Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/9dZBhq73JhQwDEz0I9BCPDvnGk4.roa
File: 9dZBhq73JhQwDEz0I9BCPDvnGk4.roa (raw, json)
Hash identifier: SnDSIQoaV6EnXoAv2mMZ4FqrxXXjLVA20lrN0ew3QvE=
Subject key identifier: F5:D6:41:86:AE:F7:26:14:30:0C:4C:F4:23:D0:42:3C:3B:E7:1A:4E
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 01856F2FF49AE3818B5A6FD6667E74E3428F
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/9dZBhq73JhQwDEz0I9BCPDvnGk4.roa
Signing time: Sun 01 Jan 2023 21:14:51 +0000
ROA not before: Sun 01 Jan 2023 21:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5391
IP address blocks: 2a13:16c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Feb 2023 07:33:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f4:9a:e3:81:8b:5a:6f:d6:66:7e:74:e3:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Jan 1 21:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5d64186aef72614300c4cf423d0423c3be71a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:7b:f0:7b:a7:d1:ae:c6:68:82:32:67:ed:
1d:2a:14:68:a4:d5:ae:32:1b:13:bd:05:dd:f8:29:
e3:a7:71:72:ab:49:03:32:a0:d9:45:ef:67:b1:fa:
2e:8f:ef:d0:31:3d:bc:82:a7:75:a9:5c:03:54:98:
dc:7e:8b:97:7f:8f:01:0a:d3:4f:d6:66:fc:9d:16:
05:1d:e0:00:bf:38:0b:d5:98:1d:d3:0e:f3:5c:ee:
b6:33:43:53:a8:f0:47:e0:5d:9c:1c:7f:27:bb:37:
e0:7e:05:9a:87:9a:4b:92:ec:19:ac:d1:b7:f1:26:
a4:7b:b5:ae:15:08:ce:5e:f6:cd:c6:d0:a9:92:66:
0e:38:d4:0b:15:f4:3f:15:38:95:be:22:46:52:5d:
72:f8:91:cc:11:1d:bd:b9:12:85:39:9b:7b:0b:9b:
ea:e9:60:73:46:50:a0:88:83:34:e0:01:ec:f2:e6:
11:43:2e:07:b2:4e:5a:1b:c6:04:a2:9d:4a:8a:c5:
4f:f6:cd:93:fa:29:e5:06:73:6a:45:0a:38:61:e0:
28:c2:ef:2f:72:75:cc:95:48:df:bf:30:af:72:1a:
4c:db:8f:5d:6d:58:1a:11:44:15:be:2f:3c:05:fd:
68:36:1e:60:e9:da:ca:ba:d0:45:87:aa:b5:ef:02:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:41:86:AE:F7:26:14:30:0C:4C:F4:23:D0:42:3C:3B:E7:1A:4E
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/9dZBhq73JhQwDEz0I9BCPDvnGk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:16c0::/29
Signature Algorithm: sha256WithRSAEncryption
2c:59:c9:54:83:6c:46:65:b0:60:85:ea:c3:96:5f:de:52:61:
36:a8:e1:f5:a1:27:8b:0a:2b:3c:75:a2:37:d7:f8:65:18:ca:
4e:f7:e0:c1:cc:10:a1:8b:e8:1d:ed:4b:dd:45:90:cb:0a:fe:
dd:5d:0e:7f:23:d5:67:b7:73:fe:6b:06:65:b5:25:3a:00:7e:
25:a7:14:22:27:97:c4:9a:e6:e1:51:45:f6:86:db:24:97:ec:
bb:82:ee:6b:f7:4d:49:6c:33:32:51:7e:90:08:71:a3:2b:e5:
84:1c:9c:a6:a0:9a:53:3f:31:89:5c:2f:e7:5c:b5:48:49:2f:
8f:7f:2c:ad:c2:d1:e4:45:c2:b4:f0:11:08:b2:97:31:c8:b1:
62:ac:1c:78:04:73:a6:f0:40:a2:66:75:84:0c:25:68:1d:d3:
95:90:32:d8:ec:c5:fd:f9:e8:b3:9f:04:91:8a:47:2e:48:b0:
52:0c:f6:91:3a:53:a0:c1:17:f0:19:07:9f:41:8a:86:df:6f:
8e:22:b3:15:ea:20:ea:51:8f:08:83:f4:b4:36:81:ff:2d:5b:
ee:63:03:61:8b:45:13:c7:d5:01:1f:13:7e:47:2e:69:6b:fb:
06:cf:0c:e2:f6:d5:aa:6e:83:ed:02:9c:15:f3:71:42:02:0e:
5e:b2:fc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:20 2024 by rpki-client on console-fra.rpki-client.org