Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/AeL-itjMEbpVczuL_k2Nb5cIg7k.roa
File: AeL-itjMEbpVczuL_k2Nb5cIg7k.roa (raw, json)
Hash identifier: 5t5zlZjXkt3yCreQ5F5jCorYrzCfloXqOVx9I9U5HWM=
Subject key identifier: 01:E2:FE:8A:D8:CC:11:BA:55:73:3B:8B:FE:4D:8D:6F:97:08:83:B9
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 018CC9BCCEC0C0488F48B73357D804C5A285
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/AeL-itjMEbpVczuL_k2Nb5cIg7k.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216258
IP address blocks: 2a13:2140::/32 maxlen: 48
2a13:2143:1::/48 maxlen: 48
2a13:2141:1::/48 maxlen: 48
2a13:2142:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jan 2024 14:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ce:c0:c0:48:8f:48:b7:33:57:d8:04:c5:a2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01e2fe8ad8cc11ba55733b8bfe4d8d6f970883b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:a2:bb:c5:1b:fc:fc:82:91:01:2b:fe:8e:
bf:44:ec:5c:b2:2f:28:36:7e:42:42:3a:34:52:d8:
b7:2e:0a:d2:32:fe:b6:a1:11:0f:57:d8:19:c8:7e:
a7:fc:e9:5d:dc:81:23:68:17:5f:0a:44:97:7f:f9:
6e:91:e5:cb:4b:9d:08:fa:7d:94:40:79:34:8b:d0:
55:0a:b5:0b:13:b8:72:c5:88:6c:f5:c3:9b:88:ad:
76:ab:9f:6d:33:b2:96:c7:a3:fa:ef:f7:45:34:1f:
61:8a:a9:e0:38:2f:a9:b7:ca:aa:1a:ac:13:a1:53:
ef:bb:68:c7:23:20:46:c3:18:f0:71:9e:ca:9e:3a:
ff:a3:01:d8:72:f4:2b:88:f2:9b:2f:f0:9e:b3:65:
10:6e:f5:d8:76:50:70:02:c1:b9:2f:e8:bd:a6:9d:
fd:b4:99:70:79:a8:c0:2f:19:7f:6d:e2:07:2c:f6:
6f:e6:d2:41:10:31:25:b0:e6:dc:86:92:b5:eb:1b:
dd:fb:9e:46:60:31:61:dc:9f:8e:ce:73:f4:bc:5e:
e3:0d:8d:ce:ab:81:12:a4:59:09:6d:89:a9:5a:f0:
d1:70:8f:0f:40:67:b3:cb:9e:f4:87:b8:4f:70:53:
cf:13:d9:ed:39:da:45:f9:16:e3:62:d2:d8:60:51:
d9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:E2:FE:8A:D8:CC:11:BA:55:73:3B:8B:FE:4D:8D:6F:97:08:83:B9
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/AeL-itjMEbpVczuL_k2Nb5cIg7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2140::/32
2a13:2141:1::/48
2a13:2142:1::/48
2a13:2143:1::/48
Signature Algorithm: sha256WithRSAEncryption
72:7f:e3:ce:22:12:d0:06:6b:93:d9:20:fc:f4:37:8d:8c:d3:
d8:38:0f:20:cc:b2:4c:5e:55:75:7f:7a:dc:21:2d:49:71:ae:
09:24:42:d0:64:26:e6:2c:f5:be:4e:fd:a7:60:86:7b:74:ea:
ba:e3:19:8e:b3:12:42:f3:b3:81:06:1f:b9:a0:ff:49:2a:19:
d1:c8:41:00:d9:c5:94:36:58:c5:26:a4:ce:40:79:c6:34:d1:
f3:ad:91:a2:a5:39:76:7a:19:a1:37:76:23:28:55:89:f2:54:
0c:e8:9f:d6:40:47:83:39:f5:d5:1b:a8:f9:d3:b7:36:28:e3:
57:30:3b:e4:67:3b:bd:cb:be:f8:aa:f8:0e:e2:16:92:c7:0a:
55:07:9d:0a:ef:54:83:5f:20:bf:81:8d:f0:c1:0d:62:c4:a1:
95:92:47:aa:30:e0:4c:10:10:41:70:17:e3:0f:bc:b5:c9:a2:
40:53:be:f6:f2:11:c0:2f:c9:ea:33:66:17:19:7f:7f:bc:ef:
75:79:ea:c6:15:10:81:f4:1e:cf:f0:18:1b:eb:79:8b:26:df:
7e:10:2b:61:16:60:1b:b0:db:5a:ff:71:25:d0:8b:72:55:48:
e4:68:be:d0:69:7e:82:44:04:7e:a5:b9:02:48:a4:c3:b4:6f:
15:c0:89:09
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzJvM7AwEiPSLczV9gExaKFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU2MTllZjk2YTNhZmQwMmZjMmQ1ZDAwM2E5NDdlNGQy
ZDU5MGEwHhcNMjQwMTAyMTAzNDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWUyZmU4YWQ4Y2MxMWJhNTU3MzNiOGJmZTRkOGQ2Zjk3MDg4M2I5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSKiu8Ub/PyCkQEr/o6/ROxcsi8o
Nn5CQjo0Uti3LgrSMv62oREPV9gZyH6n/Old3IEjaBdfCkSXf/lukeXLS50I+n2U
QHk0i9BVCrULE7hyxYhs9cObiK12q59tM7KWx6P67/dFNB9hiqngOC+pt8qqGqwT
oVPvu2jHIyBGwxjwcZ7Knjr/owHYcvQriPKbL/Ces2UQbvXYdlBwAsG5L+i9pp39
tJlweajALxl/beIHLPZv5tJBEDElsObchpK16xvd+55GYDFh3J+OznP0vF7jDY3O
q4ESpFkJbYmpWvDRcI8PQGezy570h7hPcFPPE9ntOdpF+RbjYtLYYFHZKwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAHi/orYzBG6VXM7i/5NjW+XCIO5MB8GA1UdIwQY
MBaAFBnuYZ75ajr9AvwtXQA6lH5NLVkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEt
ZWIyNzdhMjBmMjdmLzEvQWVMLWl0ak1FYnBWY3p1TF9rMk5iNWNJZzdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEtZWIyNzdhMjBmMjdm
LzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiAwUAKhMhQAMH
ACoTIUEAAQMHACoTIUIAAQMHACoTIUMAATANBgkqhkiG9w0BAQsFAAOCAQEAcn/j
ziIS0AZrk9kg/PQ3jYzT2DgPIMyyTF5VdX963CEtSXGuCSRC0GQm5iz1vk79p2CG
e3TquuMZjrMSQvOzgQYfuaD/SSoZ0chBANnFlDZYxSakzkB5xjTR862RoqU5dnoZ
oTd2IyhVifJUDOif1kBHgzn11Ruo+dO3NijjVzA75Gc7vcu++Kr4DuIWkscKVQed
Cu9Ug18gv4GN8MENYsShlZJHqjDgTBAQQXAX4w+8tcmiQFO+9vIRwC/J6jNmFxl/
f7zvdXnqxhUQgfQez/AYG+t5iybffhArYRZgG7DbWv9xJdCLclVI5Gi+0Gl+gkQE
fqW5Akikw7RvFcCJCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org