Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/vDppsT-oqFIeRZJ7G9MGIM31CcM.roa
File: vDppsT-oqFIeRZJ7G9MGIM31CcM.roa (raw, json)
Hash identifier: bvbLNAghc00DNltuQf0rxgwyk8Ctuz2qauhk9VwzuhU=
Subject key identifier: BC:3A:69:B1:3F:A8:A8:52:1E:45:92:7B:1B:D3:06:20:CD:F5:09:C3
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 018CC2DB28709B659A7720A5D8109C08E71A
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/vDppsT-oqFIeRZJ7G9MGIM31CcM.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a13:8340::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 14 Sep 2024 08:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:28:70:9b:65:9a:77:20:a5:d8:10:9c:08:e7:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc3a69b13fa8a8521e45927b1bd30620cdf509c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b4:7b:15:1b:24:a5:5f:3d:7f:8a:65:01:a0:
ec:84:b7:06:06:99:1c:c5:66:3e:02:6b:96:76:78:
5e:99:63:32:21:59:40:20:52:93:54:95:8d:6b:8a:
5f:6b:24:e3:26:f8:71:c4:c2:f7:bc:b1:40:b1:70:
1b:ff:10:9a:81:a4:68:e4:77:3c:b5:f9:2b:c2:bc:
f0:ba:a6:bd:93:cd:de:4d:f0:9a:e8:a9:37:02:b6:
23:ab:13:a6:d8:7d:df:3b:a0:a8:5e:2b:5c:07:71:
97:f2:15:51:41:a1:09:85:69:a7:dd:0f:06:3e:36:
00:2a:c3:d5:ff:b9:e7:78:68:ce:56:23:39:4d:92:
d3:f7:0c:fa:dd:d2:6b:81:bd:fb:74:8d:12:ab:8c:
30:c1:9b:f1:20:76:d5:5e:60:a0:c0:32:18:3d:1d:
ce:7d:6b:d9:ed:3e:ca:34:3f:cf:96:14:b8:84:16:
c8:e6:b3:ea:4d:4e:3a:6d:4a:a2:05:ee:23:75:3b:
b7:9b:8f:a7:5a:4a:a3:5a:86:13:64:47:6c:8f:cc:
9c:c2:8f:5f:a5:e6:05:a9:1b:5b:d5:be:a4:51:61:
fa:f8:9d:01:1e:42:73:01:8f:22:b3:3a:fa:fd:01:
a0:44:a5:2d:97:f3:09:01:88:19:b3:16:06:2a:1b:
36:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3A:69:B1:3F:A8:A8:52:1E:45:92:7B:1B:D3:06:20:CD:F5:09:C3
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/vDppsT-oqFIeRZJ7G9MGIM31CcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8340::/29
Signature Algorithm: sha256WithRSAEncryption
3a:ba:8a:de:1b:cb:d6:82:b2:64:ec:94:51:17:1f:2b:fb:2b:
ce:fe:d1:be:86:83:dc:e3:ea:33:8d:ce:30:1c:c1:58:18:c4:
97:15:80:f1:4c:b4:30:c3:a0:e0:51:fc:8b:4c:2f:32:33:be:
ce:a4:40:5c:0d:9c:9d:a5:3e:e7:cb:60:70:11:e3:6c:fd:d1:
8f:55:c7:89:d6:95:91:fc:74:9d:b5:61:4e:fd:03:c6:0c:2d:
27:92:e7:bd:51:20:ae:60:9d:8a:f4:f4:b9:94:ce:a3:27:4d:
f8:f5:73:32:7d:ca:8d:c8:46:b4:3c:23:d1:d2:0c:71:73:7e:
37:66:7b:8f:5b:4f:d2:84:59:2f:6e:ca:ca:b2:c1:ec:35:fd:
a3:82:ce:59:45:71:c7:48:fe:8d:7f:c8:70:35:23:30:b7:36:
cb:70:4c:66:11:95:6b:88:20:4b:29:28:7a:03:e1:0b:fc:c0:
e3:d6:fc:99:44:bb:c1:cd:71:d6:76:13:38:34:0e:2b:7c:19:
84:86:cb:bb:9d:66:ce:ed:b6:39:17:9a:9a:ef:23:6f:06:af:
fb:d1:93:de:c9:db:e8:69:c3:b8:d6:5f:31:c6:5f:58:00:0d:
cc:42:b9:d7:a3:f5:7e:16:04:75:17:23:1a:3f:df:c8:9a:f6:
e1:a3:b7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 14 10:28:51 2024 by rpki-client on console-ams.rpki-client.org