Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/G_wQKDD3x8PrEk6vO4u8BI0WfRs.roa
File: G_wQKDD3x8PrEk6vO4u8BI0WfRs.roa (raw, json)
Hash identifier: 8jKLXk/JyCtN/fTftOJch6qN3sjRIuflGi2/HxiuNik=
Subject key identifier: 1B:FC:10:28:30:F7:C7:C3:EB:12:4E:AF:3B:8B:BC:04:8D:16:7D:1B
Certificate issuer: /CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Certificate serial: 018A908771BE1C53B5C0A6AFF24EEABA1DDC
Authority key identifier: A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/G_wQKDD3x8PrEk6vO4u8BI0WfRs.roa
Signing time: Wed 13 Sep 2023 21:51:50 +0000
ROA not before: Wed 13 Sep 2023 21:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216320
IP address blocks: 2a13:1500:3b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:87:71:be:1c:53:b5:c0:a6:af:f2:4e:ea:ba:1d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a38b176a7d92e501eedaef6c60e8ce3a68d75224
Validity
Not Before: Sep 13 21:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bfc102830f7c7c3eb124eaf3b8bbc048d167d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:88:5c:d6:89:40:60:e6:da:2a:d5:b0:16:
75:e1:79:d6:d5:df:17:f6:ca:a4:f9:31:5e:f1:cc:
af:95:28:87:1e:40:35:18:ae:ac:ae:af:8c:2f:a8:
4a:f1:21:b9:48:1f:5d:cf:fc:de:ef:94:5c:29:3a:
df:58:45:35:64:12:f1:f3:45:ae:4f:45:cd:5f:ce:
5d:5a:b7:5a:db:f3:63:e6:6b:93:64:31:d8:4e:5d:
a4:6d:87:af:c2:eb:03:6b:06:33:83:5d:18:fc:db:
84:f9:20:b4:f0:f6:fc:45:6f:5d:3f:9f:58:3a:ff:
12:a0:8a:b7:47:4e:51:79:4c:8a:10:3a:09:a5:c1:
49:4c:23:ba:bd:59:0d:3c:d0:fa:bf:e8:54:d8:43:
6e:23:64:90:58:40:00:db:fa:6d:e2:32:c6:0e:c8:
01:e1:8b:60:cc:aa:3b:d0:2e:68:b1:9c:dc:d8:d2:
08:5c:5d:ea:68:67:50:94:ae:4d:6c:aa:c8:3a:b2:
da:3f:7e:86:a5:20:db:49:0d:bf:14:ba:82:ce:36:
2c:4a:72:b4:28:07:0d:e7:74:c8:ab:bb:ea:51:6d:
1a:63:b1:2f:5e:12:c2:06:44:d9:9b:92:bd:6b:48:
f7:c3:0b:2d:eb:52:f4:02:a0:a8:cf:70:ad:98:25:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:10:28:30:F7:C7:C3:EB:12:4E:AF:3B:8B:BC:04:8D:16:7D:1B
X509v3 Authority Key Identifier:
keyid:A3:8B:17:6A:7D:92:E5:01:EE:DA:EF:6C:60:E8:CE:3A:68:D7:52:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4sXan2S5QHu2u9sYOjOOmjXUiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/G_wQKDD3x8PrEk6vO4u8BI0WfRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8100db-443a-4c7e-bbe2-efe79c254e25/1/o4sXan2S5QHu2u9sYOjOOmjXUiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1500:3b00::/40
Signature Algorithm: sha256WithRSAEncryption
64:5a:65:d9:65:8e:04:01:b9:94:30:60:cc:42:8d:ac:a7:6f:
2f:20:7a:38:4b:52:05:a9:81:06:da:35:4d:c6:28:f2:e1:9a:
da:4c:42:92:74:3d:2c:b5:22:ad:61:58:c9:52:b2:76:a8:58:
51:05:2a:e3:a8:3f:3e:fb:1a:61:90:c7:61:c6:33:3e:50:80:
bf:a5:c6:61:75:30:04:fa:ae:cf:05:ed:75:30:cb:28:19:d6:
df:9a:f2:71:1b:3c:ce:25:f9:0b:38:e7:30:3e:79:60:ed:a3:
22:b9:f4:2f:e7:91:71:95:22:dd:ea:94:3a:78:bb:1b:db:05:
a1:33:8c:89:b0:ba:09:a3:8a:00:78:07:39:96:12:64:7d:70:
0f:cc:17:9c:dd:17:75:ff:8c:38:1a:49:91:57:5e:a9:44:5e:
6c:23:c8:f4:48:0e:d8:cb:9b:2a:29:1b:0a:c2:32:62:09:7a:
13:ea:0c:ea:b8:e9:56:4a:8c:da:c6:21:41:a4:ee:92:d9:98:
1a:d5:52:49:b8:dc:01:e6:1f:97:20:f2:73:77:e7:d5:88:fc:
6c:8b:bd:13:74:3b:79:fa:42:b9:85:d7:53:c8:bb:63:55:8f:
49:83:40:db:eb:d6:3f:c5:70:98:7f:49:af:0a:db:f3:f5:74:
70:47:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:52 2024 by rpki-client on console-fra.rpki-client.org