Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/jJcik1RBI7q-aSNPBpYcP19VyuQ.roa
File: jJcik1RBI7q-aSNPBpYcP19VyuQ.roa (raw, json)
Hash identifier: ygfuXi6NhfRJOjNenZ3Sjc4AoROOsASuaXx9ODphChU=
Subject key identifier: 8C:97:22:93:54:41:23:BA:BE:69:23:4F:06:96:1C:3F:5F:55:CA:E4
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018C9847E755F58F2A660A775216471FBA30
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/jJcik1RBI7q-aSNPBpYcP19VyuQ.roa
Signing time: Sat 23 Dec 2023 20:04:58 +0000
ROA not before: Sat 23 Dec 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 2a13:e400::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 31 Dec 2023 15:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:98:47:e7:55:f5:8f:2a:66:0a:77:52:16:47:1f:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Dec 23 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c972293544123babe69234f06961c3f5f55cae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:4c:21:4f:67:b1:8a:c1:eb:75:76:49:6e:
4e:53:1e:94:59:61:a9:42:e2:a2:fb:3a:eb:3c:27:
44:47:6d:f3:22:72:f4:9c:a5:42:1f:9e:54:cd:bd:
e5:23:8f:c2:16:b6:6f:a4:13:c4:be:ed:18:40:3e:
8d:73:33:7a:32:e2:44:dd:cb:a6:8e:c6:03:ae:c5:
79:07:6d:45:06:c5:ba:f4:40:1a:54:7d:12:24:f5:
04:1a:2a:83:94:7a:14:e2:a2:91:8f:15:86:ef:c2:
e1:5b:2e:1a:1b:b2:e4:d9:0b:e5:3f:e0:46:d0:3c:
8a:dd:90:5b:8b:15:52:2f:27:ad:59:0d:be:cd:1f:
bc:dc:e2:42:f3:77:b6:19:42:eb:2b:10:aa:30:ed:
17:71:f8:e8:de:f7:17:71:bc:da:42:06:28:d6:a4:
0c:c5:bb:08:13:19:46:4a:9b:f8:99:d1:9f:01:32:
e3:64:44:53:3c:91:a5:44:fd:2d:46:d2:93:40:f7:
8a:80:95:fd:3b:87:5b:7c:dc:24:f1:f3:17:38:3f:
88:15:f5:5e:d3:68:69:6b:09:50:fa:43:4b:ac:c0:
c9:51:aa:e9:4c:4d:90:35:cb:3e:3f:e6:d2:83:3c:
34:20:8e:42:2a:97:84:18:d1:91:a0:a0:88:e0:36:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:22:93:54:41:23:BA:BE:69:23:4F:06:96:1C:3F:5F:55:CA:E4
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/jJcik1RBI7q-aSNPBpYcP19VyuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
24:73:3f:d5:75:0e:86:33:42:55:0c:d7:cb:4f:f4:05:dd:9c:
e7:e7:8a:f4:a3:f8:64:87:aa:06:38:dc:16:83:4a:d2:61:e8:
f8:6c:e1:b9:9a:d3:f2:bb:c5:0b:5f:bc:95:5d:14:1d:8b:59:
a1:56:62:a3:97:20:52:24:01:27:1a:c3:ff:f0:e8:25:f6:dd:
d8:7a:4d:f0:7a:78:8b:3a:92:38:f4:e8:43:f4:a3:b3:08:97:
ed:49:68:33:99:55:6b:38:72:ca:ed:61:c6:89:ec:99:fc:02:
48:61:4f:dc:52:53:70:0e:84:2c:ef:db:e5:b4:f4:2f:ed:7b:
23:af:2e:a2:d6:15:60:a2:56:64:94:22:02:f1:fb:a5:56:90:
ee:9d:20:18:25:f8:05:9a:4b:8b:b7:3a:4c:0b:50:4a:aa:2e:
4e:27:e7:c6:bd:0c:db:4b:3f:22:07:75:4f:66:18:07:4a:23:
4e:13:57:c5:72:5c:95:74:56:46:61:a9:83:92:0f:dc:1f:bf:
c5:e2:36:24:cb:9c:ff:1b:84:f8:4e:aa:3e:28:d5:9c:0c:3d:
64:e4:29:ea:8a:30:b9:71:3e:c3:64:8c:e5:58:28:55:95:64:
cb:37:e5:83:6f:2e:23:63:d7:48:3e:a9:78:58:e2:f6:62:f3:
d7:ad:9e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org