Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/q11xOm0KIHX1UgJJO2xE_bZAXcA.roa
File: q11xOm0KIHX1UgJJO2xE_bZAXcA.roa (raw, json)
Hash identifier: Js/g54HEVZ+EmmDXA3mX1Jbu8vnszJPGTkqPTD9P+Hs=
Subject key identifier: AB:5D:71:3A:6D:0A:20:75:F5:52:02:49:3B:6C:44:FD:B6:40:5D:C0
Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial: 0189FEA3F2FDDC95C0850B9108DAE960EB9A
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/q11xOm0KIHX1UgJJO2xE_bZAXcA.roa
Signing time: Wed 16 Aug 2023 13:58:24 +0000
ROA not before: Wed 16 Aug 2023 13:58:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203496
IP address blocks: 2a13:a207:fff0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fe:a3:f2:fd:dc:95:c0:85:0b:91:08:da:e9:60:eb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Validity
Not Before: Aug 16 13:58:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab5d713a6d0a2075f55202493b6c44fdb6405dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1b:09:49:5d:77:3a:42:8c:fd:5b:e8:9d:f2:
b6:b4:03:6f:7f:30:d4:0c:28:47:29:8f:e3:2b:e9:
2e:3e:fe:20:49:46:88:33:54:b3:16:56:61:fc:eb:
54:e8:cd:37:7e:15:71:3a:ef:e7:9b:bd:7f:11:da:
ef:81:08:3a:a2:30:9f:01:46:c6:f0:4d:38:6f:e5:
bc:a6:a9:ce:95:ef:4f:63:24:20:2b:de:2f:9f:4a:
2a:42:22:77:fc:aa:39:5c:68:31:c1:f5:9d:99:7c:
f1:fd:37:80:92:19:59:3e:94:5a:17:f6:14:29:9f:
87:bf:98:c3:ad:9f:ad:9d:4a:f3:46:94:81:b4:9e:
f9:62:17:2e:36:38:95:6d:2a:18:7b:f8:e9:10:5a:
a5:4e:10:91:4d:a3:2f:df:ba:ab:19:3e:00:ca:3e:
0e:a9:cc:fe:fc:bc:eb:f8:52:f0:4d:d2:f8:cd:c9:
5f:02:34:9c:ae:e8:70:4a:be:c4:29:a0:26:19:a8:
32:8f:6d:59:c4:2a:fa:85:ce:89:5c:b0:6c:08:44:
43:03:1c:bd:7f:b7:c7:19:76:0a:cf:8f:c7:dd:59:
e9:01:5e:ca:d9:7e:c6:98:fe:ae:91:1d:78:b7:0a:
fb:73:0f:ec:97:d8:7b:a6:74:87:e9:b7:7a:a8:63:
73:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:71:3A:6D:0A:20:75:F5:52:02:49:3B:6C:44:FD:B6:40:5D:C0
X509v3 Authority Key Identifier:
keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/q11xOm0KIHX1UgJJO2xE_bZAXcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a207:fff0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:21:80:79:3d:5e:70:10:b8:22:bc:99:57:b8:67:ea:90:31:
11:c3:2f:79:bd:2e:01:f4:89:fb:4c:f6:5f:13:86:39:64:a8:
38:26:ba:9e:5d:24:0e:c2:b9:d0:f4:42:5e:f4:8c:11:29:9b:
17:ab:fb:65:65:51:af:14:8a:c0:28:70:01:b8:95:8d:f5:31:
7b:66:6b:c5:73:96:2c:3b:59:81:8e:58:85:e3:65:bc:f8:18:
d6:35:e2:e4:0f:03:bb:a7:33:4b:7b:c4:c0:7b:d0:0f:c4:e0:
f3:89:36:9c:6b:2a:c5:1b:08:20:c7:6a:2f:37:5f:f8:09:53:
c6:20:9d:17:25:f0:00:95:3f:31:b0:d1:a2:79:1b:94:ed:3b:
3a:b2:9c:77:59:67:28:3c:f2:3e:96:14:00:d1:78:6a:fd:70:
5c:51:4f:76:72:97:31:e0:5f:00:38:5d:ff:73:30:26:f7:12:
82:27:84:86:b2:77:93:24:83:4f:01:91:13:c9:12:b7:53:2c:
66:60:51:b3:a7:dd:4b:df:b2:ae:65:17:07:38:cf:96:e7:14:
08:7c:6b:db:9b:d5:32:1c:61:e2:bb:79:e2:f9:bc:9d:36:b4:
a4:a0:b6:73:a8:ec:d8:5e:9a:24:8a:f0:0c:5a:f0:6a:1c:b9:
c1:cd:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:32 2024 by rpki-client on console-ams.rpki-client.org