Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/xejLDHd4xkm9Q6terlfS6qQrhRo.roa
File: xejLDHd4xkm9Q6terlfS6qQrhRo.roa (raw, json)
Hash identifier: kvPRwJ8i9fOdSst6nN5/SG32CpS+iVXD/AX2VLIQdKE=
Subject key identifier: C5:E8:CB:0C:77:78:C6:49:BD:43:AB:5E:AE:57:D2:EA:A4:2B:85:1A
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018C514441001B994EAD7977F7A4B5814672
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/xejLDHd4xkm9Q6terlfS6qQrhRo.roa
Signing time: Sun 10 Dec 2023 01:07:56 +0000
ROA not before: Sun 10 Dec 2023 01:07:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 2a13:e400::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 23 Dec 2023 20:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:51:44:41:00:1b:99:4e:ad:79:77:f7:a4:b5:81:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Dec 10 01:07:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5e8cb0c7778c649bd43ab5eae57d2eaa42b851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:79:7b:a5:6f:fa:26:77:c3:5b:9d:7a:87:
2a:0c:08:49:bd:6e:b6:4c:05:99:64:01:1e:56:eb:
99:4f:db:66:a6:61:5b:63:0a:e7:62:ec:c7:a9:fb:
45:51:67:62:b6:5a:f1:6d:5b:1b:3e:2c:bf:78:19:
a8:f5:79:33:7f:6a:72:d7:09:40:f5:b6:33:52:79:
80:28:06:79:9e:63:33:ef:0b:61:b6:6c:d5:1a:68:
48:ea:41:fe:b1:07:35:b5:b9:30:f2:78:7a:9f:25:
42:96:d9:26:82:58:bc:6f:f4:e5:23:67:d6:a6:15:
f6:3b:18:43:45:6b:6d:b8:cc:9c:c7:c7:0d:1d:1c:
76:e9:51:19:fc:14:73:71:46:c7:d3:f2:90:a1:64:
cf:2a:d6:b8:9e:3e:d4:d5:53:7f:22:5f:19:1a:05:
e5:a6:8c:4c:c2:09:9e:93:d6:bb:d9:eb:ea:e9:b0:
2e:7d:7a:dd:28:ac:82:32:cd:49:c6:d5:47:8b:54:
c8:19:f7:ed:26:05:ef:9a:d8:8e:c6:13:4e:5c:d3:
ad:94:e5:39:51:28:0b:1a:4f:28:5c:fa:28:7d:5d:
77:08:9b:01:2c:89:c3:95:25:2a:0d:3d:61:31:f6:
5b:be:d6:a5:4b:35:3d:95:3b:18:8c:e2:30:b1:77:
9c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E8:CB:0C:77:78:C6:49:BD:43:AB:5E:AE:57:D2:EA:A4:2B:85:1A
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/xejLDHd4xkm9Q6terlfS6qQrhRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e400::/29
Signature Algorithm: sha256WithRSAEncryption
32:54:76:d3:28:99:69:45:29:02:4b:59:51:a7:f4:03:88:6f:
c9:50:d7:88:2b:d0:6e:11:b6:07:72:62:b5:43:5c:39:2d:dd:
c0:d9:89:bd:b5:e6:a2:e4:19:5a:66:ee:34:ce:6b:ac:11:a4:
d2:89:92:2d:22:63:05:1f:63:4a:fb:89:b5:64:23:f0:25:7f:
d9:12:a8:74:f4:bd:7a:90:ec:aa:f2:f5:43:ed:f0:da:1a:82:
6c:56:c1:3d:a1:b7:71:1a:90:30:36:20:dd:62:d8:8a:da:60:
21:43:4d:48:18:19:66:32:79:d0:d5:33:8e:71:d6:ef:0d:ab:
0d:cc:e1:35:6b:34:14:8e:d4:af:c4:6e:a0:cb:15:b4:64:6c:
29:b7:a4:df:3e:f0:ea:4d:db:07:63:6f:8c:21:75:f8:87:77:
d7:1a:aa:64:bf:a5:9b:3f:f9:28:75:ec:ea:aa:b9:e0:f0:76:
0d:6d:1b:1e:4e:1d:88:8b:37:55:cd:ab:3e:f0:48:d0:1a:b1:
cc:2e:a8:75:57:4d:81:0b:db:98:c9:21:a1:a7:e2:c8:69:64:
df:22:1a:18:66:0a:df:ab:0d:b4:77:28:30:0c:3f:3e:d9:c3:
3a:3f:6b:b2:1f:23:c5:a9:8c:a8:c4:1d:94:6c:15:80:a4:a3:
78:53:e6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org