Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/1-C_K6JXhpLctcQhUx-zw2ZP9Tgw.roa
File: 1-C_K6JXhpLctcQhUx-zw2ZP9Tgw.roa (raw, json)
Hash identifier: w00v5VXidpMGBVgjDWBoquIelp+9cPV9OUfORIAiyR8=
Subject key identifier: F8:2F:CA:E8:95:E1:A4:B7:2D:71:08:54:C7:EC:F0:D9:93:FD:4E:0C
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 018CC42517B1B2DF2B95AFBC98B16F5DDEEC
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/1-C_K6JXhpLctcQhUx-zw2ZP9Tgw.roa
Signing time: Mon 01 Jan 2024 08:30:14 +0000
ROA not before: Mon 01 Jan 2024 08:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:2c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 Feb 2024 10:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:17:b1:b2:df:2b:95:af:bc:98:b1:6f:5d:de:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82fcae895e1a4b72d710854c7ecf0d993fd4e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:54:b0:2b:87:3c:23:97:8e:62:6e:fa:0b:
fd:c5:cf:d3:5a:3e:4d:fb:ca:f0:3a:dc:08:85:c5:
75:5e:37:1f:23:f1:0b:c9:e7:b2:c1:8c:a7:88:3c:
36:83:ea:1d:c5:09:93:e0:8c:8b:f6:3e:a3:11:c4:
9f:a8:72:8c:a3:9a:92:26:02:2b:36:63:8a:a6:d3:
10:a7:42:ad:38:24:35:ff:2f:24:2a:45:0d:5e:fa:
61:e5:d0:45:d7:7b:c9:60:a2:ee:06:ff:4a:03:af:
89:08:53:0d:7f:41:7e:db:dc:05:3b:0f:91:87:70:
4f:d1:c7:d0:6b:0f:69:d7:d4:02:41:d4:80:2a:00:
28:9a:d0:25:d1:6d:e9:9c:b2:cc:1d:a4:5b:4d:b9:
8b:dd:25:ce:be:09:d1:e6:39:54:d7:22:6a:9e:21:
ff:8f:e3:f3:3d:6e:c3:b5:e0:c5:7a:93:35:fa:46:
21:96:62:17:38:6d:76:a7:18:92:42:c0:9b:92:28:
79:4d:a0:91:75:af:17:90:85:34:dc:e1:62:c8:e0:
93:52:f6:f8:0b:aa:6c:dd:44:11:fd:69:84:19:a8:
91:50:25:c1:11:55:ca:0a:3f:95:55:37:9b:ed:f6:
ae:09:fc:c6:7c:9f:ce:39:10:ec:82:c1:b8:44:df:
e3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2F:CA:E8:95:E1:A4:B7:2D:71:08:54:C7:EC:F0:D9:93:FD:4E:0C
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/1-C_K6JXhpLctcQhUx-zw2ZP9Tgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
38:63:4f:6c:ab:df:5a:27:a5:4e:02:1e:10:43:40:b6:23:3e:
cc:1a:16:d6:49:01:5f:62:ce:cb:4d:79:1f:c0:48:4f:ff:a7:
10:ac:b9:c8:c1:e9:19:39:b0:71:4a:85:96:ef:8a:25:35:73:
00:b6:d7:d4:74:47:a5:a9:ba:78:9d:5b:1e:88:f5:94:73:b8:
63:cd:0d:8b:4f:35:f3:6b:9c:44:9a:5a:29:96:9c:29:a7:45:
52:76:7c:23:39:46:46:a2:08:5d:52:cb:d5:c6:c8:8a:8d:88:
1e:c2:b6:b9:af:dd:c9:67:30:ff:e0:e7:9e:ce:3e:ad:15:55:
5a:ed:e9:22:06:50:9b:2e:46:b2:fa:c3:12:37:28:3d:19:53:
62:a3:0b:ad:9f:b8:5b:0e:21:0d:00:19:38:83:88:d7:4a:6c:
d7:ff:45:25:ad:3b:26:44:bc:1a:b7:8f:f8:06:d4:23:83:a4:
30:31:dc:31:57:6a:cc:3a:dd:59:6c:4b:6d:7f:3a:ab:5a:77:
79:0d:dd:30:56:3c:7c:ee:d6:5d:65:a9:9d:60:3f:5d:d1:22:
4e:b5:40:73:01:ec:ca:07:7b:84:ad:28:b3:94:6f:47:ae:34:
c5:34:54:14:0a:be:47:07:57:02:b0:af:4f:bd:03:32:15:83:
ae:df:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 14:33:24 2024 by rpki-client on console-fra.rpki-client.org