Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/WRB1RrLqlJh_FEInU3bKUcxsumo.roa
File: WRB1RrLqlJh_FEInU3bKUcxsumo.roa (raw, json)
Hash identifier: Z+4N3v20xtSVtsOysSBZA+zCj2TAPSQ4d809v9Cr1fI=
Subject key identifier: 59:10:75:46:B2:EA:94:98:7F:14:42:27:53:76:CA:51:CC:6C:BA:6A
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 01894E55C8839ADEF0A75AA4B3610EE58932
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/WRB1RrLqlJh_FEInU3bKUcxsumo.roa
Signing time: Thu 13 Jul 2023 08:19:51 +0000
ROA not before: Thu 13 Jul 2023 08:19:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25521
IP address blocks: 2a13:8f40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Jul 2023 08:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:55:c8:83:9a:de:f0:a7:5a:a4:b3:61:0e:e5:89:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Jul 13 08:19:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59107546b2ea94987f1442275376ca51cc6cba6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:50:a2:26:ef:03:49:ec:3b:d1:a7:6d:5f:
14:40:6d:8f:ba:12:29:00:d0:43:55:a6:3b:0e:67:
bb:a0:5b:bd:2f:4b:fb:d6:03:4c:6f:ca:fb:a0:b3:
0a:de:65:48:62:d5:d8:11:e2:27:a1:03:1f:48:ed:
9c:fd:e2:9b:38:41:d6:7e:ba:9d:00:96:d9:cf:81:
db:31:cc:3e:b7:6e:e3:8c:5c:fe:9b:e4:3a:c8:3e:
9e:82:7b:9e:1d:dd:ec:a8:23:b9:23:71:5f:a7:18:
a2:ed:05:13:5c:46:b3:d4:81:91:12:88:1a:8d:11:
f3:84:f1:46:79:4e:b4:07:31:06:98:59:5b:d5:47:
17:44:aa:60:9c:ef:ff:62:e7:cf:66:32:a1:50:5f:
43:f5:4b:f1:93:fc:9d:b4:5d:28:48:e8:df:dd:14:
43:6f:f7:7e:3e:89:1a:80:9b:1d:8e:bb:75:c5:7b:
19:c2:2b:2f:a5:37:8d:f1:7d:d9:f9:0c:82:06:7d:
78:8e:d8:a2:44:4d:39:52:85:15:7f:7b:a3:c2:84:
3b:3d:d4:c6:58:4a:fc:1e:c2:13:8d:31:08:0c:ee:
7a:f1:2f:57:fb:a5:54:4a:54:e4:e0:96:24:c2:79:
8f:bb:82:8c:35:04:e0:3a:5d:84:6c:0f:7e:13:fa:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:10:75:46:B2:EA:94:98:7F:14:42:27:53:76:CA:51:CC:6C:BA:6A
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/WRB1RrLqlJh_FEInU3bKUcxsumo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8f40::/29
Signature Algorithm: sha256WithRSAEncryption
0b:59:7c:f6:3b:c9:42:51:4f:2d:26:87:ce:fd:42:2f:88:f5:
2e:dc:a9:90:18:ad:0b:aa:75:bb:9b:68:81:7b:3e:20:fa:bc:
a8:60:95:f9:f0:ca:27:69:8c:7d:c0:00:6d:91:16:c1:bc:83:
88:7b:b3:81:c3:36:8e:24:cf:69:ed:79:35:fd:9e:f8:8e:14:
1e:f0:5a:99:da:5a:57:80:6f:96:c4:e0:b7:d8:c7:db:cb:fb:
c2:c8:41:64:f0:ba:cc:01:9a:67:52:52:06:c4:85:f4:63:1f:
2b:73:83:ae:12:57:89:94:c0:b4:ea:e7:c4:19:7f:82:40:97:
b5:c4:25:2a:14:9b:46:8a:7b:11:49:d9:9e:dc:02:6b:a6:a8:
39:48:8d:58:bf:0f:d0:32:8f:3c:44:bb:a9:18:bf:6e:84:b4:
78:8c:4a:fa:d1:8c:58:56:6e:b0:82:4e:ce:2f:86:8c:74:97:
79:e9:44:0d:f8:1d:ce:c0:2a:15:c4:85:a3:a3:99:54:18:82:
4e:fe:0c:b2:52:40:44:10:0d:03:8e:27:ef:cb:b8:15:fc:7a:
c3:da:97:04:a3:3b:aa:70:ba:c5:77:a3:ac:fc:8b:2a:ff:28:
51:f3:15:75:a5:ee:63:99:03:d8:64:52:54:a0:78:57:fa:52:
cf:fb:a9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:24 2024 by rpki-client on console-fra.rpki-client.org