Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa
File: FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa (raw, json)
Hash identifier: BwEuOKWB4w5t2H5W/RsPrdjL9S9onWpR434ef0LLXUo=
Subject key identifier: 16:D8:0C:99:C0:26:A7:82:22:02:59:23:A5:34:FB:CB:BA:E5:43:44
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 018CC2DB3DBA7A4BBB766788C25ADA44AE94
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202361
IP address blocks: 2a13:40::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 13:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:ba:7a:4b:bb:76:67:88:c2:5a:da:44:ae:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16d80c99c026a78222025923a534fbcbbae54344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2d:e0:7c:b8:f6:d5:e6:64:df:c4:11:ec:f1:
84:d2:5a:03:b5:71:61:d6:a3:cf:b2:34:02:cb:50:
8f:56:ab:9b:26:c5:09:85:91:09:d9:0d:66:55:b1:
ed:2c:60:18:0c:0e:f7:ee:10:67:89:a5:8c:34:b3:
ed:eb:3c:d3:0d:e2:03:8c:3a:64:f3:05:31:94:3e:
7b:7c:cf:88:0b:84:4e:f0:3b:b2:8e:46:26:a9:82:
8a:db:41:9d:df:25:db:4b:55:05:73:8d:84:ae:cf:
48:71:fc:ab:35:00:24:87:74:f5:ef:e5:f2:5b:db:
57:3a:c4:bc:ff:76:fa:31:46:f7:2c:a5:27:ab:ad:
ae:a4:88:3a:40:df:20:e4:fc:26:d0:43:1c:78:4b:
2a:c0:f1:c8:cc:68:a6:dc:d9:06:37:a8:3f:9b:eb:
d5:e2:1e:d3:05:be:98:68:3d:96:3c:60:d8:18:75:
b8:24:71:16:a2:a1:d3:e3:b7:ef:7e:d2:28:7e:17:
cd:e4:d5:a8:72:cc:a3:a2:d5:e0:2c:9c:0d:24:72:
64:e7:9f:d3:1e:ca:d1:39:42:03:6c:73:4b:99:59:
b8:7b:80:c0:4a:4c:e2:5f:12:15:20:33:34:33:0b:
3c:df:fd:78:6b:eb:a9:8c:d0:11:9d:93:cc:02:e8:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D8:0C:99:C0:26:A7:82:22:02:59:23:A5:34:FB:CB:BA:E5:43:44
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/FtgMmcAmp4IiAlkjpTT7y7rlQ0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:40::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f4:1a:d7:ec:9c:d7:f1:b1:7f:1c:1f:59:94:74:27:90:ea:
47:26:c9:8b:33:4e:68:8d:4c:02:16:79:df:7b:b9:b1:f4:7c:
c6:37:fd:62:c1:d3:fb:78:e6:27:8c:29:3e:f0:cc:87:c2:a6:
92:10:63:a4:b9:b4:b1:41:dd:94:65:fe:a0:c8:97:97:10:8f:
c2:00:00:0b:bc:43:1a:c5:21:dd:13:0b:42:46:93:52:53:3d:
a8:d0:6b:76:1b:40:be:d6:3e:7b:3e:f5:ca:a1:8d:6c:aa:64:
5b:4b:ae:7a:b8:e4:07:0e:e0:34:11:a6:d0:fc:e5:1d:b1:cc:
c7:24:01:32:96:78:ae:bf:d3:e1:f9:da:f1:53:bb:ad:8c:35:
3a:e9:f2:dd:2d:f4:b6:b8:1c:ef:ac:dc:43:5b:0e:39:d9:21:
c0:98:17:32:e3:a2:37:41:4b:78:49:21:82:69:9f:37:59:d4:
23:cc:2a:e3:5b:53:59:a4:95:22:ab:e8:0e:90:2c:25:11:b8:
71:23:09:55:8c:16:86:de:26:1d:a7:42:f1:39:8e:59:65:4e:
8a:c5:47:b3:ec:15:89:aa:af:0e:be:ef:ae:7e:40:49:a6:8c:
33:39:d3:e5:9a:48:17:fa:b0:01:18:d9:3b:5e:7f:eb:52:8b:
fc:37:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:58 2025 by rpki-client