Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/lYZ3IK7hF9WQqacBLeRojyRleYY.roa
File: lYZ3IK7hF9WQqacBLeRojyRleYY.roa (raw, json)
Hash identifier: eFpSKf1CiLXexB6iLtuvKDrohXysuT5gku/LPdfgI/0=
Subject key identifier: 95:86:77:20:AE:E1:17:D5:90:A9:A7:01:2D:E4:68:8F:24:65:79:86
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 018B0ADF8A399ABE4D755B153201AC86EE55
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/lYZ3IK7hF9WQqacBLeRojyRleYY.roa
Signing time: Sat 07 Oct 2023 16:01:43 +0000
ROA not before: Sat 07 Oct 2023 16:01:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199471
IP address blocks: 2a13:fc80::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:df:8a:39:9a:be:4d:75:5b:15:32:01:ac:86:ee:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Oct 7 16:01:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95867720aee117d590a9a7012de4688f24657986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:dd:08:35:cf:2b:cb:57:59:2a:7f:53:64:d5:
83:3a:95:a6:57:8d:ac:75:8a:1d:11:08:8e:56:6d:
4f:5b:0f:09:0a:6d:3e:f7:73:88:03:62:be:2f:ed:
99:6e:70:84:28:23:3d:16:b1:e9:e2:fa:a4:b1:03:
60:29:97:4f:1f:3c:ef:41:9d:5e:4e:cf:fb:d1:c2:
68:92:21:fe:54:d3:a1:20:ef:56:bc:a8:e1:43:ea:
e5:af:34:1d:a9:b0:94:87:7d:20:e1:dd:67:5f:96:
7d:55:51:10:57:ff:39:31:21:c0:82:bf:20:67:b9:
a5:44:57:f1:21:f1:33:18:cd:78:5a:66:8e:46:6d:
ae:a9:39:a3:e7:a6:81:ae:50:5b:2f:86:d4:6c:82:
9d:73:68:a3:c3:2d:28:e3:7e:70:3d:4f:76:c9:f7:
be:fe:dc:4b:53:33:83:62:72:3b:d7:33:d6:29:8e:
7a:d5:83:10:c0:52:6a:61:30:3f:07:de:f6:72:4b:
bc:ce:87:cb:43:f6:48:94:85:38:b3:29:3f:d5:4d:
c0:16:57:ed:bf:20:97:c9:8a:1b:6e:04:de:ef:8a:
bf:0e:cf:cb:e3:e0:54:9a:e6:08:82:dc:2e:82:bb:
ab:af:6a:6f:9e:9e:b9:e3:6b:ba:09:3a:91:ab:5a:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:86:77:20:AE:E1:17:D5:90:A9:A7:01:2D:E4:68:8F:24:65:79:86
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/lYZ3IK7hF9WQqacBLeRojyRleYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
36:7e:a8:ae:6c:75:29:36:d4:f2:18:35:4a:ab:bf:55:52:1c:
98:e3:e6:f9:f7:2c:86:35:ba:df:6c:11:2b:7d:7b:3d:d5:bc:
58:4d:7f:0c:06:1b:60:7c:29:8a:56:f1:e2:ec:2e:60:a7:da:
88:49:8d:2e:e7:c7:34:52:2a:1c:f2:a5:0c:5a:8a:0b:33:b9:
20:fc:cd:a7:ff:01:ac:17:35:a3:d7:b7:59:66:4b:a9:24:64:
86:07:ba:55:e3:e5:bc:e5:34:94:d3:76:bd:33:bb:fd:a4:45:
5a:e0:9f:be:6c:89:15:f1:fe:9b:e9:01:7f:e6:a5:1c:a0:08:
b7:b3:d5:29:2a:98:a7:b3:58:48:5c:38:f3:23:f2:d1:d8:19:
0b:77:49:ee:ba:a7:f5:7a:56:93:01:b4:83:fc:70:06:54:4c:
32:bb:f7:35:4d:44:59:af:c4:7a:a7:44:94:e7:43:f5:d6:3d:
5f:83:81:61:84:fd:ee:e1:d3:69:44:01:f6:8c:55:e5:69:87:
6c:71:26:07:b2:ee:3e:9b:fc:ae:aa:17:ef:df:63:7b:1e:c4:
c5:79:f7:25:30:8c:8c:74:d2:93:1a:0b:b4:9c:3e:b6:26:6d:
c1:99:49:9e:28:a9:4d:54:48:42:1c:eb:10:cc:54:cf:3b:f8:
c7:f7:18:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org