Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/rjt_kEnme-yJVeHDuKN1EmTgUZc.roa
File: rjt_kEnme-yJVeHDuKN1EmTgUZc.roa (raw, json)
Hash identifier: DKLwzf1/umg3cK0Rb4pyXhyQMGMCe0/Z3ruF0dnA9wc=
Subject key identifier: AE:3B:7F:90:49:E6:7B:EC:89:55:E1:C3:B8:A3:75:12:64:E0:51:97
Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Certificate serial: 018D45C11AB25BA980377954685D6CC0A9A3
Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/rjt_kEnme-yJVeHDuKN1EmTgUZc.roa
Signing time: Fri 26 Jan 2024 12:31:39 +0000
ROA not before: Fri 26 Jan 2024 12:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42831
IP address blocks: 2a13:55c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Jan 2024 12:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:c1:1a:b2:5b:a9:80:37:79:54:68:5d:6c:c0:a9:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848
Validity
Not Before: Jan 26 12:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae3b7f9049e67bec8955e1c3b8a3751264e05197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:a9:6a:80:d0:bb:ef:53:41:dd:e4:06:1f:
7f:26:e7:78:7f:eb:ca:d6:37:f1:1d:cf:7a:c2:b0:
20:04:75:b9:9d:02:72:ac:2e:be:e5:30:37:69:82:
1b:03:f8:7e:4e:14:8a:0d:c4:02:f4:28:fd:c8:7a:
15:07:f2:34:fd:94:5c:2c:3d:55:93:08:1d:5e:d4:
69:47:e0:69:21:e2:3a:37:75:38:18:93:d0:9c:73:
c5:44:ac:60:58:5c:ac:61:48:36:fa:95:a3:98:58:
26:d1:5d:b6:95:1b:53:e1:30:b9:bf:dc:cb:b0:d6:
a1:50:df:52:3b:21:5f:74:c9:2b:2f:2f:24:e1:2b:
a1:58:c2:45:70:8e:54:9b:18:56:09:d2:f8:38:76:
2c:2e:32:05:97:02:c8:fc:aa:de:79:e5:d2:90:98:
3b:a8:1b:6c:bb:96:42:8e:e2:45:33:41:cc:dd:2c:
27:df:25:ee:51:ec:bc:8c:94:54:12:1b:3b:66:ac:
80:dc:61:c8:1a:b7:a8:2a:a2:fd:49:21:f1:0b:76:
59:75:98:cf:24:4d:6e:64:08:1f:53:b6:69:f3:e5:
6e:54:fb:f2:e7:cd:77:ed:ae:2a:d1:79:e8:74:62:
3d:86:8e:9c:59:51:cb:d9:4e:ef:83:79:f9:9d:c2:
6a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:7F:90:49:E6:7B:EC:89:55:E1:C3:B8:A3:75:12:64:E0:51:97
X509v3 Authority Key Identifier:
keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/rjt_kEnme-yJVeHDuKN1EmTgUZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:55c0::/29
Signature Algorithm: sha256WithRSAEncryption
a0:55:77:5c:4a:0f:ca:eb:5a:94:d7:68:1a:69:f4:7f:fb:1f:
80:9f:8f:1e:f0:9a:6a:cd:f5:31:a8:d3:61:a2:8a:01:60:a4:
62:a7:e8:ed:f8:f2:d1:44:c9:f1:7a:da:98:d3:41:f3:98:e9:
84:cd:b6:4a:d6:22:72:ad:2b:63:84:a5:40:54:1f:fe:2b:4d:
81:6e:b8:c2:32:2d:e3:6f:c8:16:cf:44:5c:f2:27:cc:9d:52:
1b:2f:8f:71:2a:72:8a:93:22:31:f4:15:d7:44:21:bc:f8:e7:
15:b9:30:84:7f:8a:37:ee:7e:d1:ac:b8:db:84:be:81:6a:0a:
bb:5e:99:82:3e:f2:ac:aa:b2:eb:a8:61:35:d6:39:b4:80:d7:
a0:6c:fa:20:b8:e8:c8:ab:29:16:cf:ce:8b:b6:31:9f:b5:7b:
e4:13:80:ab:0d:db:ff:ef:44:57:e3:ea:40:29:03:71:be:ac:
6a:31:06:c0:47:ff:4b:b8:d8:83:9c:33:d1:09:33:1f:3a:00:
7f:62:ec:46:88:46:75:29:5c:c6:05:8a:1d:9a:34:95:19:8f:
c4:c6:38:5c:52:1f:20:ca:1b:ae:a1:7f:96:6a:67:8f:38:42:
ae:de:c0:00:62:97:bb:7b:16:a2:0b:c0:13:50:78:01:32:91:
33:20:dd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:08 2024 by rpki-client on console-ams.rpki-client.org