Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/keI6bSJdf2TMvTaNCnQAtMdawvs.roa
File: keI6bSJdf2TMvTaNCnQAtMdawvs.roa (raw, json)
Hash identifier: PxRyL7+/LEKItMiXLzgsnz5i19OEWsNGyAjKN9ay98g=
Subject key identifier: 91:E2:3A:6D:22:5D:7F:64:CC:BD:36:8D:0A:74:00:B4:C7:5A:C2:FB
Certificate issuer: /CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Certificate serial: 018CC64B046CA88E3F4885E848B36C6F854D
Authority key identifier: DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/keI6bSJdf2TMvTaNCnQAtMdawvs.roa
Signing time: Mon 01 Jan 2024 18:30:54 +0000
ROA not before: Mon 01 Jan 2024 18:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:7c40:1::/48 maxlen: 48
2a13:7c40:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Feb 2024 12:38:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:04:6c:a8:8e:3f:48:85:e8:48:b3:6c:6f:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd010938d9ef72158fc98bd45de71b0b1a9ff729
Validity
Not Before: Jan 1 18:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91e23a6d225d7f64ccbd368d0a7400b4c75ac2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d6:da:13:8a:96:e7:0d:2b:25:8c:ab:70:d0:
0a:83:e4:c1:69:f3:c4:54:06:c1:bd:73:39:58:8e:
34:4c:24:53:60:68:2a:21:8d:d0:07:0c:fc:43:77:
02:0c:fc:96:03:cb:16:11:66:61:f5:48:f0:4a:04:
4c:3b:a8:50:8f:46:86:a9:1b:c1:01:bd:08:b0:85:
2c:51:f5:59:89:6c:be:32:b7:f8:5b:fd:4b:62:43:
fe:9a:63:2b:99:18:8d:3b:6a:0f:5a:be:87:0d:35:
b3:b4:3b:88:ab:e4:75:aa:de:59:8b:26:8c:f3:8b:
3c:ff:4d:e4:11:ef:6a:4e:33:e1:4d:4d:ba:9e:e8:
c5:93:22:99:7d:87:8a:c4:f2:d4:1c:f0:bc:7b:59:
02:ed:ff:a1:73:e0:a2:b7:53:6c:21:68:fa:6e:c2:
73:6d:43:d0:16:be:23:6a:68:1a:cf:bf:be:2c:1a:
8d:66:c9:5d:7f:58:ae:21:a2:37:6f:23:f5:df:cf:
d1:0c:3f:66:70:bf:78:95:4d:5a:b3:79:39:67:79:
a7:c1:34:aa:03:dc:75:dc:f0:37:f8:93:79:90:9a:
48:03:24:a8:88:05:22:ac:53:c3:f1:bc:17:75:3e:
fb:95:61:68:11:ff:1d:53:21:dd:75:6e:24:dd:97:
f4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E2:3A:6D:22:5D:7F:64:CC:BD:36:8D:0A:74:00:B4:C7:5A:C2:FB
X509v3 Authority Key Identifier:
keyid:DD:01:09:38:D9:EF:72:15:8F:C9:8B:D4:5D:E7:1B:0B:1A:9F:F7:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QEJONnvchWPyYvUXecbCxqf9yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/keI6bSJdf2TMvTaNCnQAtMdawvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c3f419-a596-46be-8aff-ceff546c933e/1/3QEJONnvchWPyYvUXecbCxqf9yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7c40:1::-2a13:7c40:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
86:89:b0:f0:be:31:f1:70:04:de:e1:81:12:7b:06:b3:b9:4c:
2c:9a:8d:ae:43:c9:2e:9a:d0:ff:f6:57:74:7a:6e:93:33:55:
e9:fa:65:0c:39:c3:e7:40:3e:05:a1:76:61:f2:a9:1e:4f:89:
d4:3b:d8:f9:76:89:86:9a:67:09:94:b1:cc:3c:ea:55:a4:4c:
b6:7c:a0:1a:b0:17:3f:83:68:20:7d:c0:6e:14:e0:35:f6:96:
62:29:ab:e3:1f:26:02:bd:da:f1:35:cf:5e:84:af:dc:9e:2e:
f8:54:38:36:e6:7a:8b:32:b3:f5:20:53:de:cb:a8:ad:0c:a4:
14:5b:73:a5:3a:ba:50:1b:ed:45:2b:23:92:70:3b:28:8e:50:
3b:b2:13:78:95:c4:ee:ac:73:61:5e:9b:a3:95:03:43:c2:a6:
0a:18:3d:ff:f8:d9:4c:a7:43:2c:ea:2c:07:d0:30:00:77:02:
90:6c:f7:86:2d:ef:16:b2:9d:dc:3b:1a:a0:00:94:70:9a:4e:
77:7c:e8:c3:43:fa:48:a1:67:0d:9c:02:96:32:11:e3:ad:74:
87:f3:3c:2d:6d:ce:03:1f:f1:52:d7:a8:d8:18:2b:50:94:36:
9c:7e:24:ec:12:22:19:7b:9f:32:cd:05:45:79:5c:4a:43:9a:
5a:f6:95:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Feb 23 16:25:33 2024 by rpki-client on console-fra.rpki-client.org