Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/P4ejYh7qNM3_sVELuAt5DW0VjFg.roa
File: P4ejYh7qNM3_sVELuAt5DW0VjFg.roa (raw, json)
Hash identifier: W6ZM4hfxbcIBb8ty1vVuMaqzK55aV9SpLSBa99pvlOo=
Subject key identifier: 3F:87:A3:62:1E:EA:34:CD:FF:B1:51:0B:B8:0B:79:0D:6D:15:8C:58
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018A0D2327DDEA5411847FE9E83280590CC3
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/P4ejYh7qNM3_sVELuAt5DW0VjFg.roa
Signing time: Sat 19 Aug 2023 09:32:02 +0000
ROA not before: Sat 19 Aug 2023 09:32:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53358
IP address blocks: 2a05:f300::/29 maxlen: 64
2a12:4b40::/29 maxlen: 64
2a13:c800::/29 maxlen: 64
2a13:c400::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:23:27:dd:ea:54:11:84:7f:e9:e8:32:80:59:0c:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 19 09:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f87a3621eea34cdffb1510bb80b790d6d158c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:db:13:22:59:45:76:12:a4:b6:26:4a:6c:08:
ce:98:a2:2f:27:42:0c:cd:b9:9e:6c:37:80:74:52:
5a:b7:7b:db:b4:a5:22:b4:81:71:4d:e7:92:18:6c:
93:9d:08:fc:34:1b:93:ac:4d:22:5c:01:af:96:47:
db:a1:73:8a:28:05:fc:66:2e:c2:40:36:ca:ea:5a:
b2:50:98:d9:f7:2a:a3:e8:e8:15:2e:82:8d:da:a5:
d5:6d:7e:75:c4:87:41:09:6c:e6:74:25:e0:4c:26:
41:9a:ba:6b:82:1e:c5:16:41:22:64:cd:61:d3:1a:
87:27:cb:5a:cf:4d:c8:45:25:c5:57:02:4a:cb:3d:
bf:d1:53:4c:4c:03:99:20:cc:f1:ba:9b:72:22:b8:
bf:7b:b4:27:8e:55:ab:0c:5e:a9:02:12:c7:40:42:
32:74:c6:31:7f:6e:56:70:ec:af:9f:4d:6c:30:b3:
7c:fa:d1:72:b4:a6:a4:5b:e5:4f:cb:1e:3f:77:09:
18:9b:4c:02:a5:9a:f0:f5:ed:4e:20:42:9a:01:7a:
79:6b:8a:c1:30:f8:fe:9c:07:15:2e:45:8d:fc:95:
43:6d:9b:6d:93:04:f0:06:7a:19:a1:76:16:7f:88:
c5:65:ee:a2:35:37:e5:24:42:cc:46:38:a3:64:17:
60:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:87:A3:62:1E:EA:34:CD:FF:B1:51:0B:B8:0B:79:0D:6D:15:8C:58
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/P4ejYh7qNM3_sVELuAt5DW0VjFg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f300::/29
2a12:4b40::/29
2a13:c400::/29
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
83:4c:c9:98:fa:3d:1c:05:50:52:76:9e:54:c5:43:06:a6:f0:
87:73:a1:0d:4e:46:4b:1e:b9:b0:e0:6a:bd:ac:58:62:f7:98:
78:7e:d9:b0:89:25:b3:61:90:95:bf:0c:95:48:eb:40:c1:3b:
dc:20:57:98:d9:ca:76:08:02:24:6a:5a:91:b5:45:57:c3:b1:
01:a0:1b:03:aa:c7:48:1a:34:1a:57:c2:37:0d:53:f9:3b:eb:
6f:24:71:a5:24:db:22:46:49:a9:ee:b7:e1:de:59:ba:27:1a:
19:94:13:fe:50:66:0e:e1:f1:4f:f5:13:cf:10:7e:1e:11:a3:
17:08:50:09:c8:35:88:99:19:d4:ea:9c:25:d0:1f:18:be:ef:
de:09:ba:f1:38:6c:64:ab:39:4e:c7:e4:17:0d:81:99:1b:7b:
3e:35:95:ef:5c:43:ff:b0:a0:bf:ac:4e:57:a5:b8:fc:4b:4c:
fd:16:cf:17:11:b9:ad:44:97:f0:57:72:5c:66:3b:d1:df:53:
32:6d:0f:55:5b:1a:f3:57:42:5e:fd:89:ec:85:6a:86:59:b0:
9b:5e:e5:07:b5:3b:c8:29:a4:f8:9d:d4:5d:e5:0a:bd:90:55:
b8:ca:66:43:77:4f:54:de:8d:1e:80:e6:d0:a5:81:22:68:66:
3a:6c:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:58 2024 by rpki-client on console-ams.rpki-client.org