Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TOEbn7bpM5nTskrmrDV4Fbdm8E4.roa
File: TOEbn7bpM5nTskrmrDV4Fbdm8E4.roa (raw, json)
Hash identifier: NvrDi5M1BO4eObfRmBETRzJm7TaBnV35WsOE/ZMaw4I=
Subject key identifier: 4C:E1:1B:9F:B6:E9:33:99:D3:B2:4A:E6:AC:35:78:15:B7:66:F0:4E
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01910F4BB22442D0B77D5094215C15A00159
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TOEbn7bpM5nTskrmrDV4Fbdm8E4.roa
Signing time: Thu 01 Aug 2024 18:55:04 +0000
ROA not before: Thu 01 Aug 2024 18:55:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215434
IP address blocks: 2a13:afc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 08 Aug 2024 19:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0f:4b:b2:24:42:d0:b7:7d:50:94:21:5c:15:a0:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 1 18:55:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ce11b9fb6e93399d3b24ae6ac357815b766f04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:91:2d:89:08:0d:d0:0d:90:6b:0b:89:73:b9:
d5:e5:c1:6d:c9:00:99:50:06:bd:5c:07:31:26:1f:
32:00:22:7c:31:00:a6:df:c3:ad:41:91:18:f6:19:
2f:24:c3:1b:d4:a4:26:95:84:05:61:3f:3e:82:98:
a2:ae:c7:5a:e1:67:55:15:a3:68:82:ea:bc:6c:14:
ff:ff:c7:d5:56:e8:6a:9a:de:f6:bd:6e:a3:7d:fa:
87:3b:40:3e:70:b3:27:bc:a9:39:b7:9a:16:00:12:
9c:54:e1:68:e6:e6:d2:32:b8:6c:70:87:df:60:ba:
de:bb:92:89:e7:65:81:dd:87:d8:dc:45:b6:33:51:
bc:34:90:17:db:ad:37:65:7b:57:b4:53:7c:c1:7f:
4d:43:65:cc:80:f2:8f:bc:d1:e6:0d:db:d4:29:16:
97:31:e6:eb:73:3a:b4:bb:4c:77:ea:ab:0f:26:1d:
67:a2:b2:3f:8d:2a:ca:7d:e6:0d:30:ef:5e:8f:31:
c4:61:a2:ba:cd:80:cc:da:69:e6:15:96:90:f2:76:
a9:68:68:b3:77:a5:6c:68:86:11:62:1a:e3:68:21:
33:61:f5:41:ce:2d:63:82:0e:ca:ff:be:d4:8c:84:
04:2b:bd:d7:ac:ff:8a:2d:36:88:8f:e1:93:b5:d9:
b1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:1B:9F:B6:E9:33:99:D3:B2:4A:E6:AC:35:78:15:B7:66:F0:4E
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TOEbn7bpM5nTskrmrDV4Fbdm8E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:afc0::/29
Signature Algorithm: sha256WithRSAEncryption
59:51:f4:9d:3e:ae:7d:17:bd:fb:e2:b5:cd:4e:28:75:fa:c0:
01:88:8b:12:f6:ad:6c:9e:b0:5c:4c:3f:25:3e:54:fc:36:78:
4a:c3:8b:ca:c2:34:ee:ee:6f:ba:52:4f:d0:55:d7:d8:dc:37:
d4:b8:a0:54:ff:0a:90:ea:48:35:4a:9c:4c:da:f0:3a:3f:09:
68:0d:d6:71:b1:45:c7:26:3f:b0:0b:91:49:2b:38:3f:14:32:
fa:8e:b5:d5:b4:f1:03:d1:9a:bf:10:86:71:c9:5f:74:e1:83:
a4:20:8f:09:b3:20:45:be:c5:bf:ad:03:c7:19:f3:97:c3:d2:
ec:e0:f2:e9:2e:1c:e4:2a:1f:82:17:9e:43:1f:0f:40:6c:1a:
b9:ac:b1:3f:93:bf:72:62:bc:3a:bb:fb:91:f1:c8:99:2c:79:
f1:82:58:c5:70:f3:ac:35:f3:f8:9d:14:37:ac:bc:3e:ac:38:
a9:1d:72:34:13:6c:01:0e:00:7e:1c:4d:6e:79:f3:84:87:b2:
22:44:bf:a3:64:f5:df:58:8d:a3:f0:12:d3:31:61:9f:f2:00:
e3:b4:32:bc:91:bb:5d:f2:41:6e:0a:9c:00:44:8a:6f:33:41:
c4:f1:3e:fe:6c:f2:4c:1f:10:05:c3:81:12:8e:89:c3:62:84:
17:d4:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:06 2025 by rpki-client