Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/ewVHPe1-trTJE0vFPrZLk3Bw1u4.roa
File: ewVHPe1-trTJE0vFPrZLk3Bw1u4.roa (raw, json)
Hash identifier: ZD2AEJdfxIbwm6sKNMwwMY1e43UgPD9ttCLvmB0M0jM=
Subject key identifier: 7B:05:47:3D:ED:7E:B6:B4:C9:13:4B:C5:3E:B6:4B:93:70:70:D6:EE
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0186C1199DE1539C3BD48440C59A02CA95CF
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/ewVHPe1-trTJE0vFPrZLk3Bw1u4.roa
Signing time: Wed 08 Mar 2023 12:02:06 +0000
ROA not before: Wed 08 Mar 2023 12:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211390
IP address blocks: 2a13:b487:1600::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:19:9d:e1:53:9c:3b:d4:84:40:c5:9a:02:ca:95:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 8 12:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b05473ded7eb6b4c9134bc53eb64b937070d6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:62:04:f7:52:10:a7:9e:a6:bc:6a:d0:f2:
98:ca:1f:5a:67:99:29:e0:da:a8:d1:8f:1e:3d:c8:
49:6a:83:58:2e:5a:ab:75:b7:aa:89:9d:90:dc:ff:
b1:71:f3:89:0f:de:9f:be:d8:08:2d:2a:2c:a2:5d:
76:d4:a0:e7:35:7d:54:69:77:8d:30:78:46:ee:40:
15:da:48:5a:39:70:2f:e7:b2:bd:0b:a6:48:27:93:
3b:c7:60:6c:74:e3:db:63:82:98:ee:bb:a9:9f:8a:
2b:c8:86:35:6c:af:86:7b:d8:98:44:7e:88:a5:93:
4a:42:33:96:4d:57:d8:38:0c:a5:56:48:6c:d9:07:
f5:28:48:fa:a6:3a:74:89:b3:fc:01:47:98:1d:67:
ca:fd:63:c8:84:b0:1b:75:fb:f9:33:83:e8:44:3c:
2c:14:5c:40:0f:7d:d4:d5:3f:b6:9e:22:25:80:b8:
34:4a:db:21:e9:0b:e1:40:3a:5f:10:dc:f0:31:0a:
cd:75:10:5d:31:49:7e:a8:9a:60:eb:99:50:a9:ff:
a6:6b:01:fe:0c:b0:3b:23:73:cc:48:c0:1b:99:9a:
69:2c:ba:56:df:c7:19:e0:a9:99:a0:ce:3b:79:67:
02:26:ff:bc:30:98:e2:fe:4b:3a:80:50:57:2d:3e:
8e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:47:3D:ED:7E:B6:B4:C9:13:4B:C5:3E:B6:4B:93:70:70:D6:EE
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/ewVHPe1-trTJE0vFPrZLk3Bw1u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1600::/40
Signature Algorithm: sha256WithRSAEncryption
2c:c6:b1:33:72:57:8c:9c:1f:6f:ce:85:ab:b4:55:8e:63:35:
d5:25:d9:32:d0:2a:cd:7d:28:2e:49:04:d1:77:79:34:71:b5:
6f:72:a3:cc:40:e6:6c:c2:14:84:6f:c7:57:db:fb:33:ba:db:
b1:54:34:e6:c7:c6:05:b8:f6:5c:c1:65:70:4e:3f:c8:d9:bc:
ac:fd:48:98:6d:75:a0:4f:f0:db:19:8f:4c:ff:9c:46:26:70:
bf:fe:59:5c:ee:0d:b4:cd:67:62:36:6a:3e:b9:87:d1:bf:39:
97:53:32:4b:f6:c8:68:09:54:16:9e:8d:96:ac:6c:02:23:5b:
4a:2e:ad:65:38:05:e4:62:76:03:9d:e0:91:9f:7c:28:1b:a2:
ac:de:c9:a4:91:05:70:a7:fe:03:11:5d:e0:f2:3e:44:82:08:
07:5c:19:11:85:68:7d:8f:21:c5:07:15:20:85:0a:50:15:88:
5d:6e:52:4f:34:93:92:75:44:66:bf:1d:0d:52:af:48:5f:52:
f9:7f:0e:4a:7e:db:51:a9:3b:ee:e8:25:e0:04:84:41:7a:c3:
38:6f:9c:44:44:36:26:63:f2:73:59:6c:bb:04:c8:35:81:79:
8d:25:b5:46:ab:78:b6:b8:1b:68:af:c1:3f:61:c6:88:3b:c0:
19:24:2e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org