Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/wrG_Cb-iQfJHFxlwPytVPsW_auE.roa
File: wrG_Cb-iQfJHFxlwPytVPsW_auE.roa (raw, json)
Hash identifier: PNvSdeOuZ9E/0o2+JnntkgNX2HMyX7bpmjycorhCGGg=
Subject key identifier: C2:B1:BF:09:BF:A2:41:F2:47:17:19:70:3F:2B:55:3E:C5:BF:6A:E1
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 01892680A2C1CBF839C2BA56F959415E4E68
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/wrG_Cb-iQfJHFxlwPytVPsW_auE.roa
Signing time: Wed 05 Jul 2023 14:41:51 +0000
ROA not before: Wed 05 Jul 2023 14:41:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 2a13:9400::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:80:a2:c1:cb:f8:39:c2:ba:56:f9:59:41:5e:4e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Jul 5 14:41:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2b1bf09bfa241f2471719703f2b553ec5bf6ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:83:a9:b3:25:a1:46:00:9c:92:93:6f:9c:a6:
69:5d:97:ee:20:21:63:64:76:fd:72:09:93:60:45:
5e:a5:30:da:a1:ca:51:f0:14:53:29:72:da:a6:23:
2b:c8:b5:88:bb:26:44:02:bd:57:fe:14:25:d1:00:
7f:f7:f6:2d:2c:1b:42:bc:3c:7e:f4:3b:21:06:03:
56:6c:37:27:b2:df:4e:b3:3b:9c:f3:50:82:d2:53:
ca:9c:15:4a:0c:20:f7:08:ed:1a:7a:70:05:d1:4d:
f9:58:4b:e3:81:b9:de:3f:e2:8f:30:25:31:34:b4:
af:ab:45:d8:bf:6e:c3:09:a3:2d:b3:5d:68:0c:fb:
d1:b8:26:c3:46:d8:30:87:ee:22:d8:66:a7:fd:23:
f1:a5:c8:d7:3f:e0:5d:0c:d4:56:6c:d8:41:c7:5f:
fd:8c:2c:6f:8e:a9:a1:c7:3a:7a:3b:2e:8d:94:ee:
0e:69:d0:a1:e8:4e:05:c0:a4:93:c6:97:fd:86:06:
3c:77:5f:26:c0:35:99:51:79:4d:75:92:38:b6:c0:
15:67:00:cf:8c:2d:09:03:d5:9f:3c:55:50:49:5e:
37:1d:56:79:3c:5f:a2:2f:0c:b2:fc:b9:bc:8b:a0:
90:1e:a9:ea:33:36:24:41:84:a4:d8:64:02:2d:6d:
7a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B1:BF:09:BF:A2:41:F2:47:17:19:70:3F:2B:55:3E:C5:BF:6A:E1
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/wrG_Cb-iQfJHFxlwPytVPsW_auE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9400::/32
Signature Algorithm: sha256WithRSAEncryption
8e:8c:d3:3e:c7:eb:5c:f7:63:d2:21:3d:4a:65:04:ab:85:80:
50:09:88:b1:87:f6:1c:c7:99:92:b6:73:e5:57:1c:24:e7:63:
1e:d5:de:a1:35:d5:f1:65:46:59:0d:40:ae:76:0e:05:45:5e:
a7:5a:99:8d:86:6a:92:1e:f1:9f:2b:f7:04:9b:bc:34:5b:3f:
97:92:17:57:61:54:de:02:c3:4e:88:20:b5:81:4c:97:39:99:
ee:ce:54:b3:c1:0a:47:76:70:a4:b4:30:05:40:9b:8a:ff:47:
8a:69:08:9a:02:60:c6:0f:81:62:96:92:06:1c:24:aa:04:2a:
c1:2e:0a:bd:79:d9:09:4d:fb:9f:ef:9d:11:eb:3d:aa:ed:83:
dd:42:5f:12:98:ac:79:74:93:93:8b:5d:10:21:e2:78:a5:f4:
87:56:55:0d:c9:b8:71:90:d4:13:63:38:ba:6b:4d:fe:da:92:
e8:3a:33:a0:ec:8e:c1:67:d3:a4:21:9b:0f:ac:18:1e:37:98:
79:fc:9f:75:ac:41:8a:c3:5d:2e:88:5d:14:e0:59:c3:b8:78:
3c:a5:6a:70:4c:a2:ce:ce:da:0b:c0:a1:75:cd:a9:a9:31:d2:
af:8b:5b:19:a9:47:4e:07:37:78:a4:ea:79:b9:b6:10:64:83:
af:74:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:03 2024 by rpki-client on console-fra.rpki-client.org