Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/U8patmuxDG94NKTCKEVc5sJK-H0.roa
File: U8patmuxDG94NKTCKEVc5sJK-H0.roa (raw, json)
Hash identifier: ByB2N9zXu93bNQvdeaefObYfgiNQtpmH9Q6szWemT1Y=
Subject key identifier: 53:CA:5A:B6:6B:B1:0C:6F:78:34:A4:C2:28:45:5C:E6:C2:4A:F8:7D
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 0188DA491C2CAB798287ACF0CA5EC212DEE2
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/U8patmuxDG94NKTCKEVc5sJK-H0.roa
Signing time: Tue 20 Jun 2023 19:30:04 +0000
ROA not before: Tue 20 Jun 2023 19:30:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:7c40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jul 2023 12:07:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:da:49:1c:2c:ab:79:82:87:ac:f0:ca:5e:c2:12:de:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jun 20 19:30:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=53ca5ab66bb10c6f7834a4c228455ce6c24af87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:d5:c2:a7:74:e5:46:c5:c2:38:b0:97:23:
19:e1:13:71:52:75:a8:e3:b8:2c:19:6e:17:00:5e:
f0:16:3d:1a:15:7e:ec:db:f1:76:f6:7a:8c:1e:77:
1f:b4:17:a5:f2:eb:8f:07:5c:42:ea:ee:b5:7e:1e:
c0:8f:02:bb:81:41:25:6d:2c:63:54:7e:b8:ae:cd:
71:f6:7d:af:e1:8b:d7:29:fc:4d:c5:7f:2b:bd:bd:
89:c4:9b:ea:97:89:51:02:8c:7e:e5:4a:f6:13:a4:
8a:b6:89:81:37:1f:04:95:aa:cb:46:b9:27:0e:a7:
25:af:e4:ab:f6:97:60:86:0d:c6:07:20:0b:29:84:
b2:53:f7:f9:0d:fa:ab:73:82:54:aa:a6:df:db:8a:
77:3e:dd:bd:67:ea:73:c2:8e:0d:38:e3:ec:15:c2:
14:18:35:82:84:e3:50:98:8e:7a:33:ff:a8:a2:08:
62:c3:6c:e5:f5:75:ab:1e:3d:ab:6c:08:5d:ff:32:
8c:7a:d7:d6:a5:fd:10:4c:6a:e0:04:97:42:d0:ba:
3c:af:62:09:a0:0c:22:ff:35:cf:3e:26:e1:3c:a7:
2e:f3:16:70:bd:0f:ce:df:5d:0e:e3:63:fb:ef:a9:
78:84:2f:68:8f:94:3e:8d:b0:77:38:92:63:43:8c:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CA:5A:B6:6B:B1:0C:6F:78:34:A4:C2:28:45:5C:E6:C2:4A:F8:7D
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/U8patmuxDG94NKTCKEVc5sJK-H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c40:1::/48
Signature Algorithm: sha256WithRSAEncryption
76:d9:28:3e:19:34:42:c9:99:f0:7d:44:45:71:70:85:cf:ca:
81:20:97:23:03:9b:91:25:19:50:d9:be:97:a5:aa:d1:38:f0:
4d:25:cc:9a:ad:49:bd:5a:62:62:46:dc:2e:8c:4c:2b:ce:9f:
42:d9:2d:85:64:56:80:bb:44:ed:54:82:b8:29:b1:de:f6:80:
4e:28:42:91:7d:ad:d3:a2:e8:04:89:15:b5:22:09:3d:03:8b:
72:06:7d:60:87:97:17:cb:03:4a:e7:72:6f:0d:6b:b0:19:da:
66:26:e6:a0:be:d1:01:dd:29:95:cf:6e:ea:d7:d4:9c:3b:e1:
b7:f9:04:6c:8d:46:e7:c0:d2:03:63:25:d3:ae:8e:a7:4e:e4:
62:8c:e2:fd:42:8d:b1:75:e9:e6:f9:ca:55:e5:ad:13:59:c9:
54:d3:aa:79:9c:ad:a7:12:98:67:2a:39:5c:bb:c3:4f:bd:5f:
60:fd:71:4e:ad:87:1f:39:d6:fa:cb:14:27:5f:43:a1:69:cb:
1d:6b:a6:a6:f2:a8:1a:4f:47:73:e7:80:ed:3c:cb:53:6d:14:
13:d3:e3:c8:e4:21:88:05:1c:49:71:7a:dc:4b:81:21:4a:66:
58:97:3a:7a:56:56:2c:bb:da:15:ae:6c:44:03:c7:f7:7e:a8:
c1:19:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:10 2024 by rpki-client on console-fra.rpki-client.org