Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/Rm4gcJ8TxtdYnxYW7jlxwjcnViw.roa
File: Rm4gcJ8TxtdYnxYW7jlxwjcnViw.roa (raw, json)
Hash identifier: xiKbLuUVLbV9e4nXpndNLfsd8aERNBcoL3KWn2jJ6Yc=
Subject key identifier: 46:6E:20:70:9F:13:C6:D7:58:9F:16:16:EE:39:71:C2:37:27:56:2C
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 018CC725855473BE75C3579CB60F5F1741E2
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/Rm4gcJ8TxtdYnxYW7jlxwjcnViw.roa
Signing time: Mon 01 Jan 2024 22:29:34 +0000
ROA not before: Mon 01 Jan 2024 22:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200091
IP address blocks: 2a13:ae00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 26 Jun 2024 15:38:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:25:85:54:73:be:75:c3:57:9c:b6:0f:5f:17:41:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jan 1 22:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=466e20709f13c6d7589f1616ee3971c23727562c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:72:cd:a2:ad:41:f8:eb:1d:29:2c:4d:d3:
0f:55:68:7f:6e:1f:8c:3e:1a:82:be:3a:8b:d3:94:
99:c2:dc:1f:39:7c:2e:c2:5e:8c:1f:43:49:64:f0:
8c:8e:2a:88:76:6a:8b:0c:b8:c0:77:e7:ef:d6:6d:
fb:c0:11:be:b8:28:d8:2e:2e:03:a5:01:3e:a0:2c:
e1:9a:70:d5:de:cf:1a:69:82:84:8a:c4:f9:e7:c3:
a7:94:c5:f9:1a:b6:37:5a:19:08:59:1e:d1:e0:99:
95:5f:d8:8c:8a:cf:72:8d:cd:f0:0f:57:81:76:46:
17:a9:61:99:ca:9a:8a:82:ec:32:f9:62:cc:b1:2e:
b8:70:56:00:23:61:01:f7:4c:0e:06:67:11:b2:e8:
5a:c4:83:66:af:8a:b5:b3:1f:85:ad:c3:5f:6a:3c:
67:b2:7c:56:95:c7:51:c0:f3:12:4b:35:f0:7c:42:
e7:f3:13:a0:b9:cd:7e:19:99:4c:af:c4:b7:10:61:
69:95:ae:30:8a:94:c2:d8:82:28:5f:57:b6:c3:ff:
11:4f:1a:b8:e7:10:da:f2:ad:64:6e:65:8f:13:26:
ac:9d:1c:4e:e6:33:b9:02:b5:b3:79:84:c6:e6:ae:
e2:87:cb:f8:c5:19:3f:40:fe:8b:73:f3:11:06:66:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6E:20:70:9F:13:C6:D7:58:9F:16:16:EE:39:71:C2:37:27:56:2C
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/Rm4gcJ8TxtdYnxYW7jlxwjcnViw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ae00::/29
Signature Algorithm: sha256WithRSAEncryption
9d:e9:db:8b:75:5f:2d:4f:d7:4e:cc:94:a3:c7:5f:92:00:9d:
fa:84:c5:bf:f4:03:0a:d3:04:d4:7a:15:f3:29:e0:ce:84:2f:
6a:1e:b0:d3:29:ea:84:c2:34:99:84:c1:e9:6c:ed:bd:09:63:
ff:b3:59:d9:0d:52:b1:6b:06:4a:5a:93:a3:4c:99:24:80:24:
09:8d:02:23:17:a6:50:7f:44:44:00:b9:58:be:09:be:53:03:
aa:2f:9a:50:6f:be:06:0a:bf:88:81:98:e9:b0:e4:56:b0:7f:
b1:6a:90:6a:ae:a3:ce:30:d6:5f:57:1b:af:01:e5:fe:4e:ee:
a7:61:39:f8:72:e4:13:b7:f1:d6:e5:80:7a:8e:99:1b:f4:36:
ec:f0:d2:e1:00:ff:90:93:79:51:31:42:47:3d:46:a8:60:cf:
0e:0a:b8:ea:c7:be:29:13:cc:ba:a2:0c:96:69:e6:66:a5:cf:
f3:06:ac:b4:87:1a:f6:4a:eb:ab:82:3c:1c:6f:bb:71:84:f0:
de:97:ac:85:1a:d9:87:fc:0a:45:dd:59:aa:09:5c:02:21:15:
85:5c:79:2c:8b:13:fb:4e:b0:34:cf:6f:3b:d4:91:1a:9b:14:
c0:4e:2b:a6:99:63:92:aa:17:35:5b:36:4d:a6:e5:94:f5:95:
b4:d0:ba:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 19:05:30 2024 by rpki-client on console-fra.rpki-client.org