Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/E4eAVj_BaDa93dHAUzsM6trJfZI.roa
File: E4eAVj_BaDa93dHAUzsM6trJfZI.roa (raw, json)
Hash identifier: Ku5aeBllU2Yzm/qr2gBmnfr6jwKpcndQ82tLIc8pldw=
Subject key identifier: 13:87:80:56:3F:C1:68:36:BD:DD:D1:C0:53:3B:0C:EA:DA:C9:7D:92
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0188D4EF7A3C887E749389B0BB366601B04C
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/E4eAVj_BaDa93dHAUzsM6trJfZI.roa
Signing time: Mon 19 Jun 2023 18:34:04 +0000
ROA not before: Mon 19 Jun 2023 18:34:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:7c40::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 Jun 2023 19:22:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:ef:7a:3c:88:7e:74:93:89:b0:bb:36:66:01:b0:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jun 19 18:34:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=138780563fc16836bdddd1c0533b0ceadac97d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:28:2f:8d:0c:c8:1f:c8:1f:2d:59:48:81:88:
e4:b4:dc:51:ba:ed:9d:96:7d:fc:d7:05:dc:1e:f7:
a5:0a:e0:6a:3d:03:90:d2:23:04:d3:0f:79:2d:1d:
97:71:46:25:cb:53:e4:ab:dd:ca:4f:81:8c:74:59:
39:32:3f:1c:f5:7a:83:3b:82:a9:2e:04:58:4c:8b:
70:ed:ad:cd:f1:b1:77:51:ad:e1:c3:89:28:33:c4:
e3:b8:9d:b9:70:f9:9b:36:11:49:65:96:41:46:80:
77:5a:ca:bc:73:79:3c:98:e2:c3:52:28:f3:ae:ec:
5c:f7:2f:bc:86:44:c0:c3:28:b5:ae:a1:09:51:55:
fe:3c:d9:0f:a6:1c:7e:ea:9f:0a:99:6a:5e:ee:19:
01:a0:2e:13:83:4f:3e:57:22:58:f5:f5:78:8c:b4:
d3:a0:3d:35:42:88:8a:ff:87:01:c8:b9:09:77:17:
80:7e:eb:34:e2:be:14:a2:4f:33:21:97:13:a5:2d:
6d:7c:5c:13:8b:88:a4:96:cb:14:0a:e5:a1:03:1b:
7e:cd:d6:72:9d:0c:e3:b1:d5:5c:5f:38:c1:18:ba:
2b:d5:09:db:98:c1:2d:5d:fd:2f:81:6a:e7:94:05:
d5:fe:8d:76:0e:eb:be:a2:02:20:8d:7d:62:b5:31:
53:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:87:80:56:3F:C1:68:36:BD:DD:D1:C0:53:3B:0C:EA:DA:C9:7D:92
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/E4eAVj_BaDa93dHAUzsM6trJfZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c40::/32
Signature Algorithm: sha256WithRSAEncryption
20:db:08:30:11:ea:80:35:b1:bf:96:36:5c:dc:06:a7:dc:96:
26:12:0f:8f:2d:69:3e:25:bf:9c:cb:0d:67:15:40:77:79:e2:
9f:c9:66:73:aa:e7:23:7c:94:86:74:b6:17:49:b1:42:e6:b5:
c9:50:a3:eb:d7:cc:e6:5b:fc:e1:96:83:dd:c0:1f:5c:c0:da:
13:4d:da:e9:9f:3c:bb:3d:a9:11:64:c9:99:a4:66:6c:81:1c:
92:f3:1f:d6:ca:a2:19:3e:3f:e7:1a:8f:42:8b:96:8f:42:de:
0f:20:ec:57:38:d6:fd:3a:17:88:9a:56:af:43:68:88:93:af:
34:9c:dd:1a:7f:47:44:11:9a:75:9a:2f:77:b4:bc:31:ed:d2:
7f:d9:77:9d:aa:75:52:d8:41:bf:80:6b:21:f1:f5:8a:7e:6e:
c2:a4:b5:72:fc:4b:fd:cf:0a:f0:c7:22:e8:71:5d:28:53:9f:
68:38:58:eb:1e:9c:0e:d8:ca:f6:ce:c4:78:24:d8:59:04:da:
44:ac:b7:86:99:ce:b0:4a:bd:b6:62:c4:f9:59:72:bb:5f:e4:
73:8e:08:8d:33:48:29:2d:96:70:ad:73:a7:0e:d7:dd:1d:48:
1c:0a:b5:be:16:aa:b1:0d:6d:3c:da:42:72:d8:ee:f1:b8:2c:
21:b2:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:57 2024 by rpki-client on console-ams.rpki-client.org