Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7hv8muR1P0DGgIj1FeLGo2_vT5k.roa
File: 7hv8muR1P0DGgIj1FeLGo2_vT5k.roa (raw, json)
Hash identifier: v7MIlHao89FNb3npX+pXb3MS7qI5OXI9uJ2I9tpbwlg=
Subject key identifier: EE:1B:FC:9A:E4:75:3F:40:C6:80:88:F5:15:E2:C6:A3:6F:EF:4F:99
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0191A9A0A40C2FC79D051F77E57001089429
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7hv8muR1P0DGgIj1FeLGo2_vT5k.roa
Signing time: Sat 31 Aug 2024 18:09:22 +0000
ROA not before: Sat 31 Aug 2024 18:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a13:c040::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 03 Sep 2024 04:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a9:a0:a4:0c:2f:c7:9d:05:1f:77:e5:70:01:08:94:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Aug 31 18:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee1bfc9ae4753f40c68088f515e2c6a36fef4f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:31:05:00:17:25:54:b0:b1:4c:c2:bd:b0:
88:b5:d1:c3:ef:42:11:7e:a4:fe:ea:7d:fb:37:65:
4d:b5:33:1b:da:9f:25:c9:27:c9:5e:d5:96:b4:a3:
f9:04:76:e1:db:17:7e:a1:88:e6:3c:56:62:d8:8b:
b6:74:a6:25:95:cd:01:b5:95:9d:01:f6:5f:14:d2:
61:30:4f:62:ca:ac:b8:46:b8:27:e6:77:b9:1e:f6:
51:89:72:f9:54:58:2a:cc:44:e2:de:23:41:26:8c:
fc:f0:bd:3b:26:60:85:b8:06:60:76:f8:ab:cb:60:
03:d5:59:cf:86:93:fe:45:88:38:96:a7:66:3d:5e:
8b:e7:6c:7a:45:97:ce:4b:f1:80:f8:68:d4:04:2c:
09:f3:63:73:61:8d:ac:a0:30:de:98:09:72:3f:d0:
79:fd:d2:27:22:98:b8:39:2b:fd:fc:34:8c:ce:7f:
49:62:c6:a2:60:57:61:b6:92:37:07:98:7b:f1:24:
83:8f:e3:54:11:82:3c:ee:82:bd:e9:93:95:c5:44:
25:ac:24:19:f3:b7:3d:6e:ca:bd:cf:09:4f:ad:66:
a1:a6:7a:de:ce:e3:8f:70:bd:8d:69:6c:b4:e3:2c:
94:54:72:1e:aa:87:85:0d:b6:44:50:95:70:83:f1:
9a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1B:FC:9A:E4:75:3F:40:C6:80:88:F5:15:E2:C6:A3:6F:EF:4F:99
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/7hv8muR1P0DGgIj1FeLGo2_vT5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c040::/29
2a14:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
6d:70:f6:d1:03:00:e6:9f:a0:c5:7a:b1:ba:e2:ee:5f:ce:c8:
29:6e:c8:31:9d:dc:cf:99:01:1e:65:a1:80:7e:7a:68:a2:a6:
12:78:1e:78:eb:cb:0a:dc:3f:ff:e8:85:54:97:85:85:f5:61:
cf:3c:d3:e4:69:e9:a1:12:26:98:f6:09:b4:4a:00:72:1f:64:
c0:8d:c5:9a:b0:ff:3a:bf:40:e2:36:45:63:3f:3a:22:f4:9a:
95:fb:e8:50:34:3f:36:b8:16:ce:9e:4e:a3:19:d1:46:06:99:
a7:11:e3:66:af:16:ba:a6:d5:00:8d:90:cc:7e:87:81:b7:3f:
ce:9b:76:3f:e3:86:ae:87:95:fa:89:2c:d5:70:d7:9f:0f:55:
5d:3d:78:be:4c:91:e1:1e:6a:cc:d7:0e:ea:09:11:50:36:41:
ce:be:79:53:d4:8f:86:eb:65:d5:2b:7b:7d:42:3c:85:7a:6f:
85:04:9b:7d:9f:0e:c7:f3:b6:4b:43:e9:33:aa:60:b3:35:54:
6f:89:a6:44:b8:42:3b:b1:77:ce:28:93:43:32:bb:51:6b:24:
76:f7:db:88:27:3d:65:32:e4:19:70:fd:1d:33:68:61:df:af:
2e:66:d2:0f:7a:6f:93:65:22:bc:c5:fc:aa:ec:01:08:c1:da:
a1:ef:d9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 06:30:31 2024 by rpki-client on console-ams.rpki-client.org