Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/JcAlRvPaueXYL6yc3MoSORMuqlI.roa
File: JcAlRvPaueXYL6yc3MoSORMuqlI.roa (raw, json)
Hash identifier: sQX3zHLJeRotpluTwf5VaQl2mDPyVSETXvps+/qSjcg=
Subject key identifier: 25:C0:25:46:F3:DA:B9:E5:D8:2F:AC:9C:DC:CA:12:39:13:2E:AA:52
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 018CC86EF7A7F4B91554E01B30FFF50813E9
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/JcAlRvPaueXYL6yc3MoSORMuqlI.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213168
IP address blocks: 2a13:8140::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Jan 2024 20:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f7:a7:f4:b9:15:54:e0:1b:30:ff:f5:08:13:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=25c02546f3dab9e5d82fac9cdcca1239132eaa52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:58:75:93:e1:16:fd:96:86:7b:1e:ea:25:
88:23:86:e0:2a:82:01:06:95:46:44:45:31:45:c2:
52:11:ca:5a:7c:33:f3:c9:2c:6f:2b:cd:98:9f:a1:
e6:f1:cc:4a:28:6e:39:9c:11:e4:8f:84:72:30:19:
af:76:77:35:ee:49:d2:fc:08:9c:61:d8:99:03:ed:
96:a7:29:f7:ed:ef:28:96:21:49:30:c4:48:04:e8:
59:f7:ec:f7:51:4e:43:f4:a3:da:ce:df:a3:ff:90:
71:dc:26:a5:d6:d5:a6:04:18:1e:f0:c1:1e:28:f5:
43:c7:41:9f:84:ad:a9:8d:26:68:84:5e:6a:c6:78:
5d:fa:7f:47:14:b3:6c:30:11:1f:cf:53:c4:77:89:
51:eb:e0:ad:84:cb:f9:df:82:59:f6:16:69:24:60:
af:4b:94:b9:cc:58:4f:32:42:23:1e:90:19:82:31:
34:6f:0b:49:12:54:18:37:70:b3:f1:4b:d9:d6:35:
b6:79:2b:c5:b8:8d:22:5c:cf:81:fa:e6:be:bd:3d:
23:01:09:aa:5f:9c:f1:31:a9:80:74:b6:08:78:72:
06:f1:30:22:6b:e6:6d:bb:bd:6b:13:32:f5:e7:8a:
61:29:14:7f:38:51:d0:9a:09:2b:c2:9e:12:ad:b5:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:25:46:F3:DA:B9:E5:D8:2F:AC:9C:DC:CA:12:39:13:2E:AA:52
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/JcAlRvPaueXYL6yc3MoSORMuqlI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8140::/29
Signature Algorithm: sha256WithRSAEncryption
5c:2c:97:32:62:a5:ac:90:80:23:5b:08:04:d1:59:6d:56:87:
2c:ed:c7:31:0d:b2:e7:de:9d:87:6f:64:dc:3e:8f:48:a3:5e:
8b:cb:a4:a1:ad:cb:14:fd:f0:96:9c:b8:1a:35:4b:80:a5:65:
15:10:b1:3f:92:96:b6:34:d3:33:40:4a:14:a4:22:82:72:92:
b6:cb:ed:ae:08:e7:47:23:4c:09:9a:83:05:cb:66:dc:40:a2:
14:c5:14:e1:f5:0f:5d:49:c8:e0:98:fe:b1:05:0a:02:f1:64:
9e:09:35:c8:de:47:b0:f3:3e:45:52:4d:0c:11:8a:ec:14:9a:
06:c4:ad:86:11:fc:5b:bd:eb:7e:f5:bb:f0:a2:ad:87:85:55:
61:84:0d:e4:c4:9c:f9:25:e4:74:5e:44:19:65:9b:40:c3:9f:
64:88:b5:ca:80:25:3c:b4:3c:81:30:14:5b:b4:ba:6e:a3:8c:
0f:4b:f1:81:6d:4e:df:a2:a4:10:22:68:3f:d6:ef:a7:cb:83:
f2:d5:cd:73:36:92:10:ef:a4:03:51:ee:35:a8:65:1e:10:2a:
2d:91:aa:ec:0d:27:3c:c2:e2:d6:63:fd:fe:eb:86:8e:98:40:
1d:b7:65:29:d8:f1:09:8a:f0:a7:6f:a5:0c:af:ba:9e:de:ea:
14:99:44:b8
-----BEGIN CERTIFICATE-----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Generated at Tue Jan 30 01:06:28 2024 by rpki-client on console-fra.rpki-client.org