Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/wjVw_pxJMc37rwH2VcK6FNs8F8o.roa
File: wjVw_pxJMc37rwH2VcK6FNs8F8o.roa (raw, json)
Hash identifier: RGBtyU7+Jc02Ts6J+9CGD2t2IZwdldpyWE6W+GFh5OY=
Subject key identifier: C2:35:70:FE:9C:49:31:CD:FB:AF:01:F6:55:C2:BA:14:DB:3C:17:CA
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 01872DE18D7634B361C33D8A02186116CEBC
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/wjVw_pxJMc37rwH2VcK6FNs8F8o.roa
Signing time: Wed 29 Mar 2023 14:59:29 +0000
ROA not before: Wed 29 Mar 2023 14:59:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199068
IP address blocks: 2a13:b487:1f00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:e1:8d:76:34:b3:61:c3:3d:8a:02:18:61:16:ce:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 29 14:59:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c23570fe9c4931cdfbaf01f655c2ba14db3c17ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:5c:0e:f6:08:f8:1b:04:8d:d7:08:8c:98:
e0:27:17:37:29:f5:16:2e:6b:10:1c:0f:3d:7e:fa:
e4:77:d8:02:8a:cf:1c:34:a0:f4:67:fe:76:b3:bf:
8e:d2:80:49:da:fd:be:c5:9e:a0:42:f5:a4:07:39:
54:ca:f7:ad:4c:76:05:1e:48:48:c8:e1:6a:7d:00:
fc:16:f2:9d:c1:fa:43:81:ea:df:c7:76:5b:25:49:
fc:9b:fe:5b:23:6e:3b:d0:92:73:f8:af:33:23:6f:
68:d6:cb:68:09:9a:a1:29:8a:ac:0e:cb:44:b9:6d:
58:40:ed:6c:bd:e6:a4:d4:e3:87:f2:40:43:1b:51:
ff:4c:1b:42:dd:24:29:fd:ea:0a:94:79:4a:e4:15:
17:33:5b:72:e0:80:cf:3a:12:97:71:2f:ce:56:22:
8a:da:0e:84:fc:6e:0e:02:81:c5:ca:19:f8:ed:b4:
a4:5a:4f:7e:96:00:c0:72:05:8b:49:5f:cb:42:a9:
7f:3f:6c:76:92:eb:a2:a1:f3:ae:d0:05:d8:c2:1a:
f1:b6:52:d1:1c:43:70:84:1d:84:7b:e6:e9:12:f8:
18:b9:08:e4:33:68:91:f1:48:57:3e:df:65:b5:ca:
17:fc:d2:50:b7:8d:43:ff:d3:b0:59:5c:8c:af:65:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:35:70:FE:9C:49:31:CD:FB:AF:01:F6:55:C2:BA:14:DB:3C:17:CA
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/wjVw_pxJMc37rwH2VcK6FNs8F8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
22:44:26:f7:ce:c4:fa:bf:3b:8f:4b:c7:76:de:e2:53:29:0b:
70:79:bf:dc:68:4e:26:72:e7:1b:14:92:d0:98:76:89:bf:59:
05:26:3f:09:37:24:cd:61:76:af:97:7c:70:8b:d9:73:61:5c:
6d:31:84:37:8c:c2:dc:75:eb:60:44:f8:08:c9:f6:f2:b7:41:
81:9f:2d:e9:84:fe:e5:f1:2f:3f:d7:0b:47:6d:70:2f:17:7a:
be:66:c7:d1:44:fc:1d:25:a9:61:b0:5c:4d:26:05:f3:45:ed:
19:1a:31:62:50:3d:17:4e:1d:f9:e1:2f:d2:d9:d7:f5:11:6a:
32:f6:3e:66:11:49:a0:0f:d8:f1:83:68:9b:b7:0a:60:cf:f1:
b8:c7:9f:b5:93:a3:0a:70:ef:77:a7:30:99:b5:e6:67:61:12:
bc:db:3f:5c:6f:23:61:97:28:85:e9:ba:59:a8:8b:dc:8e:fd:
57:5b:a6:0c:42:06:99:c6:a2:c9:55:f0:38:bc:3d:14:02:20:
ba:28:20:d2:8a:1a:d5:56:5d:11:2f:eb:ef:c3:43:93:28:40:
98:c5:40:28:58:37:a9:b0:bd:84:d6:2b:c6:8c:41:14:1f:56:
d9:69:cb:0c:3c:b5:a7:ee:64:14:75:f7:89:40:98:74:19:fc:
51:f3:0f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org