Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/1-wTseNBsrwR0u-CbyjsX8Y2_n_o.roa
File: 1-wTseNBsrwR0u-CbyjsX8Y2_n_o.roa (raw, json)
Hash identifier: cQFOyAtJABPvywANpwLgaxl3jB/eCDn1gwdi0q4pYTA=
Subject key identifier: FB:04:EC:78:D0:6C:AF:04:74:BB:E0:9B:CA:3B:17:F1:8D:BF:9F:FA
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0188BC6E4524EA8F97020B1C9ADB1E63EDCF
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/1-wTseNBsrwR0u-CbyjsX8Y2_n_o.roa
Signing time: Thu 15 Jun 2023 00:22:03 +0000
ROA not before: Thu 15 Jun 2023 00:22:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:7c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 19 Jun 2023 18:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bc:6e:45:24:ea:8f:97:02:0b:1c:9a:db:1e:63:ed:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jun 15 00:22:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb04ec78d06caf0474bbe09bca3b17f18dbf9ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:fe:79:96:40:c4:f7:8e:35:87:38:85:a6:
69:ba:d6:ce:84:4b:83:96:64:12:c5:66:8e:48:fe:
b7:56:76:84:d0:7f:2b:b0:b0:28:86:a3:33:8b:ac:
fd:31:03:61:7c:b3:bb:77:e8:68:86:65:7d:f7:de:
cc:8d:30:6b:a0:f9:72:7b:bb:5a:dc:d2:43:d3:fe:
ac:fe:f2:93:7f:1a:66:56:ba:a8:fc:9e:3a:f4:78:
80:66:44:24:93:ac:45:e6:c2:16:ee:6f:91:6f:52:
35:c2:5a:87:56:52:48:f1:0d:48:57:20:d0:f4:f0:
5b:15:18:8a:a1:30:b4:8a:8f:a0:a7:1d:3f:2f:b0:
d5:b7:d7:5a:96:d7:c4:73:ea:fb:6e:69:ff:dc:73:
45:f7:6d:1e:cb:1f:3e:47:bd:0c:48:9e:28:bf:d0:
51:b4:c3:a2:2c:72:64:8d:5d:e2:30:55:2b:3e:92:
94:c0:3d:a8:05:87:c9:9b:d8:2d:b5:aa:3c:de:4f:
5c:e0:35:e7:37:f9:ff:46:5d:71:10:91:4e:cf:14:
1e:75:9c:02:84:27:b9:4a:dd:76:b9:92:fd:2c:0f:
6d:4e:24:63:01:ec:03:a1:5d:89:14:7f:d6:66:e0:
c3:5c:c3:c8:64:59:b6:b5:f9:78:d1:ff:8a:16:a1:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:04:EC:78:D0:6C:AF:04:74:BB:E0:9B:CA:3B:17:F1:8D:BF:9F:FA
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/1-wTseNBsrwR0u-CbyjsX8Y2_n_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
85:1d:0a:65:6f:83:b1:aa:ca:e5:d9:58:f8:88:38:d7:bb:72:
32:5f:d8:7b:ea:70:4f:65:53:4e:5b:d2:6d:b6:6c:2c:ea:21:
0b:b0:d2:7f:34:aa:83:55:4d:6a:7c:f0:27:02:9e:f7:08:cc:
e7:3c:33:bd:19:ca:1d:f3:31:0b:11:ac:c8:bc:f4:e6:f8:63:
a6:a3:ed:ab:a0:82:31:11:05:e1:47:d9:3d:48:dd:4c:e4:31:
67:83:13:0e:c3:36:d7:f3:6e:60:29:7b:47:cb:25:d0:07:d0:
4f:ae:70:9e:19:d5:81:26:96:1f:d5:e2:3e:e4:a7:95:c8:f7:
bb:b7:50:d8:ce:0d:2b:e4:7a:ca:1d:40:6a:4e:c4:ee:f8:34:
dd:19:6d:6a:82:e2:e0:5c:06:b9:c6:ce:99:d4:f9:5a:2a:04:
58:c3:e9:9e:02:e1:9f:2f:3d:08:2e:98:4e:e2:b2:ba:1d:b2:
ed:a1:7e:45:d5:9b:7d:fd:d6:9a:ba:1e:3e:fb:88:f2:e5:0d:
88:10:87:f2:17:c0:75:9c:c7:14:d2:f9:82:88:48:bb:4c:7f:
7f:97:c4:5d:28:30:9f:f7:7e:8f:38:59:33:8a:47:5d:77:c4:
8a:d1:34:19:62:8d:4d:06:83:51:cc:52:60:69:38:9d:d9:7f:
27:e8:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:10 2024 by rpki-client on console-fra.rpki-client.org