Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/WUIh38BAKdkNUEnEz3owNW8fQhU.roa
File: WUIh38BAKdkNUEnEz3owNW8fQhU.roa (raw, json)
Hash identifier: CJ8F2HOFxyKainkJVMWSU2xah/gpKhWz2QQNCSGHGRI=
Subject key identifier: 59:42:21:DF:C0:40:29:D9:0D:50:49:C4:CF:7A:30:35:6F:1F:42:15
Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial: 018779D2F6EE970881B8B413380C5563A66D
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/WUIh38BAKdkNUEnEz3owNW8fQhU.roa
Signing time: Thu 13 Apr 2023 08:54:41 +0000
ROA not before: Thu 13 Apr 2023 08:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 2a13:3d84::/30 maxlen: 30
2a13:3d82::/32 maxlen: 32
2a13:3d80::/29 maxlen: 29
2a13:3d80:8000::/33 maxlen: 33
2a13:3d80::/48 maxlen: 48
2a13:3d83::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 18 Aug 2023 11:45:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:79:d2:f6:ee:97:08:81:b8:b4:13:38:0c:55:63:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
Validity
Not Before: Apr 13 08:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=594221dfc04029d90d5049c4cf7a30356f1f4215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:58:4b:83:59:e0:c0:77:b0:c2:32:95:82:67:
6d:18:f3:ad:28:2c:0d:fb:09:00:5f:e5:25:74:dd:
25:75:47:f3:58:4a:02:24:70:1d:ab:85:4c:fe:b3:
45:74:f7:41:51:97:1d:54:f8:b5:73:78:db:d9:f0:
21:e9:34:fb:73:bd:19:e6:b0:ab:2f:f0:42:2f:c2:
c9:41:f6:86:a7:70:8d:38:8a:2c:3f:e9:bf:94:29:
f3:13:62:2e:25:5e:5a:b5:b9:64:d6:f2:b0:9f:1f:
12:61:3b:b2:4e:cf:db:ab:42:7d:45:14:f9:53:ef:
96:22:c9:d0:67:6c:2f:6c:66:3e:c0:ac:04:4d:ee:
0c:b6:87:a2:19:f6:b7:5d:a6:c8:83:53:53:23:90:
cf:0b:ea:98:92:2d:78:ae:24:d7:af:53:52:29:0a:
91:91:8f:1b:d0:e7:23:f6:05:16:d0:70:17:24:c4:
ad:9a:b3:48:fc:be:46:40:d5:45:ea:98:55:e7:76:
d6:a7:27:de:d1:c6:47:46:a1:d3:ad:eb:8b:a0:1b:
39:4a:3c:2a:dc:68:b7:6f:37:01:bf:ba:81:59:90:
c4:b8:8e:44:a5:7d:a2:d3:08:02:ce:68:c1:76:a5:
76:e9:d0:dd:92:e7:a4:cd:07:0a:ec:ab:c7:02:5c:
c2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:21:DF:C0:40:29:D9:0D:50:49:C4:CF:7A:30:35:6F:1F:42:15
X509v3 Authority Key Identifier:
keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/WUIh38BAKdkNUEnEz3owNW8fQhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:4b:f6:78:1f:52:52:29:d0:2b:6d:fd:2b:91:93:d4:e5:11:
69:d4:c3:23:21:2d:fc:96:79:4f:da:59:86:98:b0:5f:a2:06:
04:8d:bd:8a:21:9c:c4:e1:59:83:ab:8b:0e:7a:92:b9:fd:cd:
d5:62:96:62:29:20:0a:cc:97:13:3c:2c:72:b5:a3:d1:27:aa:
87:b9:b9:b8:5b:59:dc:79:7a:10:9a:19:b7:04:25:bb:e0:65:
ca:ac:f6:1c:0f:f3:f3:c7:10:02:ba:af:c7:c4:8f:19:35:b9:
2b:da:d7:d7:76:eb:38:47:fb:01:34:f8:46:ee:4d:58:86:07:
04:25:96:5a:26:d1:ea:d3:f2:96:a0:54:c2:a3:29:e4:7f:14:
47:db:21:bf:9d:18:89:16:e3:c7:de:77:17:5e:c2:7d:90:0c:
8f:65:83:5c:fa:dc:df:da:99:02:0a:46:89:29:4a:e7:b9:8d:
45:2d:01:97:93:46:de:5f:33:34:9e:ae:46:16:4d:99:95:06:
40:97:4e:3f:c7:de:4a:e8:7d:c1:cc:0f:53:75:49:b2:35:dc:
95:12:9b:d0:f8:2d:72:4a:46:57:23:8b:ee:e0:7c:51:8d:4c:
36:69:87:05:33:e0:37:5a:ef:7d:a1:51:d3:17:06:ca:00:1f:
9e:48:9d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:13 2024 by rpki-client on console-fra.rpki-client.org