Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/iEUkqlphXgUFywZEFD1pKLGQ2co.roa
File: iEUkqlphXgUFywZEFD1pKLGQ2co.roa (raw, json)
Hash identifier: UVBHWxR4ckZxk4+oTHlENIPvg7mJbyj4z7EAAT7T/K4=
Subject key identifier: 88:45:24:AA:5A:61:5E:05:05:CB:06:44:14:3D:69:28:B1:90:D9:CA
Certificate issuer: /CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Certificate serial: 018F7BCDA4E6525442C928390C459128BCB2
Authority key identifier: CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/iEUkqlphXgUFywZEFD1pKLGQ2co.roa
Signing time: Wed 15 May 2024 10:30:25 +0000
ROA not before: Wed 15 May 2024 10:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215672
IP address blocks: 2a13:82c4:ff00::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 May 2024 06:47:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7b:cd:a4:e6:52:54:42:c9:28:39:0c:45:91:28:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cff5dc76eb6f814ed601568fdd2c8110edef8c17
Validity
Not Before: May 15 10:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=884524aa5a615e0505cb0644143d6928b190d9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:e3:c4:5d:78:e4:34:e5:79:32:c8:1e:ac:
67:9b:c2:57:f8:fb:64:e7:13:23:00:3d:b8:cd:f3:
ce:02:0e:5b:58:d8:85:bd:25:16:5d:e9:a8:0f:48:
e1:bb:c4:6b:50:3b:7e:70:5e:81:d1:c0:0e:ff:76:
09:54:f8:f8:bc:64:bf:2d:3c:cf:72:8a:9b:4b:e7:
10:b3:41:98:96:a0:65:b3:b0:cd:7a:26:27:29:a7:
8a:36:0f:79:4c:d9:ce:c6:a4:96:ac:3a:a3:67:f9:
14:3a:67:0c:24:6c:c4:f3:aa:dd:23:6b:f1:8f:8b:
f9:ec:80:7e:4c:4b:b5:9e:26:9a:5b:d0:76:46:96:
36:a2:61:6d:c9:16:a8:4f:8a:e4:93:aa:fc:e7:69:
cb:81:68:c4:10:02:bc:2d:a0:43:b7:2f:3d:5d:e3:
61:03:52:e0:d3:8f:0b:d2:f4:59:e9:ad:9a:1a:47:
31:07:ae:86:f1:d8:76:d2:26:cc:d8:dd:f5:32:fb:
98:35:8a:e7:d0:36:95:69:11:ee:0b:79:fb:ee:3c:
2c:53:a2:ab:6d:61:a8:d3:77:08:1c:76:d1:d8:fb:
c9:ed:20:75:3d:14:aa:47:a6:5e:cf:fb:ef:d7:3f:
ff:48:88:9d:e2:bf:2b:16:08:c8:30:d7:62:9a:a7:
94:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:24:AA:5A:61:5E:05:05:CB:06:44:14:3D:69:28:B1:90:D9:CA
X509v3 Authority Key Identifier:
keyid:CF:F5:DC:76:EB:6F:81:4E:D6:01:56:8F:DD:2C:81:10:ED:EF:8C:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XcdutvgU7WAVaP3SyBEO3vjBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/iEUkqlphXgUFywZEFD1pKLGQ2co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8c0c00-5fce-45cb-bbb7-01d9e9d31943/1/z_XcdutvgU7WAVaP3SyBEO3vjBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:82c4:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
28:b5:8c:94:ee:04:b7:0f:f5:be:12:4c:1b:ee:b1:fb:5d:eb:
e6:4d:9b:9a:a9:52:d7:c8:d3:cd:3a:29:41:73:56:56:9c:99:
e7:a9:5c:d3:48:01:ad:36:1c:78:c4:bc:42:2d:81:9d:9b:77:
c0:68:3b:ef:e5:c9:8a:78:f6:da:cc:b2:8f:fe:90:d4:34:5a:
2e:7f:c3:4f:24:7a:22:40:d8:49:b7:8b:e5:61:d3:80:0a:3c:
6c:19:5b:6b:8d:a3:cb:7f:7c:6c:78:23:ef:5e:4b:fe:9c:76:
c1:bf:ad:37:4e:d4:da:71:b2:e6:08:d5:50:8b:af:15:54:cd:
3b:b6:c5:34:c3:9c:fe:84:23:3c:4f:dd:29:aa:73:af:b9:23:
02:f5:96:65:3d:11:68:00:95:38:e0:0a:9c:37:f2:12:28:f9:
8c:7c:e9:94:c2:18:8c:b8:73:a5:5a:ca:80:aa:cf:5a:0c:f1:
cd:ff:bd:9c:87:47:d7:03:f0:ec:bc:98:fa:5b:62:f9:3d:85:
1a:ff:4b:49:31:54:b7:10:14:bc:ea:ff:1b:6a:46:1a:e4:71:
6b:74:c2:1f:36:b8:12:e4:55:f5:86:15:59:4b:ec:2f:a2:8d:
d7:69:9e:59:26:2b:19:ce:4b:3c:eb:b8:3b:37:08:be:9e:c9:
77:38:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org