Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/o8vtnZtfzy5Ja5BEwf36ltsNEro.roa
File: o8vtnZtfzy5Ja5BEwf36ltsNEro.roa (raw, json)
Hash identifier: 64GIzh6mp6DUwkpbyBYGQaKCOyoxJwVqImcnGdDBZx4=
Subject key identifier: A3:CB:ED:9D:9B:5F:CF:2E:49:6B:90:44:C1:FD:FA:96:DB:0D:12:BA
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 018EED6BC36E4F20F56A442B6A7B39C04C35
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/o8vtnZtfzy5Ja5BEwf36ltsNEro.roa
Signing time: Wed 17 Apr 2024 18:57:26 +0000
ROA not before: Wed 17 Apr 2024 18:57:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215466
IP address blocks: 2a13:7706:1::/48 maxlen: 48
2a13:7706:6666::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Apr 2024 04:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ed:6b:c3:6e:4f:20:f5:6a:44:2b:6a:7b:39:c0:4c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Apr 17 18:57:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3cbed9d9b5fcf2e496b9044c1fdfa96db0d12ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:e7:5e:22:bf:e5:d8:bf:4c:77:c8:36:83:
8c:50:fe:59:3a:61:6a:98:c8:ea:38:73:9e:fc:50:
ac:b7:06:70:bc:25:fb:23:ce:b3:ae:f3:7b:fc:ec:
6c:b1:5f:da:f6:7e:be:98:8b:b7:81:c0:07:6f:74:
4f:d8:24:80:15:2c:59:3e:93:c4:8e:89:bc:13:d6:
63:78:90:2e:8b:64:98:98:41:ae:25:c8:ec:ed:37:
a5:45:12:2c:42:08:09:8d:73:a2:e9:98:fb:ef:b4:
f4:e8:b4:85:68:39:a3:38:fc:4f:b1:80:c4:d8:94:
f1:34:58:0b:60:b9:c5:cb:63:5f:65:de:a3:c5:49:
38:f5:58:30:c9:9c:a6:d1:a4:cf:1a:bc:26:78:3e:
87:46:1f:eb:17:ab:ab:48:b2:59:17:e5:c4:d6:a1:
8e:f8:6e:6b:61:2a:6e:51:03:d1:15:2b:6e:4a:89:
75:f8:c7:51:97:6f:58:65:01:d9:29:e0:91:ee:9f:
65:c3:89:92:84:25:de:71:8f:cc:fd:62:43:76:73:
d9:b4:69:cf:5f:c2:e8:1d:e0:9d:f8:2c:5c:5f:b1:
ad:8e:14:55:35:58:e4:76:b2:54:e8:1b:be:13:03:
7d:38:58:09:8a:44:a8:ab:08:31:83:1e:aa:c5:fe:
a0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CB:ED:9D:9B:5F:CF:2E:49:6B:90:44:C1:FD:FA:96:DB:0D:12:BA
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/o8vtnZtfzy5Ja5BEwf36ltsNEro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7706:1::/48
2a13:7706:6666::/48
Signature Algorithm: sha256WithRSAEncryption
8c:fc:e2:c9:e6:bc:6f:63:b0:88:36:b6:0b:0b:66:31:2c:77:
9f:bb:c3:4a:56:96:f7:f5:94:be:91:78:f4:10:14:1f:18:4f:
d9:56:d0:6d:86:2d:62:4f:2c:4a:29:00:36:7b:73:43:64:58:
58:e0:ec:7e:ae:c3:1f:02:3f:61:54:52:d7:e0:d1:1b:f7:a5:
21:93:72:db:2a:c4:a1:53:4c:a5:de:af:1d:70:7e:75:d5:b1:
3c:6a:c3:01:4d:0a:e2:ab:59:bc:85:e1:25:3f:09:0a:64:d2:
63:23:99:43:63:50:03:d9:31:1f:d9:7d:f7:1d:c5:4f:ef:47:
82:69:5f:0e:f5:9c:5b:06:94:8e:f4:e3:76:3d:a0:ae:16:81:
72:a5:7c:f7:54:87:85:3c:a9:a4:98:1d:16:78:20:58:8b:1a:
85:2e:b6:30:ed:1f:4e:0e:4d:a5:12:e9:da:58:5f:bf:2d:dd:
7e:c1:59:59:61:1e:18:36:f0:b8:66:4c:94:08:aa:9f:6d:74:
a7:65:5e:93:41:70:75:dc:62:29:0b:1e:08:9d:86:e6:a7:19:
8e:8d:04:4a:f8:cc:43:42:36:61:b3:ce:53:fe:2f:64:b8:c6:
0e:5a:f4:0a:71:45:4b:e3:c3:7f:a2:aa:f0:58:ce:d8:b9:32:
f3:01:8d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 05:55:18 2024 by rpki-client on console-fra.rpki-client.org