Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/C2RdBHVtIfwJPPOG7Nc5U-wRhXQ.roa
File: C2RdBHVtIfwJPPOG7Nc5U-wRhXQ.roa (raw, json)
Hash identifier: Imk9sqHRr2miHoilj1759j1Bh6eKsAq69bngLfobogQ=
Subject key identifier: 0B:64:5D:04:75:6D:21:FC:09:3C:F3:86:EC:D7:39:53:EC:11:85:74
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018EB4BFD349490247022F4A50CACC088C5B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/C2RdBHVtIfwJPPOG7Nc5U-wRhXQ.roa
Signing time: Sat 06 Apr 2024 18:50:54 +0000
ROA not before: Sat 06 Apr 2024 18:50:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a13:ba81::/32 maxlen: 32
2a13:ba82::/32 maxlen: 32
2a13:ba83::/32 maxlen: 32
2a13:ba84::/32 maxlen: 32
2a13:ba85::/32 maxlen: 32
2a13:ba86::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Apr 2024 12:18:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:bf:d3:49:49:02:47:02:2f:4a:50:ca:cc:08:8c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Apr 6 18:50:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b645d04756d21fc093cf386ecd73953ec118574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:eb:07:c6:5c:46:54:cf:c7:20:55:d3:cb:11:
03:22:aa:74:a4:80:67:0e:e9:09:3c:12:0c:e6:eb:
d0:6b:20:4c:1d:0b:56:31:c7:90:b8:b1:e0:a3:9d:
0c:f0:9e:2a:86:cc:3c:70:e1:bc:11:81:db:bb:a0:
e9:99:61:f3:be:b1:d3:1b:72:4b:a9:a8:37:7d:bd:
94:75:1a:74:4d:24:41:44:6e:31:fd:cb:0c:3b:78:
e7:16:91:92:b8:3e:fc:c2:f6:58:8b:2c:60:2b:25:
1b:72:a5:df:68:fa:9f:22:96:04:53:4b:dd:2d:71:
ba:84:48:99:59:af:5c:1c:7c:36:1b:5e:1d:60:cd:
9f:b9:f8:39:a3:85:15:e9:7d:83:47:9a:ba:5f:32:
db:da:16:2a:56:ed:9a:2c:35:2a:9a:54:ac:45:36:
86:62:26:76:ce:27:4c:1a:48:f7:4a:f5:ef:84:ad:
38:19:74:b5:dc:84:44:1f:b1:22:e9:8e:d5:19:18:
3d:71:b9:6f:1d:af:7a:00:e0:51:55:80:d0:d3:f9:
de:2e:d5:63:48:30:b4:b9:61:94:b6:df:24:71:af:
c7:26:33:a4:4f:66:e7:3b:40:0c:a6:9c:44:81:8b:
f7:ca:2a:be:43:2a:4e:1f:71:c2:bf:58:67:8a:2f:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:64:5D:04:75:6D:21:FC:09:3C:F3:86:EC:D7:39:53:EC:11:85:74
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/C2RdBHVtIfwJPPOG7Nc5U-wRhXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ba81::-2a13:ba86:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:f9:17:03:3e:00:d3:df:28:18:56:b2:c2:b2:84:89:a0:7f:
72:04:ae:f9:b0:d8:f0:20:67:02:eb:d3:33:e0:87:52:89:6a:
2e:35:68:9f:a3:bc:d7:07:f3:6a:87:25:50:09:0e:30:90:e5:
e8:e5:f4:4b:3e:2e:8f:f1:72:fe:07:bb:0e:d4:7d:29:04:d1:
e6:7e:ee:e7:9a:9a:6b:61:3f:38:50:cf:3c:d2:85:f2:bc:be:
bc:24:7f:61:d3:b3:f8:7a:a0:8e:d7:cf:34:4a:72:03:bb:c3:
9d:f4:18:31:3d:47:9a:99:38:36:c3:76:a6:b2:5d:17:c8:be:
8a:6c:32:f5:1a:cb:d6:ec:e0:49:3e:45:46:e2:af:02:23:ab:
b8:9c:4d:d8:cc:17:a7:be:f1:f4:0f:d7:68:df:f1:0f:97:ac:
aa:58:48:cc:c5:9f:b7:7a:ed:35:64:c6:3f:39:fe:a9:00:73:
aa:fb:6c:1b:84:09:85:91:25:2b:a9:48:6c:e2:9d:7d:bf:7a:
c9:65:ea:8a:c4:5d:a5:fa:38:76:e8:7d:c1:bd:be:ac:75:3b:
62:e1:44:67:34:b3:22:7c:8f:7f:fa:7e:88:04:72:b7:c9:e8:
58:70:f3:8d:96:ac:f0:c2:81:6c:34:00:8b:8a:e3:75:65:64:
00:78:ad:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org