Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ESlbN5Hjr6kObfXlUWE96dxCFyk.roa
File: ESlbN5Hjr6kObfXlUWE96dxCFyk.roa (raw, json)
Hash identifier: ObZiiUEBA3J6LnKRvRs0a9yyKt1poMvZ8oRseIqeRDQ=
Subject key identifier: 11:29:5B:37:91:E3:AF:A9:0E:6D:F5:E5:51:61:3D:E9:DC:42:17:29
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018FF42AA99D2E07A593417D0D4BBD49F930
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ESlbN5Hjr6kObfXlUWE96dxCFyk.roa
Signing time: Fri 07 Jun 2024 19:26:27 +0000
ROA not before: Fri 07 Jun 2024 19:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202044
IP address blocks: 2a13:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 22 Sep 2024 19:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f4:2a:a9:9d:2e:07:a5:93:41:7d:0d:4b:bd:49:f9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jun 7 19:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11295b3791e3afa90e6df5e551613de9dc421729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:a9:b7:cc:64:2f:0a:5d:5d:d9:96:85:52:
a6:67:d7:7a:cd:d8:36:08:d4:31:21:f9:c5:3c:19:
ed:73:bd:51:52:67:87:7c:59:16:81:0d:aa:99:d3:
8d:2b:ad:27:9e:26:07:25:63:76:26:9c:22:c5:b1:
a9:c0:30:28:da:9d:4f:b5:db:2e:1b:a8:4e:8c:72:
11:4a:2f:57:9b:e4:2a:fa:61:84:28:48:ca:87:96:
7c:48:3d:dd:6b:e4:b5:6a:a3:46:ba:17:69:ce:85:
6b:1e:5c:09:81:a0:c6:12:fc:e9:c8:8d:93:f4:aa:
37:14:a7:7b:d5:59:1a:9b:3d:ba:a6:8e:18:af:0a:
1e:1d:60:13:0d:88:0c:91:ae:85:a0:67:82:3c:50:
91:bb:9f:06:4c:a6:df:b4:51:7d:09:2f:18:d1:a1:
a8:ea:93:1f:0d:1e:ac:1d:65:1e:be:de:dd:c5:8d:
8e:2a:37:18:5c:18:ba:dd:51:60:de:38:a8:c5:18:
c7:81:28:0a:f4:e7:a4:3a:de:d3:dd:f3:d2:a1:7b:
b5:ca:93:b9:03:54:ae:b4:f6:82:e0:bc:48:1f:89:
67:04:9a:f3:f2:8b:0a:25:4f:31:ef:5a:67:df:47:
6c:6a:60:ec:57:06:e0:87:6c:dd:03:ae:71:c5:5d:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:5B:37:91:E3:AF:A9:0E:6D:F5:E5:51:61:3D:E9:DC:42:17:29
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/ESlbN5Hjr6kObfXlUWE96dxCFyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
9c:7b:22:1a:46:db:2a:ff:21:e0:9e:cb:7f:47:57:9f:e6:95:
2d:b8:e8:31:04:7f:1a:65:9d:cb:2c:46:1e:29:0b:12:4f:e6:
0f:c6:02:75:a8:b5:bb:b5:3a:0c:ff:68:36:ed:8f:b4:85:eb:
c2:bc:c7:0d:84:d2:ee:f3:e2:18:2a:37:b6:7b:d2:c5:94:bc:
8a:ec:90:07:2e:f8:74:02:45:e8:f7:26:64:28:8b:21:1b:3d:
19:92:ac:6a:0a:f3:36:44:80:72:27:b1:f6:4f:25:95:b0:c8:
55:5e:55:9d:bc:c5:87:d4:6d:03:c2:36:1b:37:57:3b:54:40:
a1:c3:a4:4e:dc:eb:f6:d7:b0:51:45:e4:d5:83:12:76:1e:28:
f5:a6:3f:8f:5c:d8:db:96:09:6f:d5:a2:68:f5:b4:40:a5:f3:
0c:e9:94:4c:ed:bd:ed:87:f5:fc:59:6e:61:dc:21:41:7c:c4:
d8:8f:54:3a:b9:2b:09:48:e8:37:97:9e:31:a1:3a:eb:51:59:
82:12:98:f9:c0:55:26:38:11:0e:a1:e0:96:8b:61:39:c6:e0:
2f:7d:19:b3:2b:4f:0a:08:26:22:45:96:8b:b4:65:24:e6:14:
1c:98:45:c7:82:2d:7f:68:46:43:4a:91:0b:c6:cd:83:4f:b0:
98:79:44:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 00:52:45 2024 by rpki-client on console-ams.rpki-client.org