Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/TtB9_omXDcVVKYRC-UbPr1hdGU8.roa
File: TtB9_omXDcVVKYRC-UbPr1hdGU8.roa (raw, json)
Hash identifier: wjF1mNDkFRa2FaBYvNh2xloY1WxDTtypa3NZlhW8Bng=
Subject key identifier: 4E:D0:7D:FE:89:97:0D:C5:55:29:84:42:F9:46:CF:AF:58:5D:19:4F
Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial: 018C3347EF75517BAF73266B9131FEA13E03
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/TtB9_omXDcVVKYRC-UbPr1hdGU8.roa
Signing time: Mon 04 Dec 2023 05:23:21 +0000
ROA not before: Mon 04 Dec 2023 05:23:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216321
IP address blocks: 2a13:d8c0::/32 maxlen: 32
2a13:d8c6::/32 maxlen: 32
2a13:d8c5::/32 maxlen: 32
2a13:d8c2::/32 maxlen: 32
2a13:d8c1::/32 maxlen: 32
2a13:d8c1:ce00::/40 maxlen: 40
2a13:d8c1:fe00::/40 maxlen: 40
2a13:d8c3::/32 maxlen: 32
2a13:d8c4::/32 maxlen: 32
2a13:d8c7::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:33:47:ef:75:51:7b:af:73:26:6b:91:31:fe:a1:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Validity
Not Before: Dec 4 05:23:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed07dfe89970dc555298442f946cfaf585d194f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:e7:3e:af:4d:2c:be:b8:8d:61:db:ac:f9:
ba:b0:00:77:a0:5c:40:c3:98:82:a7:02:bf:6f:d2:
bb:78:a8:54:fd:21:c2:b0:54:fa:bd:3c:28:4b:67:
0c:6f:12:e7:cf:1e:57:f3:97:59:50:dc:39:a2:48:
37:74:b8:c9:7c:a5:bf:65:b1:fc:7a:81:aa:36:53:
23:1e:7a:b5:e3:a5:74:f5:64:1a:ac:66:b5:0e:17:
de:ff:42:af:28:01:8c:bb:c5:d1:e6:3b:c7:15:86:
d0:eb:a4:54:28:00:af:59:8e:ed:30:01:b1:fb:c9:
e3:21:7b:43:1b:6e:c0:f3:1f:08:bb:cf:40:0a:2b:
de:41:98:2c:48:4d:57:2a:fa:d2:c1:8c:02:46:1b:
b4:48:a9:b8:82:e3:16:71:22:00:09:61:9b:e7:4e:
53:62:02:60:be:46:55:02:5c:a5:39:e9:64:1d:89:
f6:f9:85:b2:a1:39:1e:8b:72:8f:06:fb:58:09:f7:
64:ef:c9:18:09:10:47:59:cb:70:04:25:d3:55:9b:
7e:f7:1c:08:5c:c0:ee:1c:d8:22:42:5a:4c:ea:94:
3a:f1:aa:a5:ce:41:b5:47:bf:3d:05:2f:68:37:6b:
9c:5c:fa:bb:f1:52:75:da:52:26:4b:23:a6:6e:c7:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:7D:FE:89:97:0D:C5:55:29:84:42:F9:46:CF:AF:58:5D:19:4F
X509v3 Authority Key Identifier:
keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/TtB9_omXDcVVKYRC-UbPr1hdGU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d8c0::/29
Signature Algorithm: sha256WithRSAEncryption
84:92:38:85:a8:42:ff:20:08:d9:fd:e7:cc:8a:c1:59:c0:78:
39:7e:6d:cf:0d:13:ad:a9:f7:d2:b5:d6:ab:21:ca:65:36:d2:
13:c7:c6:a5:82:00:11:70:65:5a:c1:02:f6:a9:e0:40:b4:28:
36:73:b3:92:50:87:81:d6:bf:1c:b4:0b:de:ff:a9:e8:6a:76:
0b:87:e9:9b:fb:1a:8c:d5:a3:bf:8f:ca:90:6a:84:9e:64:78:
3b:16:2d:51:25:11:bf:2f:d6:b8:72:8b:61:52:63:39:81:23:
8f:dd:8d:9d:52:59:39:48:d9:e6:15:41:8d:90:ae:7e:ec:fd:
88:f7:01:90:ff:3e:66:de:83:65:bc:83:de:7d:1e:d1:14:91:
8e:7d:85:db:ef:9b:f8:27:b4:07:b4:19:18:32:8f:0a:a7:16:
1c:10:86:f9:ee:a5:b1:e1:0c:03:88:f2:99:74:33:87:d2:5c:
0b:2b:09:ec:a9:02:24:ac:26:86:20:d6:c9:68:59:85:d7:3d:
b5:cc:1e:51:67:8c:1d:cf:a3:6f:01:71:bd:86:7f:9d:60:e6:
47:06:21:72:e4:23:9c:90:ca:3c:02:28:34:e6:e3:03:c3:34:
51:bd:71:82:1b:fc:6a:a4:c7:af:71:94:9e:79:89:a5:0d:d6:
01:3b:c8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:22 2024 by rpki-client on console-ams.rpki-client.org