Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/e9zwkJHITX3hpPI1gUHMQ8RFtkM.roa
File: e9zwkJHITX3hpPI1gUHMQ8RFtkM.roa (raw, json)
Hash identifier: jRyKSD5S1Br+5G5fLLp0GO4aUdRwian3ZLQp+/rISuM=
Subject key identifier: 7B:DC:F0:90:91:C8:4D:7D:E1:A4:F2:35:81:41:CC:43:C4:45:B6:43
Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb
Certificate serial: 018B6CF7FC137EEDB168CA26E0913E041752
Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/e9zwkJHITX3hpPI1gUHMQ8RFtkM.roa
Signing time: Thu 26 Oct 2023 17:11:13 +0000
ROA not before: Thu 26 Oct 2023 17:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205884
IP address blocks: 2a13:5100::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:f7:fc:13:7e:ed:b1:68:ca:26:e0:91:3e:04:17:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb
Validity
Not Before: Oct 26 17:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7bdcf09091c84d7de1a4f2358141cc43c445b643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a8:5a:cf:7c:40:d5:be:dc:b1:4a:7a:9c:b4:
44:52:9e:4b:56:48:98:47:47:67:a6:2c:41:b5:ce:
39:6e:d2:52:a8:1f:7e:5a:ac:ee:ba:f3:32:c7:df:
d3:a9:58:02:3f:5c:f8:ef:ce:6e:fe:b1:fd:ec:d7:
9a:05:68:e8:ba:d4:ac:b1:34:72:3d:a1:e8:d5:3e:
89:56:26:aa:ce:4d:cc:52:e2:1c:55:71:f7:e8:78:
93:23:6c:6a:a7:63:b6:36:0d:b7:b4:17:51:3d:fe:
fa:98:a6:0b:ab:ec:2b:88:5f:0a:88:90:5d:5f:71:
06:fd:5c:0f:71:0f:ca:f5:dd:92:45:5e:21:29:41:
fd:8c:16:d6:cb:83:60:4b:ab:29:88:2b:e2:7d:f9:
68:ad:6a:d2:bd:87:86:bd:e4:e9:e6:34:d6:64:64:
60:e1:ec:cb:8c:a8:40:c6:9f:7c:62:27:1a:5e:6b:
11:50:58:f3:89:9c:2d:c4:28:ea:f1:0f:ea:2f:c1:
12:f0:d8:b7:ef:08:cf:f6:74:07:79:34:26:69:7e:
77:d1:68:b1:87:da:1d:c5:4a:ed:16:3e:36:0b:1c:
47:60:a7:0a:39:b5:88:aa:d6:6c:b2:8c:3f:60:3b:
46:6b:8e:d7:af:58:39:55:5c:b9:35:66:08:52:23:
5f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DC:F0:90:91:C8:4D:7D:E1:A4:F2:35:81:41:CC:43:C4:45:B6:43
X509v3 Authority Key Identifier:
keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/e9zwkJHITX3hpPI1gUHMQ8RFtkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5100::/29
Signature Algorithm: sha256WithRSAEncryption
0a:b8:ed:d5:2e:b4:54:9a:cd:90:a8:bc:07:a3:ec:42:8a:54:
29:68:b4:3a:2f:48:30:3e:76:3b:98:a7:a7:5f:aa:8a:1d:c4:
15:4b:fc:65:97:83:da:3f:11:2e:76:fe:35:76:6a:0e:81:49:
fb:f6:3b:c6:e7:ce:55:41:b2:e2:f4:85:9d:7c:2e:99:62:96:
f8:44:48:9c:1b:2d:43:06:e7:bf:c5:be:a9:35:3e:2d:71:e3:
93:df:af:70:8d:88:1c:16:39:99:c0:d8:47:5a:49:54:5f:78:
86:66:49:b5:1b:76:0c:16:1a:df:1d:2d:2c:2a:16:66:d4:87:
04:1a:ea:35:34:fb:e6:e6:b3:de:59:eb:25:18:e9:ff:17:6b:
cd:33:4e:01:25:c3:6c:7b:44:2f:4c:21:46:b8:b3:7d:65:e6:
db:54:2f:a5:f2:27:57:38:b6:2d:fc:68:9e:58:91:06:04:2b:
74:0f:9c:86:a5:d3:1c:b4:82:98:8a:4e:bc:90:39:95:8f:5b:
32:f5:94:b9:68:86:df:24:c6:6a:ac:6c:0e:9c:73:14:58:ba:
7f:e1:7a:3d:5e:23:81:df:6d:77:bf:d4:2d:04:71:3f:1c:1b:
98:b4:60:e2:9b:b7:b0:47:c3:97:77:d9:ae:78:f2:58:dd:0b:
9a:45:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:27 2024 by rpki-client on console-ams.rpki-client.org