Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/5SgJDOxzxrWtY_ZXS__scVl6tdA.roa
File: 5SgJDOxzxrWtY_ZXS__scVl6tdA.roa (raw, json)
Hash identifier: RjI+Lm464t+c05Nia9c0crsr5j9fm5tb50r3AZBlX8Q=
Subject key identifier: E5:28:09:0C:EC:73:C6:B5:AD:63:F6:57:4B:FF:EC:71:59:7A:B5:D0
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0193998C9EEC602C48BB89A4E6144664816F
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/5SgJDOxzxrWtY_ZXS__scVl6tdA.roa
Signing time: Fri 06 Dec 2024 01:19:09 +0000
ROA not before: Fri 06 Dec 2024 01:19:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213750
IP address blocks: 2a13:a5c7:2600::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Dec 2024 15:52:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:99:8c:9e:ec:60:2c:48:bb:89:a4:e6:14:46:64:81:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 6 01:19:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e528090cec73c6b5ad63f6574bffec71597ab5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:ba:b7:aa:52:c3:47:8a:2d:8b:90:fa:15:
db:01:75:09:0f:c3:83:2e:71:33:8f:13:15:43:76:
47:4b:67:06:2b:c8:5c:f8:af:ad:7e:37:8a:51:55:
89:67:29:1d:b5:35:3b:e4:96:e4:59:f2:4d:33:69:
34:a0:2a:45:b9:82:f6:53:76:4e:c3:41:90:ff:7f:
27:12:ab:86:65:0e:3f:f5:82:08:e6:c9:89:ae:d2:
1f:20:14:cd:b4:29:94:2a:3f:dc:85:cc:0e:5a:fa:
6d:d0:6e:92:bd:cd:9e:47:a2:bd:c2:e4:64:ce:3e:
16:11:89:e7:03:17:f2:3d:7c:25:1f:61:2b:40:d6:
96:6d:2a:20:d4:22:b5:9d:01:77:ad:3f:fa:2a:b3:
28:8f:98:d5:53:a0:6d:a5:3d:ef:d5:1a:ef:89:dc:
48:f1:c7:55:bd:9c:c5:97:8c:2e:fd:2c:be:96:67:
db:dd:d3:00:46:5e:0f:08:7e:4c:ab:34:f0:31:98:
bf:1d:b6:a5:ee:c7:13:63:41:f0:87:b8:23:be:20:
b2:7a:1b:e5:21:6a:10:8f:77:39:fc:e1:04:c3:15:
29:15:da:5d:36:ee:43:08:ac:3a:3e:9d:aa:04:ff:
20:37:47:0f:9f:8d:a8:0d:d9:81:d0:7f:71:d5:5f:
8d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:28:09:0C:EC:73:C6:B5:AD:63:F6:57:4B:FF:EC:71:59:7A:B5:D0
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/5SgJDOxzxrWtY_ZXS__scVl6tdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:2600::/40
Signature Algorithm: sha256WithRSAEncryption
65:b2:50:ee:d1:8a:07:20:67:2a:95:50:09:e0:77:ed:1e:9d:
a6:5e:76:c9:23:c9:0f:c7:b6:46:32:92:53:87:17:45:ef:22:
b2:9a:b4:2f:92:cd:28:1b:ad:b5:ac:ae:4d:e6:66:f7:2b:7e:
05:11:b2:90:0b:39:ee:1f:81:d1:3d:dc:4b:80:1d:1a:da:6e:
c4:c9:c5:aa:22:ae:51:c8:0e:ee:aa:b0:8b:a6:ad:80:09:0e:
6d:4c:8c:ff:99:07:e6:6d:e5:65:0d:1d:0c:8e:96:76:55:ce:
1c:72:5f:ae:f8:2b:d0:e8:37:0a:77:19:5f:89:f7:1d:6b:fa:
f4:f1:20:1b:85:5c:da:50:f3:f8:28:44:d7:3a:b8:77:25:2e:
92:56:0e:2b:34:9c:8e:0f:28:93:aa:ac:ca:5d:23:69:ed:54:
15:cb:3c:bf:ec:aa:17:4d:af:a1:88:c5:05:84:85:7a:16:04:
7a:a6:ee:e5:52:bb:30:65:8a:a5:f2:a8:77:c0:a6:34:d4:e4:
bc:2e:e9:c6:03:c2:98:3c:49:39:58:3d:a9:a2:14:04:1b:96:
2e:a9:74:b2:4b:a7:22:ce:cf:65:93:0a:37:f5:75:9a:46:8c:
b3:0b:9a:bc:26:9b:b4:fb:fc:d1:e3:8d:3b:eb:41:17:c9:4d:
44:91:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 17 18:51:56 2024 by rpki-client on console-ams.rpki-client.org