Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/dFpC8yzZAoBXKBB3hIc-skCt7LA.roa
File: dFpC8yzZAoBXKBB3hIc-skCt7LA.roa (raw, json)
Hash identifier: zu+S08ZCXC3KCEncNndqiquMA1MqndrhOmDM1B2hcT8=
Subject key identifier: 74:5A:42:F3:2C:D9:02:80:57:28:10:77:84:87:3E:B2:40:AD:EC:B0
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 01894CB9CCC006A46633AF0F13A3F60AB5A6
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/dFpC8yzZAoBXKBB3hIc-skCt7LA.roa
Signing time: Thu 13 Jul 2023 00:49:52 +0000
ROA not before: Thu 13 Jul 2023 00:49:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213168
IP address blocks: 2a13:8140::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4c:b9:cc:c0:06:a4:66:33:af:0f:13:a3:f6:0a:b5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Jul 13 00:49:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=745a42f32cd902805728107784873eb240adecb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c2:51:46:ce:64:84:a5:79:57:86:a9:0a:75:
08:a5:1e:49:9d:ed:7e:74:6a:cc:7e:54:df:5a:49:
d2:60:3a:2c:72:c9:79:ba:3b:f2:86:19:1d:4b:0e:
17:f5:70:d0:02:fd:d8:bf:9b:65:93:07:cb:c8:22:
19:d4:08:87:04:49:26:72:78:7b:ae:5f:c8:0b:84:
b1:c4:45:8c:3c:46:87:8c:8f:b1:23:dd:12:67:cb:
c5:a2:0b:a5:22:f1:e2:88:fd:d5:ce:07:a2:f4:0c:
95:2e:bc:26:30:c9:9b:90:8e:4c:0f:0a:2a:71:eb:
d5:fc:8d:8b:dd:ec:cb:00:2e:b8:c7:4e:aa:ac:a9:
3c:c1:3c:86:ec:c9:cb:98:4a:a5:6d:7c:28:ad:d8:
df:bf:29:f8:12:d9:4e:36:bb:d3:01:bb:55:31:85:
51:c6:5a:93:da:4a:91:42:47:a7:f3:cc:7f:a9:de:
9d:32:f4:7c:4d:13:83:f2:95:95:0d:be:57:f9:88:
f9:cd:22:1a:40:0f:64:79:d6:b1:8e:ef:13:31:a8:
03:d1:58:05:e5:aa:61:70:ac:f3:84:0b:63:bb:8b:
c7:5b:f3:99:1c:45:fb:fd:f9:f9:aa:4a:7b:04:c1:
6d:85:e5:b1:3d:95:a4:91:0b:95:60:92:72:d7:3a:
19:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:42:F3:2C:D9:02:80:57:28:10:77:84:87:3E:B2:40:AD:EC:B0
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/dFpC8yzZAoBXKBB3hIc-skCt7LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8140::/29
Signature Algorithm: sha256WithRSAEncryption
06:50:1f:0a:b9:4c:ef:8f:1a:01:47:ea:a4:58:02:c6:9f:0b:
6c:a5:1f:00:31:e3:da:1f:74:67:12:ed:c8:4d:bd:9b:40:79:
93:9e:7c:5b:b3:ab:bc:61:de:45:f7:8a:5c:d1:8b:8c:bc:1d:
19:ee:4c:47:54:60:66:12:b8:32:c9:c9:c4:2a:dd:5f:bf:e4:
c2:c3:cf:66:c9:e9:f5:42:28:87:12:13:ae:e5:5a:1a:22:43:
92:d3:fc:70:c3:8c:81:ee:ad:eb:6f:7f:5e:3d:ee:7c:c9:0b:
1f:13:16:d6:24:bb:15:31:ae:b4:9f:55:ad:a9:27:fe:41:52:
6f:c5:a3:0d:e8:97:ec:13:b6:36:95:74:f1:fe:e6:30:cb:26:
bf:e4:62:d2:80:5d:31:bf:86:64:26:bb:79:d9:dc:ba:f9:34:
54:d3:85:53:72:2b:f8:d4:f0:53:9c:41:13:43:7a:51:5a:eb:
0a:64:08:67:00:04:08:d1:00:c4:8d:73:b6:db:c7:e9:5f:7d:
00:41:3d:d7:bf:70:0a:04:9f:a1:e3:1b:4c:cb:85:b2:c6:2f:
f4:ff:10:04:c8:56:02:42:7a:0f:65:1f:6c:fc:12:20:c2:97:
78:de:79:63:4b:4a:cb:6b:dd:67:38:2a:31:c9:62:2f:03:d6:
70:14:66:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:57 2024 by rpki-client on console-ams.rpki-client.org