Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/Rdz10lNWKFrg4FKVV0Y4BuBCUJo.roa
File: Rdz10lNWKFrg4FKVV0Y4BuBCUJo.roa (raw, json)
Hash identifier: iv74gT4ayNE7qxsfzrtQCJH3KiBIZnIBIRqeVjITR7M=
Subject key identifier: 45:DC:F5:D2:53:56:28:5A:E0:E0:52:95:57:46:38:06:E0:42:50:9A
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 018CC50134B3397EF1057CB00D2B551DAC23
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/Rdz10lNWKFrg4FKVV0Y4BuBCUJo.roa
Signing time: Mon 01 Jan 2024 12:30:39 +0000
ROA not before: Mon 01 Jan 2024 12:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a13:92c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Feb 2024 13:03:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:34:b3:39:7e:f1:05:7c:b0:0d:2b:55:1d:ac:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Jan 1 12:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45dcf5d25356285ae0e0529557463806e042509a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5b:21:2e:0f:aa:33:1f:c6:34:f8:92:f2:66:
ef:85:b8:3c:6a:1f:0c:43:f3:12:f6:0a:19:e3:1f:
9c:be:a6:c7:0d:9f:88:e3:ec:74:84:05:b6:32:50:
59:06:37:7e:3f:a6:f8:36:e9:b9:8c:8d:c4:2f:6f:
3a:38:53:9f:86:42:47:0b:8b:ab:ce:c9:07:70:99:
43:a4:f0:a7:c2:da:ec:ba:28:8c:5f:7b:85:81:03:
92:c0:a8:3a:5c:15:a0:47:4d:99:4c:0f:43:0a:b1:
eb:7a:a2:38:9d:0b:e6:f7:b3:b7:53:5b:b8:49:10:
f4:ea:0f:af:fd:62:e8:06:9e:fa:9d:fe:0a:8b:64:
26:04:d9:f5:6a:42:ab:93:88:bd:aa:b7:df:56:ea:
c9:fc:41:e4:8b:04:36:99:94:9c:96:0d:97:b0:56:
d7:28:c5:aa:3a:ad:4f:e5:8d:98:de:83:8e:90:b8:
9d:4c:45:7e:32:06:4b:4d:70:4a:42:41:51:b5:c4:
7a:f5:38:47:4a:83:b1:ea:55:87:01:00:c3:74:ea:
c5:20:4c:7f:61:09:02:c8:c7:70:ca:7f:99:54:88:
af:21:18:1a:e4:0a:b5:cb:d6:1c:e5:24:73:76:d9:
b5:f5:12:26:3d:ca:6b:dc:6e:62:70:cd:8d:ac:3c:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:F5:D2:53:56:28:5A:E0:E0:52:95:57:46:38:06:E0:42:50:9A
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/Rdz10lNWKFrg4FKVV0Y4BuBCUJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
51:b2:7f:89:7a:7c:29:ab:8b:85:52:4a:bf:74:69:a8:da:74:
5b:5e:9c:b2:47:07:cf:31:63:db:4c:16:cd:92:c9:ed:bb:3e:
f4:21:6b:96:2a:16:84:d6:de:f8:b5:0a:46:76:38:11:2e:d6:
1e:e8:84:5b:99:1a:72:b7:0b:48:c8:fc:74:54:ca:8c:b1:fa:
75:36:54:9a:89:93:7d:cd:06:1a:12:6a:26:e7:86:35:3f:e5:
a5:e6:63:5b:1d:31:3a:eb:61:b9:bb:43:f8:d8:25:1a:f8:45:
fe:e1:70:b3:ab:89:ae:3a:1f:70:fa:27:81:20:6c:89:ec:20:
63:b3:f1:61:c7:ed:58:2f:f4:9c:1c:a3:08:08:f4:a8:78:c3:
c9:cc:f0:94:fd:cb:ec:ff:f6:74:51:93:34:67:dc:62:51:27:
32:a3:07:97:f0:2a:a0:25:1a:db:a8:b2:23:35:7d:d4:0d:f8:
e8:74:67:aa:e4:0a:13:48:54:6d:ef:9b:a7:47:90:aa:45:97:
c4:30:bb:ca:f7:7b:2f:09:27:12:4f:3b:07:0d:2e:09:97:fa:
31:84:43:12:d7:e7:ba:75:08:12:78:78:61:e8:af:43:27:38:
9e:dc:50:bb:b1:5e:87:57:5a:34:a6:46:dc:b5:ae:13:eb:c3:
06:0b:10:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:17 2025 by rpki-client