Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/Cd67VSNj6XrcUA-qhFeSwTAomeM.roa
File: Cd67VSNj6XrcUA-qhFeSwTAomeM.roa (raw, json)
Hash identifier: a9dYyXdD4vsyTzUas40znuDYrGkJbtgi5Amrtcy77GQ=
Subject key identifier: 09:DE:BB:55:23:63:E9:7A:DC:50:0F:AA:84:57:92:C1:30:28:99:E3
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 018A26FD77CFCB909814C4F2A8AB32432DA7
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/Cd67VSNj6XrcUA-qhFeSwTAomeM.roa
Signing time: Thu 24 Aug 2023 10:00:59 +0000
ROA not before: Thu 24 Aug 2023 10:00:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 2a13:9e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:fd:77:cf:cb:90:98:14:c4:f2:a8:ab:32:43:2d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Aug 24 10:00:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09debb552363e97adc500faa845792c1302899e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:ba:03:66:10:c1:10:c1:a2:36:73:d3:ad:
c5:c5:f5:a8:75:d8:5a:bd:cb:49:29:82:c3:8a:3b:
c8:c4:05:8f:95:1d:54:06:bd:87:7c:20:22:d5:0a:
48:d7:88:39:4e:74:80:c3:62:29:4e:49:78:b7:14:
5f:24:39:77:b6:b2:76:fd:a6:f1:7e:ee:6f:c8:59:
5f:10:ad:4e:a0:c6:ca:cc:ed:12:62:08:1f:c5:a8:
de:e1:29:28:51:57:9d:c7:3c:58:f1:83:54:1c:ed:
30:fe:d3:bd:b6:5c:6d:d3:38:c7:6b:a6:60:6d:0d:
49:95:b4:0c:78:5f:fa:31:54:14:f7:47:74:a2:dc:
0a:cf:ea:11:78:33:c4:cf:6a:90:8d:b6:ec:7c:65:
0f:07:21:25:61:f0:31:ea:f8:40:e5:fb:20:71:7f:
30:f4:39:1b:15:84:a3:39:24:c1:8e:8f:93:ba:d8:
db:67:2a:d4:a6:3d:2d:2f:31:c6:44:59:c4:6f:48:
9d:84:71:51:59:79:b6:24:cc:6b:9c:b2:b5:c2:ba:
6b:d6:4a:a0:40:ff:c6:86:50:23:e3:30:23:19:e0:
db:2f:4e:96:ce:fd:f8:70:06:fc:b3:20:62:be:83:
d7:f0:62:9c:b2:45:95:42:50:9b:2b:8c:5c:80:b5:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DE:BB:55:23:63:E9:7A:DC:50:0F:AA:84:57:92:C1:30:28:99:E3
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/Cd67VSNj6XrcUA-qhFeSwTAomeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
99:c3:e2:2a:86:2d:27:58:8d:79:6f:e5:af:aa:77:94:4d:d2:
28:45:f9:50:cc:e5:db:36:72:0d:af:76:6b:7a:ce:c9:93:2c:
fe:16:2e:9c:1e:ef:4a:91:f4:89:32:4b:8a:87:1c:57:99:80:
9e:16:a3:b2:b2:24:7a:24:9d:f6:03:7a:df:8c:d2:04:f5:88:
5c:42:be:ed:39:38:a5:df:12:c2:cb:58:c5:72:98:c3:34:3d:
2c:85:be:45:ad:05:0a:16:91:80:72:47:82:ea:ff:73:e7:9f:
d4:48:b8:74:24:90:d0:c3:dd:80:d5:54:99:12:4c:09:04:44:
82:55:97:4b:f4:68:ac:dc:65:25:b1:a8:09:2b:be:fc:13:b5:
92:ae:80:42:ca:9b:fe:5f:3a:95:aa:97:f2:cc:d7:80:fb:85:
6c:86:46:0a:47:7f:87:41:27:9b:cf:fc:ab:ac:8c:27:05:43:
b1:70:3c:55:a9:63:22:c3:ca:83:8d:f6:b4:74:13:df:cd:6c:
84:39:35:bc:94:92:81:c3:35:4e:83:34:6d:c5:2f:52:34:d5:
a8:de:65:5b:4f:3e:57:3d:7f:91:c6:97:81:bf:20:99:3b:c2:
68:2a:eb:46:1b:21:e0:33:d9:41:d9:7b:fb:ce:a7:de:a8:f3:
ad:4f:17:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:43 2024 by rpki-client on console-fra.rpki-client.org