Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/X_hMT45S54ydQ7kJnrMsiy5x8cA.roa
File: X_hMT45S54ydQ7kJnrMsiy5x8cA.roa (raw, json)
Hash identifier: 4Optsk4O4K6C9LyYQQXj/eqtaBph92Mhsb4ppv+MGuk=
Subject key identifier: 5F:F8:4C:4F:8E:52:E7:8C:9D:43:B9:09:9E:B3:2C:8B:2E:71:F1:C0
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 018CC4251810380025213EA8D709C78CC02D
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/X_hMT45S54ydQ7kJnrMsiy5x8cA.roa
Signing time: Mon 01 Jan 2024 08:30:14 +0000
ROA not before: Mon 01 Jan 2024 08:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:2c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 Feb 2024 10:14:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:18:10:38:00:25:21:3e:a8:d7:09:c7:8c:c0:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ff84c4f8e52e78c9d43b9099eb32c8b2e71f1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3e:ed:5c:d6:7f:d0:cb:d6:bd:a5:6b:47:75:
37:30:ea:ab:c4:ea:4e:19:71:34:1e:1d:b1:43:b5:
bd:39:1a:53:a4:e6:1b:59:eb:1c:c0:1e:26:8a:21:
65:93:a0:49:62:19:60:51:00:3e:7f:85:53:62:b2:
db:f7:c0:b1:7d:1b:9e:ec:0f:b4:14:30:a0:18:91:
0f:b2:63:be:38:e6:2e:1a:32:45:dc:07:3c:cf:a0:
cb:b4:5a:8a:e4:4d:89:0b:de:6f:81:4e:bf:d5:07:
71:9b:d9:bb:6a:e5:60:a1:49:74:f4:c4:be:87:72:
2c:9e:3b:f1:b0:91:c9:f3:2e:3f:a6:c0:4b:cb:8a:
a5:59:9a:62:91:25:60:18:b2:b9:e2:4e:6d:d6:84:
09:5c:e3:d5:1a:eb:72:14:0b:3d:a6:c3:c3:bc:be:
5e:9f:c0:86:cb:8c:0f:af:0f:e0:6d:a8:44:85:ae:
68:22:aa:1d:f9:2a:72:b8:6c:78:66:73:57:03:27:
32:05:af:d1:d9:be:6b:90:5c:1a:c5:26:b5:af:4d:
46:10:78:b5:f5:ca:c6:8d:7e:3e:94:d4:3c:6e:74:
a2:81:15:fe:cd:3f:ed:a0:52:f9:54:b5:c6:3f:51:
00:9b:af:52:36:95:ba:54:4a:62:fd:8a:46:56:10:
38:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F8:4C:4F:8E:52:E7:8C:9D:43:B9:09:9E:B3:2C:8B:2E:71:F1:C0
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/X_hMT45S54ydQ7kJnrMsiy5x8cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
39:f9:18:67:e9:19:dd:12:06:4a:63:3f:12:cb:ed:fb:ec:1f:
e8:13:92:4a:83:60:5d:17:f8:47:9b:7c:56:89:1c:93:81:a9:
c9:50:03:e1:fa:fc:77:3e:4e:41:1c:1d:75:b6:a0:46:9b:f4:
c0:b1:44:0e:2f:ff:69:53:1e:db:1d:0a:45:17:64:e4:ac:54:
ac:c2:c5:5c:fc:5d:12:3d:46:63:8e:82:b1:fb:d4:90:88:29:
73:df:0a:90:b7:09:62:ec:74:7e:b8:48:6d:b9:d8:da:b1:42:
b7:09:c4:64:de:c5:07:f4:d2:45:63:5f:f0:7f:bd:29:a0:fd:
29:f2:4e:18:d0:1b:f1:a5:ed:11:81:33:81:bf:44:59:7b:53:
a4:ab:c9:f8:b9:90:c3:1a:64:51:45:64:00:9a:40:08:48:5f:
f5:e7:2e:c9:3a:c4:59:34:10:dd:88:6e:f5:0d:d2:db:cb:ca:
13:15:ca:e5:f5:cc:84:9b:f1:e9:fd:56:e3:74:4a:ed:49:d1:
73:84:a6:eb:06:bd:05:8a:6c:53:e3:a4:c0:f3:4d:0a:d4:ee:
7b:89:c1:36:c6:ea:74:14:47:aa:2d:12:c5:4e:af:8b:45:53:
96:e2:e4:3f:f6:ce:e7:4e:db:46:41:11:99:07:51:5c:db:70:
b8:a1:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 14:35:34 2024 by rpki-client on console-ams.rpki-client.org