Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/G2ZRrWWdD_vRRf4MdjkU9q46Qh4.roa
File: G2ZRrWWdD_vRRf4MdjkU9q46Qh4.roa (raw, json)
Hash identifier: t/MrRS8tEgfvvrtziPd89bjV11BN8vLnUdI+y9UDuKk=
Subject key identifier: 1B:66:51:AD:65:9D:0F:FB:D1:45:FE:0C:76:39:14:F6:AE:3A:42:1E
Certificate issuer: /CN=45aed3d1a1a1e2830d416afa047b95220e814084
Certificate serial: 018CC2DADC63CDDFBDDE329F233F587D44C0
Authority key identifier: 45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/G2ZRrWWdD_vRRf4MdjkU9q46Qh4.roa
Signing time: Mon 01 Jan 2024 02:29:32 +0000
ROA not before: Mon 01 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199699
IP address blocks: 2a13:8f80::/29 maxlen: 31
Validation: Failed, certificate revoked on Tue 02 Jul 2024 11:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:dc:63:cd:df:bd:de:32:9f:23:3f:58:7d:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45aed3d1a1a1e2830d416afa047b95220e814084
Validity
Not Before: Jan 1 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b6651ad659d0ffbd145fe0c763914f6ae3a421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:ce:20:42:74:b0:10:43:3b:f5:c9:43:0f:
f5:9a:bb:ff:21:e2:a3:d5:4f:a8:6b:71:54:d4:c6:
35:47:ae:42:4f:74:05:08:d4:8a:07:e2:f2:c6:03:
32:ee:d8:9f:90:07:f4:22:20:fa:1f:8d:ab:fa:2f:
c4:4f:f2:3d:c2:ae:e8:b5:4c:b8:16:a0:07:79:18:
ea:c9:73:91:06:13:e1:1f:0c:0d:05:73:22:bb:1f:
0d:ec:8c:32:a9:80:41:6b:e9:7a:a6:90:14:ef:57:
76:69:87:22:a2:62:9a:82:03:a0:a5:7c:fb:2e:a9:
02:8d:ec:43:b2:66:dd:1f:d2:0b:7a:b2:e6:3f:9e:
ee:04:29:da:cf:50:68:d9:5a:f6:a0:05:c4:cc:7f:
75:b7:80:69:75:6b:e4:71:f7:e2:b9:71:8e:19:00:
26:e2:91:72:66:be:b7:0f:85:ec:dd:a3:1e:67:c0:
83:9c:89:71:1e:dd:2f:53:86:27:7a:02:9f:d7:86:
92:7c:38:fc:f6:89:40:47:bb:79:0a:93:16:bd:b8:
99:db:dd:ec:dc:93:ec:22:fc:01:92:55:1b:80:d4:
7b:45:ca:fd:af:e3:98:e3:35:b9:6a:1e:c2:3e:b4:
c8:2f:18:01:2e:7e:51:af:b6:63:19:9e:3e:7b:88:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:51:AD:65:9D:0F:FB:D1:45:FE:0C:76:39:14:F6:AE:3A:42:1E
X509v3 Authority Key Identifier:
keyid:45:AE:D3:D1:A1:A1:E2:83:0D:41:6A:FA:04:7B:95:22:0E:81:40:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/G2ZRrWWdD_vRRf4MdjkU9q46Qh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c5dc7-bf41-4008-9cff-2c69985359c0/1/Ra7T0aGh4oMNQWr6BHuVIg6BQIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8f80::/29
Signature Algorithm: sha256WithRSAEncryption
48:9b:df:68:65:54:32:d3:c8:9e:a1:27:7b:a5:7c:34:d3:20:
1c:9b:7d:d8:77:20:6b:38:ff:49:bd:fc:e7:0e:95:23:46:aa:
c5:66:2e:4e:f3:2e:db:3c:aa:12:a7:1d:2e:2c:85:7c:2c:16:
d6:88:1c:ee:63:e3:a1:84:d4:08:0f:17:36:dd:4e:97:94:03:
c3:ac:e7:a6:4d:b9:9d:77:f6:49:cb:34:93:85:ee:ae:45:67:
ce:ad:a3:12:66:55:85:75:b7:35:b1:5a:8a:41:20:80:2f:e2:
6d:41:fa:5a:d6:85:88:22:14:4c:03:7d:cf:9b:c1:b4:b8:74:
9b:36:3a:1b:55:5e:f2:cc:7d:b1:cb:7e:53:19:5c:02:34:55:
d7:a9:02:76:b8:20:3a:b1:0e:b1:8f:e6:1f:96:45:9f:44:69:
85:b4:6d:09:f8:bc:fa:97:2a:5b:d5:3e:f8:d6:b5:f2:b2:38:
2b:ce:72:f1:d3:10:20:03:cd:90:06:1b:53:90:3a:a2:0a:af:
1e:64:c0:48:a5:7e:27:48:83:3b:c0:e9:3e:05:a2:2e:29:9d:
44:5d:ea:ed:b1:28:c4:b8:00:9b:2c:11:48:cc:89:7b:f5:af:
2c:39:bf:7f:be:ef:07:f5:21:42:cd:7b:f9:97:fa:ab:a0:16:
50:92:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 13:05:47 2024 by rpki-client on console-fra.rpki-client.org