Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-fQ0TTRHXp6XpceToi-sYkChiEs.roa
File: 1-fQ0TTRHXp6XpceToi-sYkChiEs.roa (raw, json)
Hash identifier: kiXoBlAOVC2MVYQ7NexQyWcokiVmXeCc8x0IyxJ3hAA=
Subject key identifier: F9:F4:34:4D:34:47:5E:9E:97:A5:C7:93:A2:2F:AC:62:40:A1:88:4B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018ECD180472AE1DC3296B4EF5C9A21CFE08
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-fQ0TTRHXp6XpceToi-sYkChiEs.roa
Signing time: Thu 11 Apr 2024 12:18:06 +0000
ROA not before: Thu 11 Apr 2024 12:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a13:f080::/32 maxlen: 32
2a13:f081::/32 maxlen: 32
2a13:f082::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cd:18:04:72:ae:1d:c3:29:6b:4e:f5:c9:a2:1c:fe:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 11 12:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9f4344d34475e9e97a5c793a22fac6240a1884b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:33:e4:d9:12:2e:d5:64:66:84:9a:d9:27:
48:bc:f4:e2:06:50:72:9d:0f:ae:cb:c8:1e:cb:6b:
6c:ac:b3:f3:de:e8:74:5f:8c:7c:fe:f8:fb:91:73:
a5:1a:cb:3f:95:ad:ce:38:b6:67:52:f4:47:cc:09:
35:44:e8:1d:e3:cc:9e:b5:c6:d5:82:ea:55:94:39:
50:37:86:0d:65:4d:da:af:ac:bb:ba:2d:69:68:1f:
0b:46:ea:a1:b9:7f:45:0a:6f:03:21:2a:65:85:92:
5b:84:e2:24:95:76:69:78:64:fa:e8:a0:ba:ae:4d:
5c:47:a2:6d:8f:5e:b9:1c:48:99:76:fd:60:9f:42:
72:a4:f6:bc:9f:62:94:3b:5c:0c:e3:be:3b:96:21:
26:46:40:d5:5d:be:a7:09:9a:af:09:5b:4d:4d:1c:
62:b0:7d:fc:4f:e4:16:a8:6a:0f:57:07:59:fc:d5:
8a:b1:bb:62:43:c9:6c:4e:67:47:57:d0:53:13:fd:
ca:cc:17:a5:ea:c1:4d:e1:1e:35:41:ab:e6:84:75:
34:9a:11:70:ef:49:f7:b7:dc:a6:90:17:84:24:de:
8f:d8:3e:48:83:fe:6b:6f:6a:57:0f:6d:8a:7b:a6:
2a:da:9e:0d:d0:4b:8c:be:d8:75:ae:06:34:c8:6f:
21:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F4:34:4D:34:47:5E:9E:97:A5:C7:93:A2:2F:AC:62:40:A1:88:4B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/1-fQ0TTRHXp6XpceToi-sYkChiEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f080::-2a13:f082:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
50:b0:78:96:4a:57:56:72:0d:ce:b6:72:e7:3d:65:16:43:d9:
ee:0b:0e:69:b1:6e:af:85:9c:0c:74:25:3f:65:e2:30:24:54:
34:55:5d:91:56:70:2a:e3:22:0b:c9:4f:93:db:5d:5b:83:78:
c9:1e:89:70:b6:af:e9:63:32:89:99:13:e4:31:5e:00:78:b9:
bb:18:2c:37:a4:5e:c9:0c:5e:d7:d5:24:ee:ec:78:f5:8b:ac:
a6:68:e9:a8:d1:60:69:f9:33:88:92:ec:26:14:16:30:fa:ee:
4b:8e:73:be:4f:fd:5c:97:ad:86:5d:b7:60:da:d6:03:60:66:
27:5b:ba:59:72:d2:6e:e5:52:8f:ca:55:11:f0:f0:a2:88:83:
1f:fb:2b:34:56:23:4c:54:97:b9:6d:c4:29:f7:f6:21:87:05:
fc:56:2f:98:df:9d:2e:80:0f:de:08:23:94:71:97:22:15:fa:
e6:bf:8f:e6:33:bb:f5:d7:92:27:72:41:45:47:ff:1b:c4:27:
0d:df:cb:19:05:09:06:91:08:dd:95:57:34:5e:e1:31:f1:a9:
04:96:17:b3:06:9f:c7:2a:ba:bd:25:bc:f7:29:1d:a0:cb:6e:
ee:99:d9:5d:8f:ac:bf:29:81:41:da:2a:ec:81:18:6c:eb:c5:
61:22:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:12:09 2024 by rpki-client on console-ams.rpki-client.org