Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/sew7E49kuEGyQy5Rq15lhXR1aEU.roa
File: sew7E49kuEGyQy5Rq15lhXR1aEU.roa (raw, json)
Hash identifier: sE2xrQiuwZMgtzGC5qLqrerMjW8WrqhE7ur6veBvQb8=
Subject key identifier: B1:EC:3B:13:8F:64:B8:41:B2:43:2E:51:AB:5E:65:85:74:75:68:45
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 01856E01B613AA56D5A056898A433AC9C955
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/sew7E49kuEGyQy5Rq15lhXR1aEU.roa
Signing time: Sun 01 Jan 2023 15:44:43 +0000
ROA not before: Sun 01 Jan 2023 15:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212294
IP address blocks: 2a13:2187:9e00::/39 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Dec 2023 17:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:b6:13:aa:56:d5:a0:56:89:8a:43:3a:c9:c9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Jan 1 15:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1ec3b138f64b841b2432e51ab5e658574756845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:a5:8e:bd:66:7c:df:eb:cd:94:76:df:df:
cc:6d:fb:d6:e5:90:25:da:a5:8e:0c:e1:33:32:54:
39:79:86:46:dc:9b:b8:19:b5:50:46:97:13:12:bf:
ea:da:96:39:ad:48:93:8d:68:77:64:27:b6:e0:6d:
10:03:4d:4f:97:66:d3:b4:93:7b:07:08:25:3d:3f:
d1:52:e0:7a:6e:36:77:19:3f:2b:44:f6:91:df:64:
48:e6:4b:ba:7f:62:16:44:36:c2:bd:bf:fe:91:58:
49:a5:80:09:30:05:5e:a9:48:92:de:12:78:f3:3f:
43:61:71:97:88:92:77:89:86:fd:5f:48:7b:49:27:
4c:15:c6:42:ee:88:18:75:5c:36:9b:7a:ca:65:7e:
c3:1e:17:32:31:b1:e2:c1:02:3a:71:b1:2a:f9:c5:
c1:dd:28:50:66:1d:8f:ad:37:26:4a:5a:02:e4:16:
91:42:7d:15:fb:31:42:06:c0:d1:b6:0a:a4:85:b5:
8a:69:6f:22:4c:4b:da:59:17:68:03:9c:b3:16:56:
53:72:2a:92:38:85:6f:a6:24:14:d3:ee:38:da:9f:
06:83:3a:6a:41:6d:54:8f:64:3f:1f:ce:ce:79:78:
5e:35:0c:5c:90:49:10:54:1f:6a:57:3f:8e:48:29:
fa:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:EC:3B:13:8F:64:B8:41:B2:43:2E:51:AB:5E:65:85:74:75:68:45
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/sew7E49kuEGyQy5Rq15lhXR1aEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2187:9e00::/39
Signature Algorithm: sha256WithRSAEncryption
3e:30:63:73:40:04:b9:70:09:11:dd:d5:46:cb:1a:da:61:4a:
12:e7:42:af:67:75:34:fc:df:f2:2e:71:38:92:5b:92:1e:83:
ca:51:cf:58:c9:a3:c9:fa:92:04:6a:ef:a6:28:dd:ef:af:10:
de:20:2d:bf:1a:7b:47:a4:88:d2:b0:6d:3f:bc:83:d6:23:e2:
51:1f:8f:7d:c8:bd:af:69:d2:04:cf:55:07:4b:fe:09:ff:32:
0f:df:ce:a2:2b:1a:ab:b8:fb:ca:8e:0c:c8:8e:24:08:d5:30:
ea:fb:1c:d7:3a:3d:96:ad:8d:c1:fc:b4:75:e6:97:e4:96:e4:
95:01:79:f2:d9:a9:e1:cc:f1:7c:bd:30:f2:d9:a8:db:31:a1:
7a:d5:b0:08:89:06:1c:4a:d2:a9:28:75:ae:e2:36:b9:84:e9:
c8:8b:3e:8b:4a:ea:23:e9:24:e3:f1:d6:1c:72:c8:0a:d8:ef:
fa:35:ab:8a:aa:e1:be:96:a7:0a:0a:2c:a9:81:95:67:f6:f6:
44:72:c5:9f:28:17:36:70:05:49:eb:df:2b:d2:ca:61:c8:d6:
ea:9d:db:dc:ce:46:c5:aa:a0:61:09:3b:d6:50:80:4f:34:95:
6b:2a:5c:fe:7c:c1:82:df:24:09:9b:17:95:2c:4c:60:4c:97:
81:c6:5b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:38 2024 by rpki-client on console-ams.rpki-client.org