Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/H4pdKX4WEuTG1TZn6mqf9HBlAuY.roa
File: H4pdKX4WEuTG1TZn6mqf9HBlAuY.roa (raw, json)
Hash identifier: 9QBM8L8xMIcSjHQYnOkVf2wa2okVyHDFlESPJCbGz0k=
Subject key identifier: 1F:8A:5D:29:7E:16:12:E4:C6:D5:36:67:EA:6A:9F:F4:70:65:02:E6
Certificate issuer: /CN=e938f9182b7da44003591eeae2560f8451b3393a
Certificate serial: 018AA300244E7BE0D90F5DC0FE84E964B89C
Authority key identifier: E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/H4pdKX4WEuTG1TZn6mqf9HBlAuY.roa
Signing time: Sun 17 Sep 2023 11:56:50 +0000
ROA not before: Sun 17 Sep 2023 11:56:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207724
IP address blocks: 2a13:5ac0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a3:00:24:4e:7b:e0:d9:0f:5d:c0:fe:84:e9:64:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e938f9182b7da44003591eeae2560f8451b3393a
Validity
Not Before: Sep 17 11:56:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f8a5d297e1612e4c6d53667ea6a9ff4706502e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3e:0d:1d:49:36:86:0e:5c:19:14:0c:a9:8c:
ce:14:34:c7:aa:e8:34:07:9d:f1:bc:9d:49:ec:3a:
3e:df:4d:da:61:bc:37:69:0e:98:d5:c6:ae:c8:31:
35:42:af:48:bf:a9:55:13:3e:ae:d1:94:72:cc:a6:
67:c2:12:ec:39:b5:1a:a3:46:d0:be:71:81:f2:75:
31:d9:71:2f:dc:04:14:a9:af:fa:91:0d:c6:e7:75:
48:ce:58:64:86:bd:59:b3:0f:18:2a:29:06:81:1c:
09:19:23:87:fc:ee:24:39:b2:3e:b1:34:2a:b2:e8:
c2:66:b0:03:5b:82:91:bf:74:21:b0:9b:45:cb:48:
5b:e2:ae:bd:d2:73:7a:b0:bc:ba:d5:87:ba:a3:40:
88:4e:60:7c:7d:1a:06:68:57:75:e5:cb:42:7e:20:
ce:89:9d:b8:7b:4f:0e:73:e1:3a:cb:e1:25:0e:be:
e8:89:b6:94:2a:e0:1a:23:0b:7b:45:71:24:9d:04:
28:c0:10:e6:85:df:63:9e:59:e7:37:a1:33:64:b4:
c8:47:a0:02:ae:c8:75:fd:c7:a4:d0:ba:00:c7:ef:
e2:b8:03:29:28:d0:17:9c:00:d4:d3:2f:6c:f9:b3:
3f:5d:d2:b5:e8:19:6e:e8:54:3c:63:11:32:ba:91:
48:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8A:5D:29:7E:16:12:E4:C6:D5:36:67:EA:6A:9F:F4:70:65:02:E6
X509v3 Authority Key Identifier:
keyid:E9:38:F9:18:2B:7D:A4:40:03:59:1E:EA:E2:56:0F:84:51:B3:39:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Tj5GCt9pEADWR7q4lYPhFGzOTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/H4pdKX4WEuTG1TZn6mqf9HBlAuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ea9402-be4d-49f3-81fb-4df728c58d17/1/6Tj5GCt9pEADWR7q4lYPhFGzOTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5ac0:1::/48
Signature Algorithm: sha256WithRSAEncryption
70:57:5b:59:3b:c6:c9:a2:24:50:c7:ee:af:22:8a:6e:55:5e:
18:35:94:ad:54:e5:ba:73:d4:63:b2:e7:94:ab:30:7b:bd:46:
e5:b5:a0:8c:9b:ca:c2:a9:9b:8f:2f:e8:dd:c1:44:bf:06:2f:
8a:e9:10:2d:47:26:cd:c2:dd:0a:cf:f5:5a:d4:4e:28:57:fc:
06:3a:ef:ad:71:dd:d5:91:bd:2f:43:08:7a:4a:53:d6:e0:2d:
75:b6:4b:b1:56:6a:df:dd:33:c7:1d:cf:eb:5f:cb:94:a4:fe:
11:e3:d7:e1:7e:ec:fd:d9:9b:16:c8:4d:f7:1c:82:54:d0:ca:
46:48:39:02:98:d8:ff:68:69:7f:90:58:46:c9:88:80:ae:b1:
6e:f1:5f:d2:84:dc:a3:e8:4e:2f:d6:43:ae:86:3a:30:7f:c4:
07:1f:cc:cb:62:84:78:a4:f9:fb:b0:f1:a6:b9:d7:d6:52:66:
a6:a6:b8:39:ca:72:2d:8b:75:21:d4:cb:13:4f:c4:df:01:2c:
10:21:36:7c:31:d2:a5:cb:5f:02:77:95:61:e3:10:4b:c2:4f:
85:a4:c6:f6:fb:2f:ea:0e:08:6e:be:31:3e:d9:dc:58:03:a7:
ef:84:4e:55:d0:81:f8:3f:74:3b:d5:7f:43:cd:ee:9e:c1:67:
35:f7:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:09 2024 by rpki-client on console-fra.rpki-client.org