Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VvM3wE_N1LsRWE-ZsTc7ihbHbj0.roa
File: VvM3wE_N1LsRWE-ZsTc7ihbHbj0.roa (raw, json)
Hash identifier: rcExkIriN4dDCiYV/CeEhXtmvhqX3+2KXXcXS4Id3PM=
Subject key identifier: 56:F3:37:C0:4F:CD:D4:BB:11:58:4F:99:B1:37:3B:8A:16:C7:6E:3D
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018DDFF986169779A9F41786D7B860AE5E4D
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VvM3wE_N1LsRWE-ZsTc7ihbHbj0.roa
Signing time: Sun 25 Feb 2024 11:14:48 +0000
ROA not before: Sun 25 Feb 2024 11:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400618
IP address blocks: 2a13:a5c3:f100::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Mar 2024 13:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:df:f9:86:16:97:79:a9:f4:17:86:d7:b8:60:ae:5e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Feb 25 11:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56f337c04fcdd4bb11584f99b1373b8a16c76e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:0c:98:1d:c6:3e:1f:e7:b6:b5:a8:d3:02:
23:ad:7a:69:14:b7:23:ff:46:4f:7d:ef:b1:3d:b8:
af:52:17:70:8a:6f:63:8d:7d:24:f9:32:7d:f5:b2:
b4:d0:3f:5b:f3:6f:0b:87:71:56:d9:64:9a:cd:d2:
f6:28:74:0b:89:21:83:7e:08:d5:e3:d5:06:8d:46:
21:b7:d4:86:cf:fe:a6:ed:44:9a:2b:f4:61:45:67:
1c:b5:33:16:6f:07:3f:2b:d2:44:5c:80:ee:a6:cc:
4a:80:2b:e3:71:85:97:ea:10:f4:0c:6b:4f:f5:bc:
6d:97:9a:16:64:65:16:2c:69:85:ef:cd:d5:7d:19:
9a:b2:41:d5:e5:be:ef:ba:a2:9f:24:60:01:a3:12:
73:7b:b2:b7:00:1d:a3:9b:a7:5e:42:ce:53:db:58:
7e:79:7e:e6:04:34:55:f6:b8:61:06:c2:25:bf:e8:
da:b5:6d:a9:12:59:c8:cc:bb:09:df:5a:61:3d:d3:
6c:4e:6c:a3:b9:32:ea:db:b9:e9:f8:fb:c3:8d:2c:
fd:82:5f:74:58:44:f6:7a:26:10:60:d3:5a:b1:59:
27:49:cd:95:fd:1d:ae:70:f8:b3:74:54:f6:4d:63:
ec:f0:0f:cb:74:e3:95:d9:e7:76:0e:5a:22:12:44:
a6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:37:C0:4F:CD:D4:BB:11:58:4F:99:B1:37:3B:8A:16:C7:6E:3D
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/VvM3wE_N1LsRWE-ZsTc7ihbHbj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:f100::/40
Signature Algorithm: sha256WithRSAEncryption
88:10:2a:d1:64:78:45:aa:09:07:90:62:f6:ee:b9:93:9d:98:
c2:cf:c7:2a:d0:64:7f:bb:f1:d8:d5:1f:5e:e2:b0:9b:cd:09:
c1:21:08:2a:9d:f2:46:05:13:90:59:d0:ac:9f:f4:21:c8:59:
75:4d:1b:28:aa:bb:82:2e:de:64:5c:50:17:fa:38:43:2e:f7:
01:a5:39:96:71:d0:51:e3:df:67:bc:26:81:11:79:b7:ea:46:
97:a3:e4:0e:c5:5c:f4:78:b2:2b:83:d7:e7:6b:b2:da:05:6a:
c6:5a:10:68:51:46:fb:92:e0:c5:9a:fe:41:20:d6:a8:79:85:
cd:ce:6a:80:b3:ea:26:19:b8:70:3d:b1:c2:d0:36:d2:4c:2c:
2a:c0:d4:be:84:e8:df:b0:2a:8a:67:13:fe:29:0c:04:84:cc:
25:06:cb:80:ef:bb:47:a0:77:0a:8a:93:b2:bc:67:6d:70:f7:
55:56:d9:97:fe:5e:91:1b:5f:4b:ec:70:ee:3b:7d:0e:1b:4d:
db:8d:96:2d:8b:a1:a7:46:f6:21:66:f5:0f:b3:b7:00:ab:05:
3a:18:9f:4a:b2:99:25:ae:f8:58:06:21:c7:ca:c5:7b:f8:a3:
dc:d1:63:95:d4:9c:2d:18:92:45:c9:44:d2:14:8a:c4:4c:f4:
e0:be:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org