Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/EbPGc3fPN-Irbp2lk1wiUomSnRo.roa
File: EbPGc3fPN-Irbp2lk1wiUomSnRo.roa (raw, json)
Hash identifier: slEIop5b2I8yCFhbPFTCi2aJl8bWRrVpSkOUoYFJCOQ=
Subject key identifier: 11:B3:C6:73:77:CF:37:E2:2B:6E:9D:A5:93:5C:22:52:89:92:9D:1A
Certificate issuer: /CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Certificate serial: 018ADD766BF90B73F8E9F055C3BC6ABEA27F
Authority key identifier: 14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/EbPGc3fPN-Irbp2lk1wiUomSnRo.roa
Signing time: Thu 28 Sep 2023 20:24:00 +0000
ROA not before: Thu 28 Sep 2023 20:24:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200203
IP address blocks: 2a13:d800:1000::/36 maxlen: 36
2a13:d800:2000::/36 maxlen: 36
2a13:d800:3000::/36 maxlen: 36
2a13:d800::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:dd:76:6b:f9:0b:73:f8:e9:f0:55:c3:bc:6a:be:a2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14a63359e84e00c0f9e2a203ead2781a26d904e6
Validity
Not Before: Sep 28 20:24:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11b3c67377cf37e22b6e9da5935c225289929d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:2f:aa:aa:ff:c1:60:72:65:b3:be:92:13:
13:ae:91:58:fa:a2:a8:3b:84:3b:70:0e:6b:47:0e:
21:1f:d6:74:d5:99:de:c5:f1:fc:3b:57:f2:7a:84:
d7:a7:87:fe:dc:08:b2:fe:31:e9:cd:bd:39:6b:c9:
dd:b8:b9:96:04:2c:0f:96:08:1d:6f:ea:5d:3b:18:
a1:2d:94:ab:1d:65:c6:1b:23:85:17:8a:89:01:93:
ad:ee:59:fd:91:fe:20:bc:1a:81:57:98:2d:73:a0:
b9:1e:a6:24:df:79:20:6a:9d:f3:9a:5f:0b:8e:c1:
df:2a:ba:1f:95:c6:a8:90:2d:b0:5d:75:9f:b8:6f:
24:fe:40:96:e2:34:f3:8e:c4:0e:00:c5:c3:27:06:
dc:93:58:e7:fc:ea:d7:1a:ea:99:fc:34:37:cb:f2:
44:1e:27:11:0e:64:2e:d9:30:9d:f7:41:3c:78:a5:
4a:a3:57:33:ff:c0:c1:44:77:7c:c2:5c:24:28:1c:
76:70:13:bb:76:10:0e:db:f7:e6:05:08:e3:04:ba:
ec:f8:a6:fd:f3:ab:bd:9a:39:75:12:60:1a:f6:81:
8e:e7:a9:dc:be:cc:af:d1:9a:01:a6:b6:79:7a:79:
c3:d6:d6:2f:70:31:b0:dc:84:06:96:a0:bc:98:07:
33:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B3:C6:73:77:CF:37:E2:2B:6E:9D:A5:93:5C:22:52:89:92:9D:1A
X509v3 Authority Key Identifier:
keyid:14:A6:33:59:E8:4E:00:C0:F9:E2:A2:03:EA:D2:78:1A:26:D9:04:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKYzWehOAMD54qID6tJ4GibZBOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/EbPGc3fPN-Irbp2lk1wiUomSnRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1b6b21-5eb2-4bf8-b55d-9f171597ae78/1/FKYzWehOAMD54qID6tJ4GibZBOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d800::/32
Signature Algorithm: sha256WithRSAEncryption
56:15:ec:26:45:c4:1f:4b:f7:ca:df:dd:b3:17:30:c3:bf:b0:
48:33:94:36:4d:59:05:fd:58:0f:e1:a7:c2:a2:86:2d:29:6a:
5a:71:d8:be:6b:3a:d4:2c:68:62:6a:f5:a6:c4:69:91:a0:8d:
43:06:ea:c4:44:66:cd:43:6a:6f:d7:af:bb:fd:9b:d5:00:11:
a0:f2:eb:5d:b8:f5:f0:0f:31:fd:4c:cc:b0:9f:4d:54:25:48:
c0:ba:91:6b:f6:5d:57:50:c2:0a:af:3e:f5:5d:71:9c:f2:b9:
3e:11:e0:8b:88:30:41:a2:e6:34:39:6c:59:85:76:6c:ca:a8:
ef:d1:ea:79:27:1e:2e:e8:3f:9d:a8:12:b5:66:9d:56:f3:6c:
00:b9:70:1f:12:99:f5:10:f9:87:b5:dd:4e:90:99:35:99:a5:
e4:b4:93:4a:0f:70:a0:f0:67:56:67:d4:23:89:a5:3b:89:35:
f2:d6:e1:a9:f1:51:c2:1e:1c:56:fe:05:1f:03:07:8c:09:13:
1c:cb:de:d0:40:f9:06:0b:e7:fb:4e:b6:b4:46:94:19:24:00:
9c:a2:de:19:96:d2:31:84:1e:65:45:b1:c1:49:90:9a:b6:3a:
7f:9c:a8:5a:04:77:2c:fe:5e:54:76:e2:44:8e:da:9b:ca:b2:
8e:22:91:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:35 2024 by rpki-client on console-ams.rpki-client.org