Route Origin Authorization
$ rpki-client -vvf rpki.netiface.net/repo/Apricot/1/326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa
File: 326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa (raw, json)
Hash identifier: a6Lp1G3yib4VEVBUhfWGiykEK+SsTMELHcfK0vxPvzU=
Subject key identifier: 29:64:92:B8:4D:9B:A7:AC:7E:B9:66:A3:33:56:15:A5:DA:99:1B:31
Certificate issuer: /CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Certificate serial: 043C29B0EEF9D6F796D0A8A1F13125EFFF1C5D2B
Authority key identifier: 2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject info access: rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa
Signing time: Sun 14 Jan 2024 09:05:03 +0000
ROA not before: Sun 14 Jan 2024 09:00:03 +0000
ROA not after: Sun 12 Jan 2025 09:05:03 +0000
asID: 215978
IP address blocks: 2a13:df87:2000::/36 maxlen: 36
Validation: Failed, certificate revoked on Sun 17 Mar 2024 21:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:3c:29:b0:ee:f9:d6:f7:96:d0:a8:a1:f1:31:25:ef:ff:1c:5d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A1A6172DA4C339FD787467E26F92A11E75DBBB3
Validity
Not Before: Jan 14 09:00:03 2024 GMT
Not After : Jan 12 09:05:03 2025 GMT
Subject: CN=296492B84D9BA7AC7EB966A3335615A5DA991B31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0a:ad:17:58:39:3d:f5:3b:44:92:91:27:a6:
2a:cb:31:68:af:85:e8:60:8c:d9:ca:b0:1a:14:36:
cf:6d:c7:11:29:18:d3:a6:7e:72:0b:d6:aa:2d:ae:
61:f7:34:a8:e3:c9:79:fb:f2:18:e9:28:72:2e:17:
a3:cd:74:09:a5:96:48:18:14:02:fd:72:64:48:d8:
68:d1:36:09:16:18:97:07:18:fd:c9:c8:a8:f8:ae:
df:b7:c6:c8:ee:81:aa:cc:6b:99:ce:cb:9a:02:57:
11:cb:c9:b0:6f:2c:b5:14:24:2b:23:fc:e9:1e:9f:
7a:dd:b5:c6:68:d6:08:e7:af:07:e7:52:aa:28:4b:
ff:e8:df:6f:71:44:e6:bd:18:68:25:c5:4f:f1:a2:
a8:6e:5b:83:27:7b:dd:6b:99:4f:43:8e:36:95:b7:
4d:60:22:e1:6b:18:4c:35:31:3a:f3:20:19:e5:6b:
9a:9f:28:00:7c:67:e1:d8:79:0a:13:fe:3d:3f:f8:
05:3c:3f:13:dd:d2:7c:04:7a:d3:3d:f0:b8:a8:ae:
50:17:64:be:34:53:41:47:3e:1d:d7:16:26:cc:b4:
cf:65:a2:c9:58:31:ff:72:10:c7:0b:9d:28:02:7d:
eb:2c:2f:bd:57:d7:8d:8a:87:4b:c4:fa:64:fc:e5:
23:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:64:92:B8:4D:9B:A7:AC:7E:B9:66:A3:33:56:15:A5:DA:99:1B:31
X509v3 Authority Key Identifier:
keyid:2A:1A:61:72:DA:4C:33:9F:D7:87:46:7E:26:F9:2A:11:E7:5D:BB:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.netiface.net/repo/Apricot/1/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/2A1A6172DA4C339FD787467E26F92A11E75DBBB3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.netiface.net/repo/Apricot/1/326131333a646638373a323030303a3a2f33362d3336203d3e20323135393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df87:2000::/36
Signature Algorithm: sha256WithRSAEncryption
58:61:4c:fb:6c:ff:1d:61:9b:21:f7:93:28:62:73:c2:2c:f9:
97:df:d7:56:ad:12:21:5f:bf:3c:26:c6:69:fb:dc:40:a6:d1:
b2:17:6e:aa:ef:43:81:4d:3b:6f:2a:0b:b7:94:29:cf:f1:a5:
a6:02:74:04:b4:cd:ef:50:2f:1c:30:1d:e3:b3:c5:ff:5d:1f:
48:2c:02:fb:cb:fb:17:a4:40:f2:86:98:b0:0f:62:5e:3f:90:
06:69:00:2d:ce:a1:07:4c:3e:15:83:bd:b2:bb:89:41:cf:7d:
62:fc:3c:7a:78:0c:14:98:02:c6:a1:7c:5c:36:c2:a2:6e:a6:
b6:34:16:47:c5:5b:16:73:d1:ad:10:b1:23:58:2a:03:f8:d8:
4b:ea:55:dd:d7:3a:05:fb:33:f6:1b:38:fe:37:21:44:13:bb:
91:4b:2e:9c:4e:1f:d1:01:4c:00:db:0f:e1:54:74:1a:f3:51:
d5:83:90:a3:f5:c1:22:47:bc:54:db:8c:f3:44:94:f4:65:07:
36:3a:ba:1d:b1:b8:fd:aa:90:a4:67:b2:eb:a9:38:a6:cf:cf:
5a:a7:86:e9:ad:aa:bd:b8:04:f5:d9:cc:7b:20:70:4d:78:b7:
64:0e:8e:9f:68:e6:37:73:21:c9:3d:47:f9:d5:a0:fe:ae:90:
b6:eb:b4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 01:31:52 2024 by rpki-client on console-fra.rpki-client.org