Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/Y2L0stWOdrhcIxwH65kMpdKeyG8.roa
File: Y2L0stWOdrhcIxwH65kMpdKeyG8.roa (raw, json)
Hash identifier: 3ymJbUDK2hZ+dHlBM7Av2qdQI/PraeUSoR3t9n93Ex0=
Subject key identifier: 63:62:F4:B2:D5:8E:76:B8:5C:23:1C:07:EB:99:0C:A5:D2:9E:C8:6F
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 018D63B2774B47EFF8B9844EB0F93C39273F
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/Y2L0stWOdrhcIxwH65kMpdKeyG8.roa
Signing time: Thu 01 Feb 2024 08:04:16 +0000
ROA not before: Thu 01 Feb 2024 08:04:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213168
IP address blocks: 2a13:8140::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Feb 2024 13:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:63:b2:77:4b:47:ef:f8:b9:84:4e:b0:f9:3c:39:27:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Feb 1 08:04:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6362f4b2d58e76b85c231c07eb990ca5d29ec86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:33:19:5a:14:50:d1:e5:c9:e4:0b:52:ce:
ec:05:b9:f7:c5:3a:13:94:b3:00:ca:82:29:d1:29:
52:67:e9:0a:54:d7:27:63:ad:41:7c:c6:3b:d7:30:
76:e2:4e:cc:75:8f:3b:4d:80:e0:db:ba:5c:d4:26:
d9:45:af:a4:ba:65:17:4b:06:7f:bc:d5:90:3f:a2:
00:c0:bf:3d:85:88:09:58:bd:5b:dd:bb:de:b7:93:
08:f8:19:f1:45:4d:6e:49:73:aa:88:6c:02:3f:bf:
db:f3:61:f4:c0:d4:9c:c2:b1:ca:bf:22:4a:fc:1f:
38:3f:99:65:a9:e3:e6:c5:15:3c:40:65:1b:c0:0a:
e7:3a:72:3c:fe:95:95:57:fb:97:8a:e8:5d:92:67:
43:1c:ac:c7:7e:aa:f8:48:5e:13:de:38:86:72:a2:
bb:e3:32:d0:a6:9f:0c:12:3d:9a:f3:12:3f:f7:d3:
9f:0a:21:b8:8b:43:fb:68:73:55:82:40:a5:56:61:
5a:43:e8:99:8d:b5:4b:30:6e:87:4f:bb:06:1a:05:
b9:32:4f:88:fc:c9:27:79:0b:20:f5:72:94:da:eb:
d1:c9:0a:1e:ed:7e:51:e9:c5:49:4f:41:a0:ce:af:
46:99:0b:1d:65:b7:74:72:40:56:20:d0:db:f7:67:
ae:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:62:F4:B2:D5:8E:76:B8:5C:23:1C:07:EB:99:0C:A5:D2:9E:C8:6F
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/Y2L0stWOdrhcIxwH65kMpdKeyG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8140::/48
Signature Algorithm: sha256WithRSAEncryption
0d:04:ca:f1:33:d4:ff:79:fd:2d:a8:44:df:e6:77:29:b0:98:
b1:3e:c3:5b:0a:e6:9b:3f:1d:9f:e4:41:a3:0c:f4:63:73:5d:
b5:49:ac:0f:2a:ab:49:81:b1:47:fe:3b:10:4e:84:66:ce:0d:
86:9c:0d:d8:15:b1:cb:3b:75:27:2e:22:68:06:73:c4:b8:be:
70:18:38:ee:60:57:c3:93:24:4c:46:1f:a1:06:03:e8:c3:37:
3d:dd:e1:08:a8:38:14:05:95:c8:7a:55:9a:e6:80:86:4e:14:
10:b6:56:ab:bd:e2:cb:50:c6:0a:46:31:28:62:74:a4:fe:f7:
a0:7f:47:98:0f:07:e8:05:91:3b:67:2f:9f:b5:60:84:fd:df:
79:09:db:22:34:ea:7b:00:8f:75:b0:84:74:de:8f:b2:84:85:
7a:91:4d:a5:48:f9:57:6e:4c:f4:c3:77:3a:66:2d:45:56:b6:
00:2a:13:eb:8a:b0:33:c0:03:b8:d3:65:d0:29:75:f8:65:80:
e8:c2:86:b8:84:45:93:ba:58:d9:2e:12:13:e4:45:5a:32:6e:
66:7e:fb:35:a0:24:cc:df:af:85:9a:48:a4:e9:ce:73:e5:bc:
aa:41:b0:e1:5b:a7:a6:c9:c1:84:90:22:c2:db:4e:80:f7:95:
0f:75:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 18:54:22 2024 by rpki-client on console-fra.rpki-client.org