Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/tsgpyhrZ_w22K2Yzhq6ORN0WyPw.roa
File: tsgpyhrZ_w22K2Yzhq6ORN0WyPw.roa (raw, json)
Hash identifier: IH1wq05QQG923kaSlQU/7r6RP8jPndGxeG22msTrRJg=
Subject key identifier: B6:C8:29:CA:1A:D9:FF:0D:B6:2B:66:33:86:AE:8E:44:DD:16:C8:FC
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 018CC3B6B39E478FA95751DAFDA304178E1E
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/tsgpyhrZ_w22K2Yzhq6ORN0WyPw.roa
Signing time: Mon 01 Jan 2024 06:29:39 +0000
ROA not before: Mon 01 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57521
IP address blocks: 2a13:bc2:6::/48 maxlen: 48
2a13:bc2::/48 maxlen: 48
2a13:bc2:3::/48 maxlen: 48
2a13:bc2:2::/48 maxlen: 48
2a13:bc2:5::/48 maxlen: 48
2a13:bc2:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 11:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b3:9e:47:8f:a9:57:51:da:fd:a3:04:17:8e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6c829ca1ad9ff0db62b663386ae8e44dd16c8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:31:09:da:9f:6a:c6:d8:38:5d:e0:d2:90:
1c:02:25:76:21:bb:ad:8e:3a:c1:ab:8e:3e:32:21:
34:d5:20:6c:53:69:16:20:d9:c9:b0:2f:89:3d:31:
ab:e8:14:d2:d1:fa:df:b4:f6:12:b9:7d:2c:d3:af:
7a:37:74:09:9f:36:ac:f1:00:4e:fb:f5:e0:d2:b8:
99:6d:e1:39:a6:94:7f:e2:f2:25:44:c5:bb:f7:a7:
6a:bf:46:5a:cf:4b:55:59:9d:fa:62:da:10:ae:66:
d8:00:3e:ae:3a:95:c1:e2:dc:09:f5:fb:1a:0a:f0:
36:30:f1:b8:80:ef:d4:bc:e6:b5:4d:14:b7:81:55:
d1:d8:40:df:bb:7e:c6:9f:c8:55:1c:75:73:c1:6a:
b4:66:30:b0:41:96:01:6b:3a:49:64:4c:4b:38:24:
23:d2:21:e7:88:a1:31:11:a6:21:e2:f3:c2:ba:3f:
80:20:da:9c:55:b1:35:9c:6f:89:d7:1d:92:e8:cb:
ff:f7:5b:1a:13:ed:01:6e:94:38:dc:dd:3e:0d:69:
f1:45:94:f2:f1:90:03:b1:8a:80:44:86:c8:3a:87:
08:79:d4:62:e8:cb:18:c7:91:a3:fe:b0:d3:ba:3d:
61:4c:ae:22:7d:e3:98:9d:84:97:1f:40:29:b1:25:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:29:CA:1A:D9:FF:0D:B6:2B:66:33:86:AE:8E:44:DD:16:C8:FC
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/tsgpyhrZ_w22K2Yzhq6ORN0WyPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2::/48
2a13:bc2:2::-2a13:bc2:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
78:0a:9c:cb:00:33:26:41:6d:51:65:e8:0d:b5:08:08:fc:7d:
2b:b8:32:5a:8c:cf:6b:c9:11:64:61:1f:bd:8a:0d:d7:04:d0:
d1:53:af:4b:2e:08:90:67:8b:8f:9d:19:b3:9d:02:dc:d7:d4:
89:f3:45:fc:c1:53:b1:9e:51:a1:f1:12:af:0e:4d:dc:c2:12:
8e:4c:cc:5a:1c:a2:41:8d:38:67:bf:10:38:78:28:0a:03:4f:
fb:97:f7:95:27:ef:e1:79:8b:df:e3:c2:c3:e5:01:a2:49:65:
07:0c:27:e5:bb:48:21:d6:29:d2:67:54:0b:8d:87:59:4f:fa:
57:9b:3b:cb:b7:44:86:7a:2e:50:73:fd:56:86:ea:74:73:d7:
ab:7f:1f:4a:6e:aa:b8:40:3d:e1:f1:26:57:ff:6c:12:9a:da:
e7:bd:10:d2:df:e6:bf:c9:df:60:e2:5b:3c:3a:ec:df:75:48:
d2:f6:e5:72:47:1d:75:9b:6b:89:b7:07:9b:48:c2:ba:c7:73:
d5:1a:84:72:a4:24:8d:cf:94:1e:8c:66:d1:da:e8:d3:6b:19:
20:08:32:c5:2d:a8:36:b9:0a:78:96:0c:3c:65:0e:c4:b9:2d:
c7:bc:dc:4f:ff:ab:79:54:60:8f:08:33:0a:56:5c:0c:2a:23:
a9:0a:c6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org