Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/Dk6ANttcaz1P-DdmzDYU0lCJpBM.roa
File: Dk6ANttcaz1P-DdmzDYU0lCJpBM.roa (raw, json)
Hash identifier: Fn+tKx8e96ESK9HiAkSNNRItBdsP9xVtZaZhZZMogbM=
Subject key identifier: 0E:4E:80:36:DB:5C:6B:3D:4F:F8:37:66:CC:36:14:D2:50:89:A4:13
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 01879EE551219A675772FF423BA20C82AD58
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/Dk6ANttcaz1P-DdmzDYU0lCJpBM.roa
Signing time: Thu 20 Apr 2023 13:40:41 +0000
ROA not before: Thu 20 Apr 2023 13:40:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52209
IP address blocks: 2a13:9a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:e5:51:21:9a:67:57:72:ff:42:3b:a2:0c:82:ad:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Apr 20 13:40:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0e4e8036db5c6b3d4ff83766cc3614d25089a413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:0c:03:09:4a:db:1b:6e:4b:b5:01:a0:8a:
a8:3c:1b:87:fc:4c:3d:58:03:36:72:44:f0:16:1b:
e6:ab:b1:d7:b8:41:0a:87:4e:f2:e3:02:5f:5f:12:
56:95:ba:ca:8d:f0:0e:10:3a:e8:1f:35:ab:06:cb:
0a:5e:dc:9b:80:10:4b:c4:a0:14:c0:4d:94:8c:6a:
35:52:e5:0b:47:40:2e:91:81:50:50:47:72:08:c7:
69:84:d8:39:55:bd:ba:e8:4c:b9:59:07:ff:bb:af:
e0:e8:b0:d0:06:1a:c7:c7:2f:00:67:09:cb:6a:71:
90:fa:c7:89:c2:0e:b9:0c:75:8c:52:f9:d1:60:0e:
ed:da:47:50:1d:18:80:be:55:3b:47:1c:fc:6f:aa:
a1:96:28:95:d7:a6:22:64:12:7c:a4:06:66:20:3b:
50:72:3a:24:5d:a0:f2:bc:11:d7:8a:17:be:ef:aa:
7c:01:9e:fd:d7:4c:9e:4f:ef:e3:2b:2f:a2:06:0d:
d4:4c:ee:75:84:f4:a9:5c:cf:49:1a:cc:d9:29:93:
08:2d:99:59:f9:59:95:2d:a7:ca:b4:03:0b:a4:9e:
7e:df:32:00:f2:c3:b7:8a:86:f2:97:45:33:be:f3:
b1:ca:2c:f1:34:02:72:21:52:52:59:a3:06:33:4e:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4E:80:36:DB:5C:6B:3D:4F:F8:37:66:CC:36:14:D2:50:89:A4:13
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/Dk6ANttcaz1P-DdmzDYU0lCJpBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
2d:e6:b9:b8:ce:29:15:00:85:e3:c9:60:6e:a5:2f:3b:e6:b2:
b3:dd:f4:32:a8:a9:d0:2d:66:47:42:91:42:d5:de:db:cb:0b:
f1:ea:b8:e8:23:57:c4:7d:7f:e2:5f:a2:e6:92:81:62:4a:5c:
45:cb:ad:f1:ab:66:3b:72:63:11:0f:2b:f3:9f:28:7b:f6:0f:
d0:77:1b:fb:9d:48:53:0c:53:b2:13:c2:b3:47:4d:67:8f:1d:
ca:58:75:6d:f0:e2:3c:3a:a2:ca:03:de:81:4b:a3:f3:73:02:
03:7d:f8:2b:30:42:38:9c:41:60:69:28:84:a8:8c:fc:66:2f:
71:ad:1a:ab:f2:e1:6f:2e:aa:ac:4f:d8:fe:de:5d:74:86:d2:
ae:e0:6e:27:cf:40:fd:60:7a:3b:ae:4a:98:1d:cb:4b:34:ec:
d6:61:6b:ce:ce:1f:3b:26:91:9a:41:e0:33:66:74:0c:30:f7:
18:f6:bc:7b:b4:d7:a5:de:c5:46:7d:ab:30:d1:0f:3e:5f:b3:
cf:33:ab:41:2d:06:30:22:d7:a9:c6:9c:62:bc:aa:55:46:6e:
70:e8:84:25:fa:c8:25:31:5f:03:f0:5a:f9:ea:67:37:90:1a:
7b:a7:8a:c8:85:2b:1f:db:6e:bb:ea:23:7f:45:c4:b5:3b:45:
4a:e1:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:10 2024 by rpki-client on console-ams.rpki-client.org