Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P_lGLlOI1pIRIW4zjFtVXZXiG_E.roa
File: P_lGLlOI1pIRIW4zjFtVXZXiG_E.roa (raw, json)
Hash identifier: KTb5lJW1QZ8veLWw1sMROAp0SC+hb/EQDYlGm0ddp8o=
Subject key identifier: 3F:F9:46:2E:53:88:D6:92:11:21:6E:33:8C:5B:55:5D:95:E2:1B:F1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E74928CF6453CA3B40F5D3CAE7450F112
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P_lGLlOI1pIRIW4zjFtVXZXiG_E.roa
Signing time: Mon 25 Mar 2024 07:45:45 +0000
ROA not before: Mon 25 Mar 2024 07:45:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:c900::/32 maxlen: 32
2a13:c901::/32 maxlen: 32
2a13:c902::/32 maxlen: 32
2a13:c903::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
2a13:c906::/32 maxlen: 32
2a13:c907::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 May 2024 09:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:92:8c:f6:45:3c:a3:b4:0f:5d:3c:ae:74:50:f1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 25 07:45:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ff9462e5388d69211216e338c5b555d95e21bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:8a:25:44:87:3f:11:e4:2a:cb:cc:d8:42:
94:1a:72:b6:e0:5c:ae:de:fb:7e:1d:00:77:42:a6:
41:c4:4c:56:71:6d:15:2b:c9:7c:8d:da:c8:58:19:
e2:0e:ea:68:ca:79:61:44:ee:b4:84:d3:93:01:27:
0a:bf:3b:4a:fc:1b:db:3f:b8:1d:7c:52:b2:01:8f:
06:bd:eb:c0:30:f8:1f:64:94:9b:21:48:fe:5e:a8:
28:e9:59:3f:2f:6c:c3:e0:7c:a7:23:bd:62:83:12:
09:5f:b9:b8:4a:79:6a:ee:7e:97:87:e3:ec:f0:e6:
92:c2:3a:f7:3f:a0:fd:f3:7f:c9:47:d1:a3:f7:84:
ea:bf:16:96:1b:42:2c:d7:47:3a:dd:d5:84:7e:ce:
6d:44:28:cb:e2:a4:ca:ec:9f:39:69:70:d0:1c:f0:
ad:31:0a:23:50:a1:3a:c6:ee:a5:dd:bc:ff:06:1d:
8f:d2:5d:66:24:0c:64:a7:90:a1:e2:8b:49:4b:b6:
69:46:37:8d:b4:66:e9:c4:b9:63:d1:ff:b9:b8:15:
11:7f:3d:1e:18:64:90:65:01:48:59:f0:73:55:8a:
14:d5:13:6b:78:22:5d:c5:95:b0:9b:02:df:b9:68:
cc:e5:93:bd:f7:13:c6:50:97:66:f1:ce:21:cb:47:
25:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F9:46:2E:53:88:D6:92:11:21:6E:33:8C:5B:55:5D:95:E2:1B:F1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P_lGLlOI1pIRIW4zjFtVXZXiG_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c900::/29
Signature Algorithm: sha256WithRSAEncryption
1e:64:90:3a:0f:00:a3:82:6a:af:2c:86:f6:5c:ec:98:05:f7:
99:94:91:64:34:d5:ac:ab:f7:5b:19:91:86:01:4e:cb:42:73:
11:5f:b8:56:b1:04:31:4d:65:40:16:f0:96:d9:0f:cb:d9:10:
41:94:82:c9:27:60:29:5f:53:d9:6b:ba:72:d0:77:6d:22:d9:
80:93:86:96:a4:4b:ae:57:07:4a:37:60:df:61:e5:6f:ae:70:
ca:26:cd:6f:65:35:b8:4c:aa:22:6a:d2:21:53:4b:ba:f5:71:
85:92:a4:17:32:32:57:f3:9b:68:2a:83:d6:44:50:ea:75:cb:
75:73:96:0c:4f:ff:81:27:47:01:54:55:84:22:e1:2b:41:4f:
42:c4:e0:20:47:d9:7b:92:1d:c1:fa:ce:ee:99:2c:ee:fa:af:
2d:71:73:f6:8f:1f:d5:08:63:43:a1:bb:86:be:4d:e0:92:9f:
7f:6d:4b:77:c7:f3:2b:a3:5d:9b:a8:15:1e:ca:9c:cd:eb:17:
13:f7:54:0b:e8:5c:a9:4c:62:4e:e2:6b:69:65:e8:14:71:ab:
e1:d1:6a:2e:d0:7d:b3:20:34:bc:2e:1a:cd:78:12:e3:30:80:
5a:71:00:c3:91:b9:41:55:64:c3:ea:0f:6e:b8:61:d9:07:f6:
72:df:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:06 2024 by rpki-client on console-ams.rpki-client.org