Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/4Wvv5FSR6tivVJWlP9kj--WdpHI.roa
File: 4Wvv5FSR6tivVJWlP9kj--WdpHI.roa (raw, json)
Hash identifier: N4HodxVRNvJpEURrbJwBn9+Ix6LA+OtM9fYkY7L5KqQ=
Subject key identifier: E1:6B:EF:E4:54:91:EA:D8:AF:54:95:A5:3F:D9:23:FB:E5:9D:A4:72
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 018CCA2A6007AD8E955A60E2059E6C139D13
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/4Wvv5FSR6tivVJWlP9kj--WdpHI.roa
Signing time: Tue 02 Jan 2024 12:33:43 +0000
ROA not before: Tue 02 Jan 2024 12:33:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42675
IP address blocks: 2a13:7c80::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 19:19:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:60:07:ad:8e:95:5a:60:e2:05:9e:6c:13:9d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Jan 2 12:33:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e16befe45491ead8af5495a53fd923fbe59da472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:aa:ef:11:8d:b7:b5:b0:87:85:5b:54:08:08:
c1:90:55:89:f5:c1:b9:b2:22:d6:b4:8c:a8:35:1e:
7b:23:13:58:85:72:b6:62:7b:18:71:59:a7:5b:c1:
a6:a3:b3:09:5f:97:92:0b:3a:6e:59:5d:1b:55:74:
14:04:f1:39:b0:ed:17:dd:6a:3b:9b:61:7b:b6:46:
82:8b:30:53:c0:f3:fc:16:fe:ad:13:b8:aa:ed:54:
c0:a7:0f:4d:55:39:d4:1a:6a:05:11:c0:eb:0f:17:
d3:7f:e8:58:2f:a9:02:e1:46:0e:56:84:2c:2a:e7:
90:0b:7c:10:9e:2a:0a:93:d9:ec:3f:c0:e9:c3:d6:
11:ff:dc:b3:7c:76:b8:9f:34:d1:5b:59:76:a4:5f:
71:19:29:d7:30:69:f5:99:fb:a2:46:e4:cb:c6:da:
a2:a7:34:d2:fc:8e:29:3e:c5:ba:3b:73:c2:f5:e0:
cd:9a:88:0a:ab:a9:07:9e:4b:ae:2f:66:cf:bc:0e:
12:ce:08:cf:c1:62:b4:35:6a:71:78:6c:80:52:85:
be:04:3b:1a:33:cc:1a:35:cf:df:0e:14:cd:26:ad:
0e:d5:85:b0:18:66:a4:40:34:a2:a5:51:4f:3a:e8:
41:5c:2e:b3:1d:7e:0a:1a:f1:3f:01:d6:07:25:3f:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6B:EF:E4:54:91:EA:D8:AF:54:95:A5:3F:D9:23:FB:E5:9D:A4:72
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/4Wvv5FSR6tivVJWlP9kj--WdpHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c80::/48
Signature Algorithm: sha256WithRSAEncryption
3c:6a:49:b0:40:4e:d7:2a:f0:4c:68:a2:1b:c2:88:b4:e0:09:
53:50:1e:93:de:fc:26:42:8d:5b:fa:c3:ff:1d:29:e7:62:42:
d7:fc:f8:7c:d7:44:93:d8:7c:c2:60:9a:72:3f:40:8e:37:dc:
4f:82:8f:b2:0a:69:b8:2a:1b:e5:4b:9c:5f:80:f7:ad:5c:ec:
77:3b:ca:eb:4e:0e:fa:95:63:b5:51:76:ca:58:af:29:44:a2:
83:19:9f:33:18:ce:e2:57:b9:ec:b0:62:fc:7b:67:d9:06:ac:
25:48:53:20:d5:a5:6e:d5:5a:32:11:ad:42:ef:ea:0a:d0:59:
c3:f9:26:31:1c:3b:f8:37:a9:91:91:b8:e9:72:4a:13:21:b7:
db:86:e8:ca:4a:53:f7:e1:84:36:7e:5c:c3:09:76:d4:7f:32:
d9:8d:0f:aa:b9:ff:14:73:f8:ac:48:f8:81:1f:52:b8:fd:93:
1c:93:39:bf:fd:05:09:c8:46:48:98:1c:2e:a5:b2:ff:ae:93:
3f:a6:5a:1e:05:01:42:78:4f:e9:39:3a:f2:d3:05:ae:fa:e9:
3c:a9:2f:ff:5c:79:34:99:f6:25:c3:f9:b1:fd:8e:f2:9f:bb:
e4:86:ee:1e:7a:6e:08:b6:82:46:71:ed:f7:a7:c2:de:76:e5:
1e:c6:a1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:47 2024 by rpki-client on console-fra.rpki-client.org