Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/2b3iYQDjI5EehVrJd9r2dERywtE.roa
File: 2b3iYQDjI5EehVrJd9r2dERywtE.roa (raw, json)
Hash identifier: Wnr8X/6dlGKOI+FFeAEDmGMuGT4ZTugtyipne42Q08U=
Subject key identifier: D9:BD:E2:61:00:E3:23:91:1E:85:5A:C9:77:DA:F6:74:44:72:C2:D1
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 018CC56DF46EA2BDAC18A613BC780CE9E311
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/2b3iYQDjI5EehVrJd9r2dERywtE.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207724
IP address blocks: 2a13:5ac0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Aug 2024 18:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f4:6e:a2:bd:ac:18:a6:13:bc:78:0c:e9:e3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9bde26100e323911e855ac977daf6744472c2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c5:03:25:19:5d:81:d7:12:23:79:d0:9b:2a:
0f:ab:d9:cd:58:2f:ba:04:57:17:89:28:79:b0:bd:
af:f3:5c:2f:dc:c0:1d:f5:14:0f:75:55:c1:b2:7e:
64:73:f6:2c:b2:69:dd:c9:c4:69:0c:f7:14:b7:c3:
99:94:b9:18:ea:61:53:bf:d4:32:37:66:b6:8f:ff:
d9:48:3c:88:a2:ee:9b:21:f1:75:df:64:8a:16:d1:
15:73:eb:8b:17:a2:44:68:0a:3a:75:a8:3b:21:2c:
32:0c:eb:7b:b8:77:5b:4d:2a:23:86:c2:d2:90:b2:
bc:7f:44:71:c7:41:07:ad:d9:b9:be:80:5c:e9:31:
d4:a6:1d:4c:bc:b3:93:36:7c:9b:53:15:6a:94:43:
33:28:89:62:82:e1:50:53:e3:5c:c4:d2:5b:33:d2:
b6:22:27:56:d1:26:27:a8:49:b9:b8:6f:49:3c:06:
42:67:3e:49:ce:3e:f9:d7:05:72:e6:7c:d9:bb:05:
b2:d8:29:a6:58:ad:29:23:98:f6:a5:06:7f:50:ac:
ee:a1:e8:81:55:e8:c5:43:ac:3e:90:62:5b:c2:01:
85:f9:0a:22:84:4c:fe:71:70:8c:5b:17:58:ef:b3:
9c:46:7b:7d:e1:f6:dc:fa:58:a0:0b:66:9c:4f:fd:
40:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BD:E2:61:00:E3:23:91:1E:85:5A:C9:77:DA:F6:74:44:72:C2:D1
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/2b3iYQDjI5EehVrJd9r2dERywtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5ac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
a0:a5:ca:d5:fb:ce:ca:38:e2:0b:b0:d5:d0:08:4f:cb:00:b2:
d4:5f:bd:27:a5:35:92:41:b0:27:66:e4:6a:6f:c3:d0:ae:5b:
75:6a:af:ca:62:34:af:24:f9:3b:b9:0e:ca:c5:ea:e2:1c:af:
6b:69:d3:53:08:13:99:e6:2a:13:8f:1e:07:7f:9a:7f:72:e7:
b9:e1:12:46:cf:fd:5f:55:a1:bb:35:21:ec:30:52:b1:d1:14:
04:ba:20:13:e1:9e:cb:6e:ac:c1:3b:80:cd:cf:81:7f:3e:36:
5b:40:1e:cc:49:90:ea:94:39:48:c4:d4:1a:fd:cc:55:d0:02:
62:2f:c1:a8:fe:ca:58:de:6d:3e:ae:90:b0:89:68:c9:91:e3:
09:b3:c3:b9:00:af:c1:81:30:8a:9d:68:c2:df:34:18:08:54:
79:be:96:e7:1d:78:53:50:ca:c0:b2:79:55:01:c5:18:a9:4b:
86:53:99:80:b8:21:26:97:c9:4f:28:32:cd:b4:5a:59:61:bf:
94:1f:06:99:27:5d:a3:0e:d9:f7:2d:2d:91:a8:04:2f:9b:b7:
4e:99:f7:29:10:16:22:17:e1:81:68:b4:dd:59:54:7f:58:49:
dd:52:e3:59:c6:56:28:c6:e6:b1:c1:33:26:e5:eb:68:3a:ee:
b5:e2:b1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:22:10 2025 by rpki-client