Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/tKZLoLsfSEsIf7TB2HgO0yzx7Vo.roa
File: tKZLoLsfSEsIf7TB2HgO0yzx7Vo.roa (raw, json)
Hash identifier: p9CGmyIGfSbfJwt1yMW1HovtkvZNdI3jncU+waFlJaA=
Subject key identifier: B4:A6:4B:A0:BB:1F:48:4B:08:7F:B4:C1:D8:78:0E:D3:2C:F1:ED:5A
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0191AE8B7C30AA773EBDDC882C1E776BEF4D
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/tKZLoLsfSEsIf7TB2HgO0yzx7Vo.roa
Signing time: Sun 01 Sep 2024 17:04:22 +0000
ROA not before: Sun 01 Sep 2024 17:04:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 2a13:8000::/29 maxlen: 29
2a13:c040::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 03 Sep 2024 04:57:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ae:8b:7c:30:aa:77:3e:bd:dc:88:2c:1e:77:6b:ef:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Sep 1 17:04:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4a64ba0bb1f484b087fb4c1d8780ed32cf1ed5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6a:ba:71:21:19:00:b6:14:94:2f:2a:1b:be:
20:b6:18:ca:91:7d:18:d9:c4:10:bc:87:cb:4e:c4:
54:a7:8b:02:6e:5e:5e:94:24:2a:c6:79:61:7d:89:
09:ff:82:db:f5:62:76:cb:bd:3e:d0:2f:84:70:f7:
3b:4d:1d:bc:1c:d3:e2:c4:4c:4f:03:4a:60:af:3e:
19:e3:1a:7a:64:96:c7:d6:74:1a:49:3a:88:06:f9:
e6:a1:80:6d:74:0d:36:c6:3a:c1:71:e5:f2:9d:0a:
4b:57:85:19:8c:87:af:ff:33:f1:83:0b:ce:d9:4f:
a1:96:b0:d3:73:7a:31:7f:4c:6b:df:e0:de:bd:cd:
1e:7b:1a:1b:7f:01:87:b9:39:26:25:b1:d6:95:f8:
51:82:15:fb:b9:88:6d:2c:00:3e:ab:ef:0a:6f:2e:
92:69:24:9f:b3:74:08:d6:08:2f:f8:40:43:35:c5:
10:43:2f:f0:e3:93:4f:82:28:66:e8:35:cb:a4:ea:
5c:e9:13:e6:d0:11:72:a6:74:61:94:99:7c:b3:eb:
3b:00:3a:4b:d3:70:94:78:7a:b4:84:fb:0d:11:c3:
e8:aa:cf:e2:c3:2c:f8:9e:00:9a:9d:1e:d3:bc:65:
5e:c5:d9:d7:86:06:4f:1c:a6:13:08:b0:a3:e7:61:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A6:4B:A0:BB:1F:48:4B:08:7F:B4:C1:D8:78:0E:D3:2C:F1:ED:5A
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/tKZLoLsfSEsIf7TB2HgO0yzx7Vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8000::/29
2a13:c040::/30
Signature Algorithm: sha256WithRSAEncryption
61:88:35:22:8c:f0:70:d9:4e:74:fe:a8:f4:5d:5d:ea:ae:85:
64:66:65:03:5e:50:96:a5:ca:a3:34:03:7c:50:bb:33:41:62:
e0:85:e7:f5:66:22:91:04:6f:00:7b:b6:29:de:fb:4e:06:df:
1d:7c:f4:59:5b:00:f5:0b:27:6e:84:6b:96:16:40:27:c8:bd:
33:6b:e5:f1:82:f9:ea:41:e7:9e:e9:ce:6b:9f:a3:d3:8d:b3:
96:f9:79:8c:9a:36:8d:ce:45:45:df:41:1f:44:4f:66:35:68:
5f:71:e5:40:01:67:bc:30:05:13:72:09:cc:69:fd:c8:a4:08:
0b:c1:02:7f:b1:be:b4:31:85:94:63:51:83:c5:de:66:12:f0:
be:33:e0:09:75:19:cb:04:86:ae:ec:e9:b2:29:45:92:16:13:
48:1e:d6:96:2f:40:77:53:c0:ad:45:a0:55:5f:87:93:8d:22:
1b:75:66:ee:69:4f:36:88:bd:d5:97:c7:36:e3:2d:79:46:42:
84:ea:ed:34:fb:8a:9c:30:92:b0:13:2c:ac:67:cc:47:2c:fc:
89:aa:41:e3:8d:1b:23:45:66:ea:12:0e:f7:4a:1b:a5:25:01:
44:f2:b2:81:da:26:4e:49:14:23:51:07:0a:80:54:8a:ad:08:
27:17:c7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 05:44:53 2024 by rpki-client on console-fra.rpki-client.org