Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/rOT_4YoJdXhbR3vDA4tNywCGRYM.roa
File: rOT_4YoJdXhbR3vDA4tNywCGRYM.roa (raw, json)
Hash identifier: xulv7JW1Ui73UaRG0uTHq7kCpqOZOEZ4FWT6fww+H7U=
Subject key identifier: AC:E4:FF:E1:8A:09:75:78:5B:47:7B:C3:03:8B:4D:CB:00:86:45:83
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 018DA2350CE1BAE42CDC3E885B52AEAD57F6
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/rOT_4YoJdXhbR3vDA4tNywCGRYM.roa
Signing time: Tue 13 Feb 2024 11:23:22 +0000
ROA not before: Tue 13 Feb 2024 11:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60539
IP address blocks: 2a13:aac0::/29 maxlen: 48
Validation: Failed, certificate revoked on Sat 02 Mar 2024 17:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:35:0c:e1:ba:e4:2c:dc:3e:88:5b:52:ae:ad:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Feb 13 11:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ace4ffe18a0975785b477bc3038b4dcb00864583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c2:7b:b6:2b:70:68:04:5f:d4:33:ec:4d:ec:
21:47:ce:f1:61:ae:5d:f5:e3:6f:6a:7e:cc:10:1a:
a3:bb:b9:4d:8f:5e:20:74:ad:1f:fe:2e:2c:c7:b9:
05:d7:3b:13:12:9b:fb:51:06:36:18:44:05:4d:31:
28:90:fb:f4:29:dd:b6:be:7b:dd:36:57:1a:ab:2b:
c5:7d:67:31:4a:e8:88:c2:16:ef:54:33:ca:0e:1a:
dc:d8:9e:82:cb:25:48:d3:43:62:7c:4c:1a:ab:e9:
da:c5:48:30:fa:b6:7f:01:d7:9d:37:2c:0f:3a:2d:
ea:dc:b0:f7:57:11:09:dc:83:97:4e:3c:ec:b6:ea:
6e:47:cf:a4:fb:d8:b8:9e:67:29:9c:f9:67:45:a7:
1d:e2:6c:4c:36:2b:f3:da:f9:69:e7:9c:ee:28:ac:
87:f7:cc:d6:76:38:17:8c:3a:92:6f:24:e6:39:b7:
e5:43:86:2f:19:48:cb:d0:5a:f2:4a:ef:fe:62:92:
2b:94:73:1d:88:2d:3a:27:d1:97:99:b2:23:de:4d:
4c:0e:a0:1e:6a:ac:14:fb:86:25:74:7f:77:a6:3d:
a5:3e:1f:56:37:ed:7a:eb:a1:b3:e2:d9:03:ed:20:
2e:e7:31:58:11:bc:7e:b0:e4:2f:71:b4:98:c3:77:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E4:FF:E1:8A:09:75:78:5B:47:7B:C3:03:8B:4D:CB:00:86:45:83
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/rOT_4YoJdXhbR3vDA4tNywCGRYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:3d:d1:53:1a:bb:26:55:d6:7f:46:53:e3:d4:98:b7:18:df:
39:c7:10:f0:84:50:c9:4b:7f:cf:36:c0:2d:c6:8c:db:b7:b0:
32:cf:ee:31:0d:ec:1f:8d:c9:95:7e:16:79:b0:3a:4e:aa:2c:
b9:fa:5e:4a:09:02:56:64:5e:33:12:2a:dc:1b:5d:fe:89:ef:
f5:70:ee:36:bc:14:ac:19:b0:0d:1f:b2:74:58:19:a2:32:06:
d5:38:71:82:bf:21:94:e5:09:04:05:66:ef:cb:a0:f0:23:a3:
bc:8e:5b:86:1b:81:03:e6:4b:d2:09:f6:4f:7a:9e:b8:a4:09:
03:a2:98:83:06:6c:86:a4:11:64:56:51:58:d5:d2:44:6d:01:
d2:97:f8:66:04:42:27:a1:44:71:5f:c1:3c:0d:27:c9:8d:4d:
28:b4:d6:e0:9b:15:65:cd:01:ff:04:75:31:81:aa:7d:7d:db:
03:fb:d7:07:e7:68:a1:91:1e:f6:1b:11:86:15:80:ba:94:c3:
ad:c4:4a:46:bf:c7:d4:a5:c5:aa:c7:cd:1a:7d:37:7d:c0:27:
da:d4:fd:3a:ad:d8:06:7e:9a:83:af:ce:71:00:40:e8:71:02:
70:05:26:71:d6:a2:0c:23:ad:2a:10:75:43:ff:0e:d1:5a:29:
15:1d:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:21 2024 by rpki-client on console-fra.rpki-client.org