Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8vtNmR46FYoUHzM6YuAHPEAPeGo.roa
File: 8vtNmR46FYoUHzM6YuAHPEAPeGo.roa (raw, json)
Hash identifier: bFAd0SviSFu2ZlDTPPipwLIV1JnNmOmJGpEuK4W6LLQ=
Subject key identifier: F2:FB:4D:99:1E:3A:15:8A:14:1F:33:3A:62:E0:07:3C:40:0F:78:6A
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018FF926E8CA2AB440DF03F2DFAF59689D21
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8vtNmR46FYoUHzM6YuAHPEAPeGo.roa
Signing time: Sat 08 Jun 2024 18:40:27 +0000
ROA not before: Sat 08 Jun 2024 18:40:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215568
IP address blocks: 2a13:bf40::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Jun 2024 13:08:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:26:e8:ca:2a:b4:40:df:03:f2:df:af:59:68:9d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 8 18:40:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2fb4d991e3a158a141f333a62e0073c400f786a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cd:d3:29:5e:ad:5a:dc:e0:21:6d:23:6c:81:
0b:35:07:ca:b5:f3:86:6b:45:47:b8:26:d5:54:5c:
64:9d:c9:2b:fb:5e:5a:08:37:88:1f:60:7b:52:82:
c3:bf:5c:07:d0:99:ec:0f:d3:0d:02:88:42:af:7f:
59:65:40:2c:aa:e0:dc:d4:a6:60:74:e2:47:84:1a:
9d:55:aa:2b:f1:1f:90:a1:a2:3f:ca:f7:ff:fe:b5:
d7:69:98:e3:a3:88:d7:0e:18:0b:e6:50:6b:61:58:
41:c2:8e:16:a4:c4:f1:6b:af:ec:37:55:24:15:83:
4c:d0:ea:f4:db:1a:76:3f:99:b8:dd:c3:56:c8:d3:
e7:1b:8b:ab:c6:8c:ae:da:68:0f:1a:17:57:3b:69:
96:62:e2:15:d0:b1:ed:aa:2c:ab:f8:0c:dc:a4:f3:
b1:0f:75:e3:60:16:b9:f2:42:aa:6f:42:4f:76:23:
ac:b2:c0:01:57:72:af:f6:95:9a:42:f0:37:b4:44:
16:4e:95:b8:e3:d0:c2:a2:67:b6:98:ef:6f:a8:cf:
f5:77:9a:2b:d6:a7:4f:1f:81:e6:07:52:19:1f:ec:
00:ef:22:ea:0a:c4:cb:8d:dd:9c:93:99:28:4d:97:
24:d6:5c:4a:73:a8:63:70:5a:9a:f8:52:f9:ef:6b:
a1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FB:4D:99:1E:3A:15:8A:14:1F:33:3A:62:E0:07:3C:40:0F:78:6A
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/8vtNmR46FYoUHzM6YuAHPEAPeGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bf40::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
49:ac:5a:81:a3:14:8a:44:93:de:ce:9b:0e:2c:f1:22:06:76:
01:69:17:bc:f7:32:a2:13:fa:6e:ad:72:7b:c2:e5:f9:9d:4e:
3f:bf:79:f3:76:f3:9e:c2:66:f2:d4:b7:17:0a:d4:29:ed:54:
6b:64:c1:bb:f7:15:0e:84:b5:1a:71:95:d9:f2:43:a6:04:6e:
7a:7f:81:c5:04:8b:9d:2f:24:bc:67:3c:b3:92:4b:cd:81:3d:
68:09:a1:b8:6d:5d:d9:9d:02:b6:58:0e:e2:f1:ac:99:2e:7b:
06:96:5c:d7:9c:3d:de:e2:17:c4:f5:93:51:38:70:ca:28:cc:
d6:9b:68:90:68:fa:75:0d:59:5a:82:05:d3:1c:18:43:e7:50:
9c:16:48:f7:c6:42:0f:71:49:0c:e0:17:64:06:69:71:c3:02:
06:88:c5:31:26:f6:05:7a:c0:4b:cd:c5:8e:99:79:04:37:95:
0a:df:c7:2a:2b:ec:3a:ff:a7:f4:1b:0b:88:98:bb:3f:b4:dd:
1b:81:60:b6:b7:aa:ed:af:8b:cc:68:16:1f:95:98:08:cf:96:
59:26:08:b4:c0:48:05:73:85:60:9e:b2:b1:d2:2e:08:bb:64:
59:5e:77:da:3c:57:c9:44:d0:41:e6:e1:f6:a2:84:a7:be:27:
02:55:2e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:06 2024 by rpki-client on console-fra.rpki-client.org