Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/ira2Wpf20FTDTRJ3khLuuetLido.roa
File: ira2Wpf20FTDTRJ3khLuuetLido.roa (raw, json)
Hash identifier: qGUeHqP+VIy4CkJtGh5TpxIrY2RX3vFPWc0sEx3Zwx4=
Subject key identifier: 8A:B6:B6:5A:97:F6:D0:54:C3:4D:12:77:92:12:EE:B9:EB:4B:89:DA
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 018E80043C5214D1D682D1DC62F90862BD21
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/ira2Wpf20FTDTRJ3khLuuetLido.roa
Signing time: Wed 27 Mar 2024 13:05:45 +0000
ROA not before: Wed 27 Mar 2024 13:05:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216211
IP address blocks: 2a13:edc0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:80:04:3c:52:14:d1:d6:82:d1:dc:62:f9:08:62:bd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Mar 27 13:05:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ab6b65a97f6d054c34d12779212eeb9eb4b89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:91:94:3c:53:9d:1d:ad:aa:b7:17:d7:8a:6d:
23:36:b1:d1:20:ef:6c:36:3a:57:ae:6e:38:6d:64:
72:ef:a3:b0:a5:d4:7a:52:42:95:bf:56:6f:cf:e9:
86:8a:76:cb:1f:d1:d8:e2:59:50:b7:e5:3b:92:27:
de:0e:04:95:29:53:06:9b:10:6d:ee:65:19:ca:96:
14:73:7e:76:5d:e8:f3:e8:70:5d:d5:90:b3:aa:5d:
66:80:b5:52:14:28:70:09:f7:01:35:ec:46:47:56:
29:93:47:eb:96:3f:72:c9:46:34:c5:0d:a4:cd:bb:
48:82:37:09:d0:2e:74:fd:40:ae:34:69:21:5c:59:
8f:0d:82:05:70:5b:04:3a:a7:30:34:9b:54:fb:94:
32:2c:68:06:78:08:0a:a9:d8:fb:22:42:ee:46:cc:
23:4b:1d:ac:8c:77:70:e7:03:a2:72:c8:92:75:fa:
6e:48:37:66:98:96:06:4a:74:ca:3c:f9:c5:f0:a7:
89:f6:77:15:4d:1c:3f:e7:be:fd:f1:b6:cc:4c:0c:
4d:c4:1c:bb:54:80:bf:35:5b:cb:42:29:71:dd:f1:
e0:a8:10:3d:45:2f:17:9f:ed:2e:18:1b:f1:dc:7f:
dd:88:f1:03:59:db:3f:5d:5b:c9:8d:d3:2f:da:1a:
50:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:B6:5A:97:F6:D0:54:C3:4D:12:77:92:12:EE:B9:EB:4B:89:DA
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/ira2Wpf20FTDTRJ3khLuuetLido.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:edc0:1::/48
Signature Algorithm: sha256WithRSAEncryption
13:07:31:06:2c:99:20:08:45:c4:43:52:59:f0:ed:74:b7:65:
6d:33:62:be:83:e4:1b:64:09:0f:93:5a:a1:9b:ab:9e:58:c7:
e4:10:ad:7e:ad:f4:3d:73:da:30:00:54:c9:47:03:63:2f:1b:
ad:e8:95:89:24:83:5e:67:65:2d:a2:96:eb:ea:44:1b:37:b9:
d5:22:37:d1:15:3c:dd:ab:1a:a7:87:f5:ff:74:2d:b9:42:c8:
2b:e9:c5:55:d6:c9:92:a1:61:bd:f3:b7:48:a5:54:2e:b1:bf:
75:e9:e6:f6:f8:5e:0b:66:7b:95:d6:74:6f:25:3f:ff:ca:b6:
0b:56:fc:8e:6a:75:7b:c1:52:8d:fd:29:c1:ac:60:66:f3:f1:
5e:66:e8:d7:7f:40:54:82:6c:74:17:ab:3b:7c:d0:7e:fc:b5:
cc:ea:65:bd:94:ad:01:79:ba:e6:88:78:71:bd:18:d4:94:a3:
5b:cf:f2:d7:ae:ad:75:f2:66:63:d9:d7:55:87:90:f5:24:c5:
52:2b:b3:57:5c:3f:52:96:62:3c:9e:d3:5e:a9:89:25:a7:eb:
f5:ac:ba:1a:92:aa:80:57:70:40:9c:11:af:64:00:32:d3:4b:
05:f9:3d:f1:0e:47:2f:16:1d:48:eb:3b:dc:b1:78:93:d2:96:
25:3b:b7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:31:37 2025 by rpki-client