Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/cN0XeMcUHZ5s13FQsbBp12h8Ex8.roa
File: cN0XeMcUHZ5s13FQsbBp12h8Ex8.roa (raw, json)
Hash identifier: FTkN3NIO5AGwXhQBRZAoyMRGE0Sv7vt8V693v/qcTiw=
Subject key identifier: 70:DD:17:78:C7:14:1D:9E:6C:D7:71:50:B1:B0:69:D7:68:7C:13:1F
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018C3E6F0EADE1D6530862C5B26F429010EE
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/cN0XeMcUHZ5s13FQsbBp12h8Ex8.roa
Signing time: Wed 06 Dec 2023 09:21:54 +0000
ROA not before: Wed 06 Dec 2023 09:21:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60504
IP address blocks: 2a13:82c2::/32 maxlen: 32
2a13:82c0::/32 maxlen: 32
2a13:82c5::/32 maxlen: 32
2a13:82c7::/32 maxlen: 32
2a13:82c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Dec 2023 01:05:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:6f:0e:ad:e1:d6:53:08:62:c5:b2:6f:42:90:10:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: Dec 6 09:21:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70dd1778c7141d9e6cd77150b1b069d7687c131f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:52:d0:58:c3:90:7c:d2:c8:e4:1a:ca:6b:
b4:63:5a:f8:9b:a1:95:58:1b:88:01:3f:07:46:82:
80:39:4d:a3:cd:d5:b5:d1:96:f8:b5:9d:84:82:cd:
55:c3:4e:fb:d5:9d:78:7e:07:94:13:87:bd:1a:24:
4d:82:a7:af:6e:93:85:f2:9a:80:aa:42:6f:f7:b2:
54:20:3d:48:e3:63:53:c5:ab:08:80:84:37:75:65:
7e:e6:2d:6d:3f:26:84:77:dc:aa:35:ff:b7:fd:4d:
66:bd:3f:4f:dc:9f:60:62:17:9d:2c:98:55:11:f2:
db:85:81:e2:32:0d:f1:df:42:9c:ca:e7:63:13:cf:
50:41:09:8d:ae:0f:2f:af:61:39:cd:2e:5e:0e:a4:
0a:3c:f7:97:d9:f7:72:56:37:61:18:55:68:46:36:
08:88:41:0a:4d:10:80:88:73:6c:91:d3:83:90:42:
8e:c7:ce:e0:82:67:1a:7a:82:e1:89:cf:ce:08:1e:
8e:16:48:9b:98:c5:51:d2:16:46:fe:0b:c8:be:35:
1a:d5:79:79:53:b3:d7:2b:7a:e4:5b:76:8d:f2:31:
dc:b0:f3:7b:71:14:b7:44:d6:69:02:c3:18:3d:40:
35:8e:cf:93:81:b9:26:af:5c:76:6f:c3:6f:84:26:
25:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:17:78:C7:14:1D:9E:6C:D7:71:50:B1:B0:69:D7:68:7C:13:1F
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/cN0XeMcUHZ5s13FQsbBp12h8Ex8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c0::-2a13:82c2:ffff:ffff:ffff:ffff:ffff:ffff
2a13:82c5::/32
2a13:82c7::/32
Signature Algorithm: sha256WithRSAEncryption
36:39:a0:39:d5:07:27:22:31:54:bc:a4:13:a9:6f:3e:57:09:
0b:8e:ab:e6:bc:e4:fe:c8:19:f7:d2:66:d0:45:e6:f1:23:b1:
c3:2b:4e:32:e3:74:95:e5:a1:75:15:eb:df:6e:58:01:52:bf:
5b:8b:d8:da:39:c2:00:8c:8c:91:30:79:8e:7f:db:b0:e8:c4:
3f:92:94:42:c8:11:70:8a:71:b9:ac:28:d2:46:8e:5b:12:70:
10:67:6b:9a:e3:3d:9c:a8:76:50:da:60:38:fa:08:c9:68:9f:
71:ba:63:ff:d5:59:0e:1f:b3:b8:b5:52:b5:3d:a4:e0:4d:60:
be:27:9a:f4:66:db:e7:e9:84:a6:0d:1c:02:d7:f2:5d:11:90:
71:77:a4:7a:04:59:df:c6:fa:e1:1e:07:b6:41:a2:9f:c4:ed:
d4:e8:79:e0:6b:ed:40:45:b9:ed:d8:08:bc:8c:a5:f5:9b:1d:
a6:8f:dd:17:f4:b7:9d:df:2e:c6:b2:85:d4:d9:85:52:34:32:
e7:76:c2:12:b0:20:06:83:41:ec:26:35:ae:84:93:c0:d7:d8:
e3:b3:0f:af:a4:8a:ec:37:37:46:04:75:1e:d6:17:2f:a8:b8:
a9:3b:7b:e7:ca:9e:28:1d:df:3d:0c:5e:df:4a:39:8b:f4:fb:
36:7d:83:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org