Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/3ubPM75iqSKmVMWY0L0U0RHJYCI.roa
File: 3ubPM75iqSKmVMWY0L0U0RHJYCI.roa (raw, json)
Hash identifier: IRFV+Qqn0OZM6Wd1B+H5PcpeItb97Kp/LjFOu+nZXeI=
Subject key identifier: DE:E6:CF:33:BE:62:A9:22:A6:54:C5:98:D0:BD:14:D1:11:C9:60:22
Certificate issuer: /CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Certificate serial: 018CC56E10F37D2107EC702EF22B2B4F9AB9
Authority key identifier: A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/3ubPM75iqSKmVMWY0L0U0RHJYCI.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200260
IP address blocks: 2a13:75c1:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 17 Apr 2024 17:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:10:f3:7d:21:07:ec:70:2e:f2:2b:2b:4f:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15237c39a325aa309b69e66fe09237da1ad0d2b
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dee6cf33be62a922a654c598d0bd14d111c96022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:fa:f4:f4:ec:6d:39:f1:d9:3e:b1:38:c0:
c6:7d:3c:5b:d1:cb:96:b4:f2:f6:98:c8:c0:a3:95:
55:f8:c0:ea:86:56:ad:7e:88:b3:32:60:24:9c:24:
2e:86:81:15:4b:d7:5e:57:92:8a:d6:d6:b1:fd:e2:
84:f0:ed:5f:0d:bf:41:24:c5:88:e7:e3:c6:ec:aa:
b1:09:fc:8f:79:c5:7a:c6:92:a6:1c:a9:87:87:21:
07:87:9b:6e:2e:88:37:d4:3e:47:54:01:5a:ca:0c:
0a:91:24:3f:15:cc:81:76:41:e4:5b:0e:cc:0f:27:
89:8c:89:d2:30:21:f3:59:f3:f0:b0:0c:39:67:89:
2f:46:22:3a:64:87:53:0e:74:cc:f2:c6:73:f8:48:
fa:7e:78:f0:3e:44:54:17:d0:e7:98:9f:bd:72:77:
f5:7a:c3:4f:c8:0f:d7:ed:69:28:80:8b:cc:54:cf:
58:75:81:c8:89:45:b4:67:54:c9:07:bd:b8:a5:be:
d9:4f:35:fe:4e:6b:11:1a:e0:ae:4e:69:b4:1d:08:
1f:e0:94:ac:07:b7:08:0e:5d:7f:81:99:5d:73:33:
16:4b:90:5b:f6:9b:b0:0d:94:78:e8:81:3d:76:3c:
8b:20:37:7d:a0:72:94:dc:4d:ae:d6:49:f2:2a:15:
e2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:CF:33:BE:62:A9:22:A6:54:C5:98:D0:BD:14:D1:11:C9:60:22
X509v3 Authority Key Identifier:
keyid:A1:52:37:C3:9A:32:5A:A3:09:B6:9E:66:FE:09:23:7D:A1:AD:0D:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVI3w5oyWqMJtp5m_gkjfaGtDSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/3ubPM75iqSKmVMWY0L0U0RHJYCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f33229-ca2d-4108-892d-4c910ae3735d/1/oVI3w5oyWqMJtp5m_gkjfaGtDSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:75c1:100::/40
Signature Algorithm: sha256WithRSAEncryption
3a:25:7e:50:3f:1a:76:14:c5:23:d5:c3:d9:ba:0c:df:44:19:
db:ed:34:a9:e4:57:a6:90:a6:6d:52:b0:4b:d2:4a:9c:f6:5b:
67:17:bb:17:ff:6e:d8:9c:89:cb:3d:9c:9e:af:3f:df:19:7e:
7e:9d:79:ab:ef:3b:ad:dc:bb:81:93:ab:00:ae:ae:b3:09:c6:
bd:df:95:28:79:1b:29:bd:b2:5c:8a:a1:73:35:67:13:af:c9:
44:a0:da:a9:cc:64:c6:3d:43:0f:d4:fe:d0:5b:cd:7c:84:13:
7e:cc:7e:79:57:0b:7d:34:99:a1:66:92:79:6a:5b:36:e3:e8:
7b:82:e1:d8:4a:eb:4b:85:80:5a:ef:d3:ee:ba:a0:c0:c9:41:
d7:0b:29:ff:14:da:40:99:25:92:8a:5e:4a:1e:df:c4:d6:94:
a3:ee:57:57:d8:72:23:b6:9d:f5:72:b2:d6:95:0d:ee:3a:45:
df:62:37:3d:a4:72:8e:1e:a4:5a:8e:20:dc:ae:29:5e:aa:93:
74:7e:50:f1:df:8d:b1:e9:bf:30:36:e5:30:9b:ff:b1:60:44:
b7:a1:d5:34:e6:4f:d5:ff:ef:2f:28:94:c0:1b:fc:91:db:df:
c2:ed:ca:6d:c4:60:51:38:6c:f1:ba:6c:50:2a:fc:79:5b:b9:
c6:1e:4b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:20 2025 by rpki-client