before: Sun 07 Jan 2024 17:06:14 +0000
ROA not after: Sun 05 Jan 2025 17:11:14 +0000
asID: 198980
IP address blocks: 2a13:df87:b40c::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 13 Jan 2024 20:49:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:66:ef:d5:a4:5a:4b:af:c0:84:b9:d5:97:ed:0b:b5:f4:0d:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Validity
Not Before: Jan 7 17:06:14 2024 GMT
Not After : Jan 5 17:11:14 2025 GMT
Subject: CN=B2E3E2B2C1C92EF0B8DA2DC1343DA34716541E82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:64:5b:db:3a:3b:bf:15:6c:1c:03:28:c4:
7d:d8:7f:94:5c:d7:02:b3:93:a1:3c:c0:fa:ee:f7:
67:f6:5c:82:e1:eb:73:38:ac:db:c4:67:63:c1:c3:
8f:cf:75:f3:c1:4c:3f:10:f3:11:8a:f2:8f:75:33:
9c:71:0e:06:47:e7:bf:cd:8d:80:93:b5:b9:af:0f:
ff:75:2d:b6:16:31:c7:36:f7:9e:80:77:1d:02:57:
e2:9f:99:bf:23:c8:cf:8e:c7:c3:f7:3e:e9:86:a7:
22:62:7c:2b:25:82:35:11:f9:a1:99:ba:e2:9a:11:
5e:9a:32:87:2b:47:05:52:d2:65:c4:f7:d8:58:3d:
37:f9:32:11:88:69:72:94:b8:0f:45:1b:2c:e7:dc:
42:89:14:a3:4a:f9:36:3e:df:ad:b4:31:bd:6c:c8:
2f:c7:28:f6:b8:a9:20:d0:84:34:bc:70:ed:28:d8:
c2:93:41:51:a4:b3:fe:a5:a4:61:4e:c0:81:e9:c6:
04:3a:86:f4:26:ad:9a:c7:e1:66:fe:4e:cc:92:1b:
0a:1f:b6:43:5c:71:aa:8d:a2:4b:b5:66:47:bf:86:
c2:b3:dd:23:76:4b:77:3a:a2:c6:45:7c:5c:23:5e:
6a:ec:93:86:8c:40:86:31:58:bb:24:3d:94:50:bc:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:E2:B2:C1:C9:2E:F0:B8:DA:2D:C1:34:3D:A3:47:16:54:1E:82
X509v3 Authority Key Identifier:
keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a623430633a3a2f34382d3438203d3e20313938393830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:b40c::/48
Signature Algorithm: sha256WithRSAEncryption
59:98:a8:cc:1d:ea:97:2d:55:12:df:ff:78:48:00:04:77:41:
e7:f1:c8:66:9e:8f:6f:83:86:b1:15:98:a0:9d:d7:7a:b7:ae:
36:dc:77:14:c6:0a:43:6a:b1:44:3c:bd:0d:19:d1:09:d1:98:
b8:98:07:11:26:f6:35:8a:b0:4d:05:2a:4f:9e:bd:f8:81:0a:
c7:61:03:36:36:d2:c3:9b:62:bb:75:11:d8:a2:0c:21:b5:53:
b9:7d:50:4b:b0:b9:f8:ef:4c:a4:03:03:c4:45:56:d3:d6:41:
4e:be:40:43:16:85:8d:11:c1:65:3a:51:92:18:2a:10:b2:bd:
08:4c:76:86:c6:ee:a1:91:9f:8e:5f:f6:e9:7d:03:d6:ed:b7:
00:06:66:fb:a3:b1:e1:2c:00:8c:7c:47:b3:ac:96:7d:23:a1:
9d:7b:0d:41:0b:2f:e4:86:b1:62:e8:86:d5:06:bf:db:dd:a6:
80:b3:68:6b:be:3e:e6:08:36:be:38:4f:7a:31:d6:f6:f5:e3:
92:2c:5b:c9:c1:21:32:03:f4:18:81:1d:d1:ad:f5:f1:7a:d6:
61:8f:1d:b1:2b:86:fe:a0:1f:36:00:89:7d:26:42:82:dc:43:
9a:5d:66:b4:3e:bb:1e:d2:92:69:b0:e9:1e:3a:10:b5:fc:58:
68:6e:78:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 23:33:12 2024 by rpki-client on console-ams.rpki-client.org