Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/exlINhgp_4MOhCa1Hxb3-bh0JqY.roa
File: exlINhgp_4MOhCa1Hxb3-bh0JqY.roa (raw, json)
Hash identifier: 5GqZY8fnCZWKs0CkqBbB+T65zCPe5yCopBe8rWtakNY=
Subject key identifier: 7B:19:48:36:18:29:FF:83:0E:84:26:B5:1F:16:F7:F9:B8:74:26:A6
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018A07E64062EC7D0431E3545D62B69454C6
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/exlINhgp_4MOhCa1Hxb3-bh0JqY.roa
Signing time: Fri 18 Aug 2023 09:07:24 +0000
ROA not before: Fri 18 Aug 2023 09:07:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53358
IP address blocks: 2a05:f300::/29 maxlen: 64
2a12:4b40::/29 maxlen: 64
2a13:c800::/29 maxlen: 64
Validation: Failed, certificate revoked on Sat 19 Aug 2023 09:32:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:e6:40:62:ec:7d:04:31:e3:54:5d:62:b6:94:54:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 18 09:07:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b1948361829ff830e8426b51f16f7f9b87426a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:01:66:7f:73:3b:ef:87:ef:64:df:d1:c2:aa:
d1:11:3d:04:83:c8:41:b1:72:2f:e2:5e:f1:47:64:
1e:41:7a:70:07:4a:ae:53:e4:06:94:20:c5:6f:32:
9d:bc:d6:1b:ca:92:99:23:7e:04:7f:68:4e:57:c4:
2b:72:f1:33:80:55:3a:67:3a:df:c7:9e:89:fe:78:
2f:7e:15:ff:4f:0f:f9:64:8a:0c:ae:9f:31:9a:b3:
8e:81:1f:25:9c:74:23:dd:e0:35:ac:e0:cc:f5:27:
40:ff:76:82:86:9e:dc:d9:dd:d6:60:38:61:b0:e6:
39:96:8a:16:a9:c6:31:bf:6f:fb:53:33:96:37:19:
4b:43:c8:89:59:26:09:a6:26:ef:ce:d4:83:0e:ae:
20:e9:36:d8:67:03:d6:e5:55:ef:b7:b3:01:40:bb:
17:c6:c7:33:79:c2:8a:51:61:ea:00:4f:4f:46:10:
a0:a4:69:fc:93:83:4d:7b:7f:10:63:fc:f3:f3:b9:
6e:9d:ad:c9:bb:73:09:b2:5d:41:54:4f:81:1d:75:
9e:7f:77:cd:83:69:c4:7b:16:e1:3b:aa:c2:5e:10:
7d:e5:5d:ea:07:0f:b4:5d:ed:83:0e:d9:e0:87:81:
0c:2e:30:b7:c7:f8:bb:05:47:13:6e:bf:ec:7c:50:
61:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:48:36:18:29:FF:83:0E:84:26:B5:1F:16:F7:F9:B8:74:26:A6
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/exlINhgp_4MOhCa1Hxb3-bh0JqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f300::/29
2a12:4b40::/29
2a13:c800::/29
Signature Algorithm: sha256WithRSAEncryption
91:5d:ff:72:ad:d3:df:18:fd:cb:f7:77:3f:f3:8a:93:81:aa:
e6:d2:d0:94:42:b3:0c:31:04:4d:35:3c:57:19:db:11:a3:53:
22:24:b3:7d:0f:2f:38:db:85:fa:61:da:80:00:23:7a:28:e8:
33:91:12:f6:6d:38:40:7a:e6:95:5e:f9:16:59:3d:a0:5a:51:
2f:6b:1c:fc:1c:4b:c0:29:a5:de:ab:21:ac:97:bb:1b:7b:d5:
3b:82:26:5f:18:72:9e:85:b8:38:bd:db:6f:97:91:a6:54:2b:
d3:48:78:aa:37:d9:09:20:f6:48:1f:fa:0e:17:a9:b6:6e:c9:
db:3e:da:42:a9:fb:e7:e4:2b:ec:51:d6:fb:49:7b:40:c0:9b:
57:38:77:1d:db:9b:74:fe:38:90:9c:70:70:a2:08:98:84:57:
a8:9c:af:cb:69:46:e9:ac:dc:33:bb:98:aa:b1:83:b6:fa:91:
c4:74:fd:24:e4:2b:7b:23:f4:6a:f4:ff:03:b5:c2:3b:1b:2e:
3d:f8:89:0b:8f:ac:0d:70:8b:e8:dc:f5:da:d4:77:0f:d8:11:
a2:b0:0a:0a:8a:56:3c:82:c8:5e:d6:f3:cc:48:e6:ee:7f:a6:
0f:62:33:d2:34:f6:a1:52:4e:71:82:05:13:13:a7:23:5e:21:
ec:43:1c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:58 2024 by rpki-client on console-ams.rpki-client.org