Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_q-J7vefwGMNLQr7mLDVHbJKTUI.roa
File: _q-J7vefwGMNLQr7mLDVHbJKTUI.roa (raw, json)
Hash identifier: nVMQqstghval13oFxLjdbkXkHrA4zKqakGB9IpFcllc=
Subject key identifier: FE:AF:89:EE:F7:9F:C0:63:0D:2D:0A:FB:98:B0:D5:1D:B2:4A:4D:42
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 018D9E66EC649577A46EEEEF26B20699E8BA
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_q-J7vefwGMNLQr7mLDVHbJKTUI.roa
Signing time: Mon 12 Feb 2024 17:39:21 +0000
ROA not before: Mon 12 Feb 2024 17:39:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:80c0::/29 maxlen: 32
2a13:9240::/29 maxlen: 32
2a13:92c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 22 May 2024 11:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:66:ec:64:95:77:a4:6e:ee:ef:26:b2:06:99:e8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Feb 12 17:39:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=feaf89eef79fc0630d2d0afb98b0d51db24a4d42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:af:c9:f6:70:0b:ac:10:49:60:34:28:ed:
ee:4d:84:82:6a:dc:22:23:5b:fd:0e:35:d3:ee:b0:
db:5f:ed:c5:50:0c:b4:17:47:15:40:3c:17:66:72:
c1:c9:dd:3e:b6:9d:82:9f:b6:f1:5d:2c:71:d2:ff:
65:30:33:c1:8a:bb:10:38:08:ad:22:5f:50:07:5f:
b8:57:f3:99:cd:cd:04:d5:f1:92:64:da:3f:fd:73:
a9:51:b8:b7:91:c4:f4:23:14:ec:4e:d8:91:21:5f:
8e:cd:ab:c5:1a:e3:80:71:81:2a:69:ea:24:78:66:
b5:da:3b:a1:2e:4f:0b:52:3c:e3:32:51:39:4a:81:
94:73:06:8a:2c:b6:d8:f4:87:f3:a8:90:58:fb:16:
97:e5:1b:96:65:0b:5d:31:b4:af:c7:e4:90:60:88:
b2:a4:4a:6b:36:0c:5a:c5:6f:a6:c9:ac:57:a7:6b:
00:70:f2:dd:6a:8b:33:50:00:2c:26:d5:f0:b6:8a:
34:61:76:99:75:ba:2a:7f:ae:e5:b0:ec:b2:d3:87:
70:6a:1b:d7:a4:e1:69:02:37:83:8b:6f:41:6d:32:
18:51:90:7d:63:63:7d:03:0e:2c:27:9e:ff:62:67:
c9:4b:53:85:9c:59:a5:47:b5:e3:e7:b8:cd:43:28:
ed:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:89:EE:F7:9F:C0:63:0D:2D:0A:FB:98:B0:D5:1D:B2:4A:4D:42
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_q-J7vefwGMNLQr7mLDVHbJKTUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:80c0::/29
2a13:9240::/29
2a13:92c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:1c:1d:d5:2e:3f:dc:a4:4c:4e:0f:3e:22:4e:77:e1:74:26:
3f:f9:2e:79:18:44:a4:5d:e5:87:73:e9:3e:e7:e4:4f:44:83:
a8:5a:4f:5b:88:f6:f8:99:35:6b:1a:f2:24:61:dc:4a:e1:86:
67:af:23:14:2d:84:b5:24:6d:2f:1f:fd:4d:5a:ea:a5:ec:ff:
34:80:79:a0:61:b5:30:37:b3:38:b4:32:ba:17:b2:f9:d6:a2:
40:50:5f:ce:3a:dd:6d:69:54:6d:b6:f0:7d:5e:2e:d6:d6:1e:
28:51:77:2b:f5:e2:85:25:ba:7f:cf:24:29:35:de:9b:cc:fc:
60:cf:87:da:0e:31:21:0c:63:94:87:d6:a8:ca:20:f5:c4:2d:
ce:d7:a7:3f:20:4f:1c:ae:5e:77:30:06:fe:b1:79:8c:20:46:
99:4c:44:5f:8e:53:cb:c8:5d:96:33:07:9f:14:25:ce:9d:1e:
2b:2f:5f:84:ef:e0:f1:7c:cf:db:af:39:82:da:ac:2e:d7:97:
cd:07:d2:d1:2c:e1:c6:25:c4:e2:f8:ac:9c:a9:50:4e:10:f7:
4d:ee:c8:5c:c6:64:ed:90:b8:4d:68:c4:26:35:27:e9:e3:88:
db:50:65:69:58:2f:1d:2f:93:89:af:07:39:27:c3:94:1c:a4:
99:be:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 15:21:15 2024 by rpki-client on console-ams.rpki-client.org