Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/ZnMKj0kMpasgdpTi-sQ_PMu1SVY.roa
File: ZnMKj0kMpasgdpTi-sQ_PMu1SVY.roa (raw, json)
Hash identifier: FGNdYY+lYzQK9Eyne64X6CQYFxqf4EYPTACHVWYTEKg=
Subject key identifier: 66:73:0A:8F:49:0C:A5:AB:20:76:94:E2:FA:C4:3F:3C:CB:B5:49:56
Certificate issuer: /CN=1c37a9026e45b68fe4735a469b75636130ad125c
Certificate serial: 0186DF2739E1AEED9186B78D94100BF094A6
Authority key identifier: 1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/ZnMKj0kMpasgdpTi-sQ_PMu1SVY.roa
Signing time: Tue 14 Mar 2023 08:05:35 +0000
ROA not before: Tue 14 Mar 2023 08:05:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210625
IP address blocks: 2a13:54c0::/29 maxlen: 36
Validation: Failed, certificate revoked on Wed 28 Jun 2023 07:36:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:27:39:e1:ae:ed:91:86:b7:8d:94:10:0b:f0:94:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c37a9026e45b68fe4735a469b75636130ad125c
Validity
Not Before: Mar 14 08:05:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66730a8f490ca5ab207694e2fac43f3ccbb54956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:44:16:74:1b:b1:b7:ae:ae:dd:8d:64:d0:b3:
53:2c:d4:34:6a:a3:59:a1:e9:14:7f:47:5f:ba:c9:
36:f3:b0:8b:4e:4b:ff:a5:e0:96:3c:8c:1b:2f:0c:
e5:cc:2a:fc:d3:b0:00:e9:2c:d2:b8:ca:c1:0c:44:
91:d2:3c:e7:49:00:6c:d3:f4:b4:13:1b:14:07:bd:
8c:e3:ce:60:09:3f:87:93:f8:cb:7f:09:c3:03:3c:
15:d9:a3:62:79:30:8b:a3:73:c4:86:9b:29:ed:2b:
02:71:1f:7d:7d:2c:1a:78:ee:97:30:44:3f:a9:46:
0c:2e:75:fb:f8:03:34:f1:75:a6:de:4c:dd:e4:2d:
26:a8:1a:80:9d:e8:f3:5f:87:12:61:99:f7:dc:9c:
d5:d2:b7:de:d7:93:a7:ad:a3:bd:39:3a:0f:51:41:
1a:72:13:98:e4:01:06:8d:7e:c9:c5:d8:c9:7a:07:
2b:bc:6a:b5:2c:7c:2d:17:30:c0:d7:2c:48:a8:a5:
54:f2:1e:99:6a:52:bf:52:70:22:f1:23:2e:2d:48:
21:2d:82:21:02:64:25:ff:35:ff:28:7a:37:53:63:
40:01:b7:ff:8b:f2:93:ba:fe:88:62:79:2a:fc:83:
7f:2e:7c:69:22:69:2a:41:cd:06:e1:97:3b:b2:c3:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:73:0A:8F:49:0C:A5:AB:20:76:94:E2:FA:C4:3F:3C:CB:B5:49:56
X509v3 Authority Key Identifier:
keyid:1C:37:A9:02:6E:45:B6:8F:E4:73:5A:46:9B:75:63:61:30:AD:12:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDepAm5Fto_kc1pGm3VjYTCtElw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/ZnMKj0kMpasgdpTi-sQ_PMu1SVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/2bb603-f479-40cb-82d4-48d672973b13/1/HDepAm5Fto_kc1pGm3VjYTCtElw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:61:5d:9c:e6:d4:5c:55:b1:df:21:94:65:b3:29:75:1a:41:
d5:f9:e3:8f:c9:7f:c3:46:be:d8:7a:af:de:e7:70:8a:f0:48:
3d:b4:7d:df:4b:8d:0e:79:b3:99:25:0f:72:94:e2:6c:c6:cc:
c7:e0:d9:6a:c5:c4:76:c5:7f:19:b3:fd:7c:1a:e9:a8:4b:12:
f3:e5:45:18:a4:58:37:a4:49:d7:19:5c:a4:35:43:4f:98:45:
48:48:7e:fa:b2:e8:7c:b2:70:4a:f4:c8:03:7d:b2:cf:4f:b1:
6e:9f:bb:68:51:3f:af:81:92:1a:7a:2a:b1:79:5f:a7:fa:f0:
b9:a0:2f:1c:47:82:fb:1c:1f:77:a0:82:f0:e4:04:c9:b2:f0:
26:8b:53:9e:7a:38:4f:5a:7d:68:d6:c3:33:bc:c6:68:fc:42:
67:f8:41:8b:d2:7a:39:19:01:c9:28:69:cb:06:fe:e1:ba:f4:
53:99:48:0a:f2:d4:24:d0:b1:e3:3f:fa:54:fd:bd:b8:ab:d2:
23:56:8a:7e:27:09:d2:6f:b5:72:5f:8b:32:69:ee:2e:13:df:
14:4a:d8:a0:71:28:47:f3:44:57:fa:56:de:f1:db:ff:24:3f:
fe:f5:d6:42:0a:44:df:54:f7:6e:18:80:4e:ad:57:d1:dd:0a:
ed:16:45:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:34 2024 by rpki-client on console-ams.rpki-client.org