Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/U6ef814pv09DFMAfsgxl0swCpKs.roa
File: U6ef814pv09DFMAfsgxl0swCpKs.roa (raw, json)
Hash identifier: relQ09+nIqMQ2LyNubiKr7kBRa0F1F88ES4oyo3uPEg=
Subject key identifier: 53:A7:9F:F3:5E:29:BF:4F:43:14:C0:1F:B2:0C:65:D2:CC:02:A4:AB
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018CD382CF2DF88BDACF17B8BB4ABB2AD205
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/U6ef814pv09DFMAfsgxl0swCpKs.roa
Signing time: Thu 04 Jan 2024 08:06:54 +0000
ROA not before: Thu 04 Jan 2024 08:06:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 605040
IP address blocks: 2a13:82c5:1f00::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 21 Mar 2024 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:82:cf:2d:f8:8b:da:cf:17:b8:bb:4a:bb:2a:d2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Jan 4 08:06:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53a79ff35e29bf4f4314c01fb20c65d2cc02a4ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:95:60:65:49:52:c2:79:c2:b6:8c:40:53:9c:
4e:db:4a:a1:82:02:04:23:95:c7:d2:5c:e8:03:f3:
dd:d5:67:21:a3:f7:c9:28:f3:78:a8:84:36:08:4b:
fe:27:f7:df:b4:d8:0e:76:55:4a:43:5c:19:2f:57:
ce:ba:b2:7d:32:b1:a5:7e:78:2c:02:b1:3e:e7:c3:
a0:18:c9:bd:51:07:7e:ce:1a:ae:78:b3:dd:64:11:
ca:f9:f3:95:6d:ab:f2:83:92:72:63:2e:33:f4:aa:
05:70:e2:1b:d2:7c:b1:a4:ec:8a:f2:db:5f:32:df:
0e:6b:ae:75:b5:ed:5e:bd:7f:7f:91:9e:4b:51:71:
33:ac:ab:86:af:df:67:64:aa:ad:44:bd:1f:f1:13:
3e:c0:99:77:e2:55:b4:56:64:c4:53:4b:eb:c0:a6:
d4:93:6b:4f:2d:d6:b2:12:aa:cb:63:32:4d:68:b2:
c2:61:07:81:d3:cf:ae:07:88:43:09:6c:b5:08:13:
96:c0:ce:11:47:f9:ea:51:1a:37:94:eb:e3:80:d1:
44:3e:66:5a:9a:bb:cf:b2:61:20:2b:90:8b:69:69:
21:fd:ac:e7:c2:5c:5b:bb:6b:6a:f6:df:b5:2e:04:
b6:85:07:65:b5:08:14:a3:1b:87:c3:fc:a8:a5:62:
85:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A7:9F:F3:5E:29:BF:4F:43:14:C0:1F:B2:0C:65:D2:CC:02:A4:AB
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/U6ef814pv09DFMAfsgxl0swCpKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c5:1f00::/40
Signature Algorithm: sha256WithRSAEncryption
5d:a6:89:e8:4a:00:46:b7:b3:33:4a:0e:da:75:c4:c9:9f:d6:
5f:b4:c4:80:ac:ea:8d:88:c3:be:41:c7:a1:70:36:ec:70:87:
b2:7a:a7:45:7c:2c:ec:be:1a:57:4e:5d:6d:9d:0e:61:df:9a:
ba:19:be:7d:14:61:c6:2f:63:8d:ee:67:e1:da:67:d5:a6:95:
54:40:42:c7:2c:a1:80:a0:66:e1:81:4e:7f:71:1f:5d:40:21:
85:76:73:43:68:ca:62:e3:9d:0a:e3:ec:c7:c6:e7:a3:f9:49:
ed:a1:84:e5:05:7b:3a:b6:d3:52:d9:9c:cb:b7:2d:e5:d1:1a:
c7:b6:c0:da:91:69:6c:16:00:44:ea:22:e2:e5:07:0f:d1:ca:
7c:3a:8d:82:43:75:e5:b6:de:40:66:c5:0c:5b:16:bb:c2:65:
3f:74:4d:33:8c:f9:4c:2b:d7:04:a2:21:4d:ab:10:5b:15:82:
b7:42:a6:c3:1d:ca:3f:17:c7:e5:ff:fe:2c:85:d7:f9:a2:d2:
14:ee:7a:8f:8e:23:47:f0:0e:c4:61:da:cd:a3:04:ce:77:31:
b7:f1:6b:ea:7a:5c:ec:f3:46:51:a5:f3:52:20:11:5a:f4:13:
cb:f0:17:e1:e9:c2:46:96:78:f5:00:0e:92:ff:df:c8:c7:f8:
c1:ea:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org