Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/13Q-8rxMPl8G0EjLtEFkHZgFdeQ.roa
File: 13Q-8rxMPl8G0EjLtEFkHZgFdeQ.roa (raw, json)
Hash identifier: F/kCEoG17lCpa9hHWsC5xcHjPVpmeqTINeKcwywSrIA=
Subject key identifier: D7:74:3E:F2:BC:4C:3E:5F:06:D0:48:CB:B4:41:64:1D:98:05:75:E4
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 01856F67046FC9B705140D827711BCD52530
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/13Q-8rxMPl8G0EjLtEFkHZgFdeQ.roa
Signing time: Sun 01 Jan 2023 22:15:00 +0000
ROA not before: Sun 01 Jan 2023 22:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201377
IP address blocks: 2001:67c:ae4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:04:6f:c9:b7:05:14:0d:82:77:11:bc:d5:25:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Jan 1 22:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7743ef2bc4c3e5f06d048cbb441641d980575e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:bf:54:ae:ee:7d:9c:b3:8a:34:a9:21:4d:
bb:f8:47:df:de:8e:c3:d0:45:bd:e0:9c:1e:80:d4:
99:bf:a0:47:ae:49:1c:1c:59:72:e0:d2:95:e8:87:
f1:74:d7:45:3a:a0:1b:7a:52:b1:0f:4e:51:c7:7a:
8b:4c:9b:99:13:42:ee:20:f7:e6:35:7b:ca:7f:97:
e5:be:6e:af:fa:e4:8c:e3:c8:1c:0c:9c:fd:8d:0a:
1e:a3:aa:d8:1a:03:27:26:de:7c:90:60:01:4b:6a:
52:7d:b8:e4:dc:e1:d3:d4:38:0a:9e:19:aa:1d:cb:
5c:16:84:26:46:94:6b:36:7a:8d:12:dd:25:37:6b:
8e:3f:ce:69:14:44:0e:ee:d9:0d:cc:b1:29:4d:c7:
44:fc:63:6d:60:aa:39:98:e6:39:bf:b1:be:52:11:
09:0b:0f:33:82:0a:11:6f:39:ae:1c:10:39:9c:ce:
7c:49:d5:9e:fc:f3:ae:89:64:91:cc:c5:d5:ef:81:
13:43:68:5f:08:51:83:0d:d6:6a:69:7b:d9:94:af:
49:ce:85:c8:8e:03:86:df:c5:fd:98:cf:cf:e5:07:
5e:a5:58:11:7e:88:0c:b6:bf:28:ee:e7:4a:b8:fc:
fe:e7:ae:84:27:7f:dc:a8:13:ea:fe:74:2e:fe:5a:
82:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:74:3E:F2:BC:4C:3E:5F:06:D0:48:CB:B4:41:64:1D:98:05:75:E4
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/13Q-8rxMPl8G0EjLtEFkHZgFdeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ae4::/48
Signature Algorithm: sha256WithRSAEncryption
06:47:42:22:eb:9b:89:d9:b8:54:57:0e:6e:2f:65:7d:7c:d0:
8b:cc:fc:cc:27:b6:3b:63:7c:c6:56:fb:ce:be:35:ad:1b:a9:
bd:a4:e6:85:15:8f:3b:f7:76:02:a9:a6:0c:c6:8f:41:04:ae:
05:82:0f:b1:d6:98:12:e9:a3:35:3a:85:94:ab:7d:a7:09:2d:
b3:f7:ef:26:e2:1f:ad:84:64:b7:7b:7c:b1:5e:19:a5:8b:ea:
fa:c4:ed:a9:5c:35:8a:66:92:e4:25:44:81:f9:62:83:4c:d3:
78:d4:7f:5c:18:90:71:91:d3:04:ad:64:14:92:df:f7:79:ef:
0b:dc:cd:88:0c:e1:dd:5f:13:05:ad:f8:ae:77:d2:56:5d:f4:
dc:a6:78:a4:75:84:e6:08:7a:b1:bf:46:61:dc:ff:19:f8:6c:
a5:e2:e7:7d:f2:28:48:f6:63:2c:cb:30:49:a3:3c:f4:10:e3:
ab:5c:67:52:a2:63:02:d7:22:c7:74:72:62:43:63:8e:ca:19:
ed:4a:56:aa:cc:54:29:d8:79:30:fe:9c:5d:3b:bc:bc:d6:01:
e4:82:0d:12:f4:ec:af:7a:17:2f:2b:71:d9:6a:99:c3:6a:90:
ad:71:e0:36:ee:ad:e6:e4:bb:3b:ed:ea:9d:7f:ad:8d:ea:c0:
34:5f:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:20 2024 by rpki-client on console-fra.rpki-client.org