Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/a63An4cXTR6r6HCsjs5Oshf1zfs.roa
File: a63An4cXTR6r6HCsjs5Oshf1zfs.roa (raw, json)
Hash identifier: arsM5rJUW5e9EGRwQ1WLk1kc+xi3NXIN4gbG8dPdP7M=
Subject key identifier: 6B:AD:C0:9F:87:17:4D:1E:AB:E8:70:AC:8E:CE:4E:B2:17:F5:CD:FB
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0187FA950E86129B72A2E5A0D532946B9A19
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/a63An4cXTR6r6HCsjs5Oshf1zfs.roa
Signing time: Mon 08 May 2023 08:58:05 +0000
ROA not before: Mon 08 May 2023 08:58:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203496
IP address blocks: 2a13:a207:fff0::/48 maxlen: 48
2a13:a207:fff0::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 16 Aug 2023 13:58:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:fa:95:0e:86:12:9b:72:a2:e5:a0:d5:32:94:6b:9a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: May 8 08:58:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6badc09f87174d1eabe870ac8ece4eb217f5cdfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a5:71:58:a9:51:7a:0f:5c:a8:2b:47:0a:5f:
c2:9c:07:69:76:b0:20:f4:04:ba:41:e0:1f:29:4f:
76:f5:cb:98:2e:4b:10:7d:d8:57:68:68:2f:06:a1:
b7:52:46:d4:8e:bf:65:8d:8d:26:34:3b:70:d7:18:
a7:81:57:4d:fe:6f:df:ba:20:f5:5f:a8:29:8e:6f:
00:c8:51:f6:2b:02:ac:21:6a:9e:4b:dd:93:74:6b:
04:41:b8:29:c9:ad:0c:5d:52:77:4c:bf:d2:3b:91:
be:6b:6c:44:98:0e:82:46:ce:34:47:65:ad:4e:59:
c4:b8:af:b9:07:3e:74:6b:fd:cc:0c:2c:8d:64:33:
7f:57:a4:61:da:0f:43:92:ac:c8:28:3e:b9:da:0f:
11:ad:90:7b:c5:36:e8:0e:20:92:e7:39:11:3c:8d:
46:42:04:73:68:a0:6c:59:c5:b2:67:f1:53:47:b6:
0b:3c:ab:27:4e:75:65:98:22:07:48:94:f1:15:14:
04:3f:8f:7d:f2:06:a2:4f:b9:96:f6:9f:a7:3a:d0:
a4:52:3b:21:57:ae:45:70:c5:d6:73:b4:f2:9f:06:
3d:32:a1:b7:54:ca:40:66:4d:e2:de:ef:ea:c0:41:
94:f9:5c:cd:95:99:b2:b8:e7:f5:b2:b0:e3:2d:bc:
42:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AD:C0:9F:87:17:4D:1E:AB:E8:70:AC:8E:CE:4E:B2:17:F5:CD:FB
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/a63An4cXTR6r6HCsjs5Oshf1zfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a207:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
64:f8:90:0f:e5:39:09:68:e5:f6:32:43:6b:8e:ca:d3:ad:bb:
e3:33:20:9b:c3:0c:a0:6c:40:dc:e6:38:d0:47:7b:d7:43:32:
8d:80:21:8b:23:93:ce:da:3b:85:d2:b3:c0:3b:3e:ea:59:e0:
04:7c:1e:49:c8:1f:77:55:ee:b0:dd:ee:a9:5a:21:f8:61:80:
49:db:e5:a2:d3:43:e2:78:fc:42:39:05:00:c4:92:e4:d7:38:
a5:fd:1f:de:f7:26:b9:0c:28:e1:5c:0c:ed:46:27:3f:51:c7:
ca:41:9b:f5:a8:c0:56:aa:27:97:11:4c:81:57:51:38:e6:5f:
34:e4:75:be:b4:5b:6b:bf:65:8c:e3:20:56:ce:72:b6:48:23:
97:08:3c:0e:2f:f6:37:a6:b4:2f:17:6a:c0:3a:cf:56:f1:18:
43:26:a2:39:be:8a:b6:f6:cb:36:b0:63:a0:5d:03:6d:7a:07:
f4:13:ea:89:61:b2:d3:3d:5e:a3:76:90:2c:6c:02:9c:cd:ff:
2e:d5:92:f3:b8:ff:54:22:ab:66:0f:63:c3:65:f9:23:5b:0c:
f1:cc:ea:4e:0a:92:bc:f7:7d:75:ac:2d:4c:70:e5:d6:82:5b:
79:15:2a:f6:c5:07:c0:e1:26:be:33:b5:26:ec:53:6b:17:b1:
28:15:75:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:32 2024 by rpki-client on console-ams.rpki-client.org