Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oYvz61n-ao8FEw6YuHYD1RX3jxg.roa
File: oYvz61n-ao8FEw6YuHYD1RX3jxg.roa (raw, json)
Hash identifier: bFmCpRV1zkU/2vFH4RpBSqImtlzqINGCng0wwsz4SKM=
Subject key identifier: A1:8B:F3:EB:59:FE:6A:8F:05:13:0E:98:B8:76:03:D5:15:F7:8F:18
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0191B63E9EA1F6469EAB3D29A859CAC04022
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oYvz61n-ao8FEw6YuHYD1RX3jxg.roa
Signing time: Tue 03 Sep 2024 04:57:22 +0000
ROA not before: Tue 03 Sep 2024 04:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 2a13:8000::/29 maxlen: 29
2a13:c040::/29 maxlen: 29
2a13:c040::/30 maxlen: 30
Validation: Failed, certificate revoked on Sat 28 Sep 2024 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:3e:9e:a1:f6:46:9e:ab:3d:29:a8:59:ca:c0:40:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 3 04:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a18bf3eb59fe6a8f05130e98b87603d515f78f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:1c:fc:d0:a1:67:03:90:6c:d5:2d:71:3e:
f9:ff:4e:8e:94:ae:6e:5f:c3:d1:8f:3e:a0:1a:4b:
6a:68:15:df:f9:74:2a:d1:72:f0:d7:29:96:bc:94:
76:90:e6:91:c4:bf:c1:7e:b3:29:87:ef:3b:53:60:
01:4b:2f:5b:da:5c:49:b3:cd:6f:99:69:20:d4:e0:
c7:37:08:f4:cf:9e:ee:87:d1:d0:76:77:20:4f:7b:
89:b2:d2:52:3b:01:4a:33:b2:66:c6:57:31:06:e2:
df:2d:3d:bc:20:34:8e:07:8c:66:f1:49:c7:d6:9f:
5c:2e:ee:38:32:7d:1a:f9:29:21:74:7c:01:bd:41:
06:4f:04:e5:9e:d9:26:8d:4d:19:f9:74:fd:d6:61:
6c:e5:eb:1c:3c:33:d2:62:0f:69:ab:a4:f2:58:91:
3e:e6:19:4b:51:19:ed:24:4b:6f:55:bc:ce:78:33:
9f:6e:37:b4:8d:01:22:9e:d5:f9:71:5e:d8:a9:a8:
f9:84:6b:ac:e0:e1:1b:a1:0f:da:61:e9:73:c6:77:
b6:39:e1:28:3a:d4:1c:75:48:a9:6e:69:da:cf:ce:
1f:b7:55:6a:34:b5:f4:8f:c2:6a:96:46:20:c5:5d:
3b:85:d2:a6:4b:19:6d:ec:51:a5:a8:0c:47:e4:18:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:8B:F3:EB:59:FE:6A:8F:05:13:0E:98:B8:76:03:D5:15:F7:8F:18
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/oYvz61n-ao8FEw6YuHYD1RX3jxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8000::/29
2a13:c040::/29
Signature Algorithm: sha256WithRSAEncryption
12:fd:aa:ab:79:58:a4:0d:3f:e7:b3:88:92:87:5b:12:b0:90:
ae:91:e7:13:e0:ae:b8:ca:48:ff:2e:12:40:cc:b7:29:3f:40:
e3:b1:39:cc:50:49:e3:b3:1f:d7:30:c7:1b:79:9a:cc:94:0e:
b6:77:6e:f1:46:df:a6:49:b7:e0:b6:ea:09:70:6e:d9:66:64:
4d:86:73:de:d8:f5:64:2f:76:1f:d9:62:40:29:47:bd:20:33:
23:b3:d0:b1:a0:67:5a:f9:a1:f9:c8:23:82:a9:5f:5c:af:ac:
65:da:e4:a9:3d:71:87:58:3c:c7:f3:7f:00:12:db:7d:37:11:
fe:3f:3c:51:e7:1a:02:84:57:9b:c9:d7:f1:2d:ae:9b:58:e3:
ae:a1:37:c7:c4:5f:51:8c:5a:78:d4:65:0c:c7:f3:8c:48:bc:
ed:9b:bc:8f:79:17:f5:4e:83:48:53:34:b4:9c:a0:0d:6e:1b:
ed:8d:5e:99:a5:be:1f:6b:70:d1:ed:f1:9d:c3:5a:5f:e7:7a:
05:90:89:ec:64:af:81:f3:d7:4c:91:50:a3:20:ff:9e:6d:3a:
03:a1:70:12:b5:9a:86:c5:ff:0a:fb:01:48:79:b3:c0:3c:7b:
12:ad:ab:bd:83:39:54:f6:4e:2d:05:d1:91:d8:9a:3c:20:93:
69:fc:53:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 20:53:55 2024 by rpki-client on console-fra.rpki-client.org