Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JreCIbNafw0jL7t_JnrH8JFz5HE.roa
File: JreCIbNafw0jL7t_JnrH8JFz5HE.roa (raw, json)
Hash identifier: hmSoBAKlWyEhOuCspYmR3AGMnsVudVmziJXFwwUu050=
Subject key identifier: 26:B7:82:21:B3:5A:7F:0D:23:2F:BB:7F:26:7A:C7:F0:91:73:E4:71
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018B14589BCDD4D778A051CCC3470EB60750
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JreCIbNafw0jL7t_JnrH8JFz5HE.roa
Signing time: Mon 09 Oct 2023 12:10:33 +0000
ROA not before: Mon 09 Oct 2023 12:10:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210000
IP address blocks: 2a13:a5c6:5030::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:14:58:9b:cd:d4:d7:78:a0:51:cc:c3:47:0e:b6:07:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Oct 9 12:10:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26b78221b35a7f0d232fbb7f267ac7f09173e471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9f:e5:5d:b8:10:25:12:e7:e7:57:5d:b8:1a:
fd:df:b5:7f:0e:e2:6e:81:8c:7c:c8:8c:8a:7a:bd:
44:60:16:b4:ad:84:2b:7c:c4:3b:c6:76:6d:0b:4b:
6b:8f:44:ff:cc:bd:53:5f:77:4a:c1:a4:b6:fb:d3:
af:16:1b:16:80:27:0b:ab:b2:cf:7d:a2:a5:86:5f:
c6:54:f5:62:ec:53:57:ed:09:97:86:5c:46:77:a3:
35:ef:1f:d6:51:5e:0d:9c:ac:4c:1f:16:9e:ff:8a:
7e:25:b6:19:31:74:66:46:62:7e:22:c9:bf:94:1e:
8a:49:83:0b:2f:93:fa:57:b5:9b:2d:80:86:41:ab:
5e:52:d6:32:d3:42:a1:9a:b6:45:e0:35:a9:6a:21:
0e:6f:a1:0e:1d:b1:2a:88:ef:86:6b:6e:b4:4e:28:
83:2f:5c:5b:64:1f:00:0c:70:0c:0b:2c:ca:d4:2e:
32:83:4b:d1:1d:d0:98:27:26:8e:27:73:12:f5:1b:
ff:1f:95:34:28:ad:1a:b3:70:68:dc:04:b8:f5:1e:
61:7d:41:06:f1:ce:6d:cb:bf:42:37:93:e2:93:da:
c3:05:d1:bb:ea:f3:c1:60:11:1f:ee:e2:e2:cc:c8:
ed:3d:60:21:5f:4f:e7:f0:55:8b:7a:11:5e:25:12:
47:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:B7:82:21:B3:5A:7F:0D:23:2F:BB:7F:26:7A:C7:F0:91:73:E4:71
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/JreCIbNafw0jL7t_JnrH8JFz5HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c6:5030::/44
Signature Algorithm: sha256WithRSAEncryption
2d:b4:0b:3c:fc:34:70:fb:ad:d9:fd:22:a2:98:03:94:23:ae:
80:c8:63:8a:f3:99:47:60:a8:52:9b:93:cf:86:42:ae:06:42:
14:d5:a3:46:3b:d6:76:80:f7:af:1e:eb:11:56:cb:28:5b:64:
80:bb:8f:d5:4e:6a:79:38:ac:af:b2:5b:36:9a:d6:36:78:16:
06:f0:19:73:29:cf:ba:4c:3a:e6:cd:83:49:34:cb:15:3e:bd:
b0:fa:2f:d7:8d:6f:cb:1c:80:f9:83:e1:9c:77:40:a9:12:7b:
c7:59:0d:2d:f3:dd:89:10:9c:1a:91:00:07:68:c3:51:58:a3:
d0:c4:44:f7:c9:53:68:1a:5d:ec:4a:9c:bd:a8:f2:ca:22:04:
2e:05:35:dd:a3:42:c4:fd:64:d2:11:c7:74:30:db:5a:04:ea:
e6:71:ef:7e:fc:ef:1e:9c:7b:d6:55:03:05:5d:53:5d:d9:7d:
be:7e:2b:8e:2a:58:bf:d8:f4:9d:17:35:eb:09:42:4b:2f:d2:
eb:99:32:30:98:15:54:95:09:c4:26:89:1c:31:d8:73:fe:e3:
f3:60:a8:00:b9:6f:d1:cb:91:05:d9:ba:1c:52:28:90:8a:83:
f6:6a:86:f3:fe:6e:04:81:0f:3a:46:48:b3:37:c3:31:a3:9b:
46:aa:24:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org