Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/3elyDxSIHrVHUzzDQnWv21Hnd2w.roa
File: 3elyDxSIHrVHUzzDQnWv21Hnd2w.roa (raw, json)
Hash identifier: /9E0Ey/pG0afggG2C0TAOZp7TgOh2AhL0UXJHojTo/M=
Subject key identifier: DD:E9:72:0F:14:88:1E:B5:47:53:3C:C3:42:75:AF:DB:51:E7:77:6C
Certificate issuer: /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial: 0185E07932AA29362B574F3BFD78902416A1
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/3elyDxSIHrVHUzzDQnWv21Hnd2w.roa
Signing time: Mon 23 Jan 2023 21:11:57 +0000
ROA not before: Mon 23 Jan 2023 21:11:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58192
IP address blocks: 2a13:d000::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e0:79:32:aa:29:36:2b:57:4f:3b:fd:78:90:24:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Validity
Not Before: Jan 23 21:11:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dde9720f14881eb547533cc34275afdb51e7776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dd:db:3c:95:60:c8:c0:47:ad:99:91:67:ed:
e9:65:d9:36:69:49:30:86:58:ea:90:e8:be:b1:d0:
5e:f2:9e:60:d3:cd:da:73:8e:2c:48:74:50:1c:42:
a2:a4:bc:e1:22:d5:52:44:1b:91:2d:d3:d5:65:b8:
72:c8:30:29:bb:61:b8:9b:be:56:15:95:20:76:f8:
ae:e9:c0:14:0d:35:8d:8c:93:79:62:3b:38:ae:3f:
67:f2:ca:1c:74:5c:0f:8a:31:65:5c:c5:1c:7d:0d:
ba:01:0d:84:bb:fc:bf:14:86:d9:9c:cc:d7:ab:df:
e0:d9:c5:0e:76:40:5c:ad:6c:16:54:28:8d:ff:a7:
56:f5:a0:1a:94:af:f8:05:0c:9d:29:0c:22:8f:d2:
97:82:92:4c:93:f7:9a:2e:2f:57:07:3b:2d:0f:e4:
94:a1:1f:fe:d9:ee:af:0b:5f:d7:eb:ed:e3:f1:b2:
a1:a6:25:5e:a7:47:a1:06:53:d5:83:3c:48:da:4f:
bf:83:a1:34:c2:09:68:ec:23:bb:cb:5d:6e:5e:fe:
d9:c7:0d:00:d8:2a:26:30:d9:1c:50:c3:88:42:90:
e8:37:bf:06:3f:b0:ce:2d:c2:21:cf:84:fa:01:dc:
0c:30:89:76:7a:ba:6b:49:bd:c3:43:57:04:76:05:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E9:72:0F:14:88:1E:B5:47:53:3C:C3:42:75:AF:DB:51:E7:77:6C
X509v3 Authority Key Identifier:
keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/3elyDxSIHrVHUzzDQnWv21Hnd2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d000::/29
Signature Algorithm: sha256WithRSAEncryption
14:5d:78:36:4f:f2:43:8f:44:33:b3:94:6e:ad:c4:fb:b7:5a:
85:43:e8:af:79:14:68:e8:cf:ad:2d:41:79:c4:9b:16:09:35:
b4:d1:ca:d8:c6:bc:36:16:83:cc:ad:93:5b:60:4b:28:35:09:
89:1a:28:eb:e2:e1:dc:b8:de:04:75:9a:7a:69:a2:04:20:aa:
44:f5:a2:2a:80:45:a3:01:3e:78:28:90:ca:66:bd:92:66:ff:
3a:b9:7f:a9:ca:20:31:3c:ec:c4:ba:43:0b:ee:93:4e:39:95:
4d:d4:7e:c8:40:d6:78:e3:64:6f:e4:8f:85:62:2d:4e:a7:55:
a1:52:d2:20:01:0b:9b:44:55:cd:8c:af:e5:cf:0d:3c:9e:9f:
55:63:c5:d8:b5:e3:d6:b9:37:c4:b0:89:34:78:98:62:14:05:
5b:31:48:5d:16:bb:d1:9c:a4:4d:39:4f:e3:1e:d4:2c:11:6d:
75:73:b5:53:23:d3:b5:77:fd:58:cf:7f:d7:2d:7c:af:ce:e4:
ca:a8:21:06:cf:55:7a:29:c9:ec:4b:7c:c1:22:a6:31:4e:df:
ae:a9:1d:a4:09:d9:e9:10:ed:4a:99:57:46:c4:00:29:d0:eb:
e6:17:4e:91:1c:74:06:78:f9:81:f8:a0:94:11:6a:42:f9:31:
ae:f8:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:12 2024 by rpki-client on console-fra.rpki-client.org