Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/xefTcdJYKDdBC9lrnefsAFurZoM.roa
File: xefTcdJYKDdBC9lrnefsAFurZoM.roa (raw, json)
Hash identifier: AQ1pMm/rXteS+/SBGzFOHjHkOKwpsIHmN0R97+ktyPo=
Subject key identifier: C5:E7:D3:71:D2:58:28:37:41:0B:D9:6B:9D:E7:EC:00:5B:AB:66:83
Certificate issuer: /CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Certificate serial: 018D5714D59EF0FD1807BD6CA760A76EE720
Authority key identifier: E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/xefTcdJYKDdBC9lrnefsAFurZoM.roa
Signing time: Mon 29 Jan 2024 21:16:39 +0000
ROA not before: Mon 29 Jan 2024 21:16:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213168
IP address blocks: 2a13:8140::/29 maxlen: 29
2a13:8140::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 08:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:57:14:d5:9e:f0:fd:18:07:bd:6c:a7:60:a7:6e:e7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8b62bbe9eeb5a3d66e1cc223adedc53b177c4ee
Validity
Not Before: Jan 29 21:16:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5e7d371d2582837410bd96b9de7ec005bab6683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ae:bc:8d:1e:b2:b9:d2:4e:a3:41:1f:f3:6d:
85:7d:31:b5:26:50:57:8b:6f:ac:f8:21:18:cf:6d:
58:e8:1d:b5:8a:40:6b:e8:0a:ec:ef:55:20:14:d2:
86:de:e2:9a:b6:4a:15:6b:3d:7e:06:7c:43:bd:fc:
17:88:f8:b8:c2:3b:22:e0:a2:ef:7d:1a:40:5c:c3:
52:3e:93:cd:cb:95:22:5f:c8:33:95:04:f6:8b:70:
19:5c:c1:6b:0e:62:8b:92:04:58:2c:b9:85:7f:f6:
df:60:75:61:9f:51:1f:2d:a9:78:27:9e:02:b1:3a:
90:7e:90:8f:f7:87:e2:90:14:4b:1a:1e:a9:a7:e2:
2c:2b:cd:23:fa:44:ad:29:e4:6b:55:b0:4c:09:eb:
8b:df:d5:b0:f9:3c:6f:d4:97:48:6f:6b:68:a0:9d:
3e:45:c5:d2:c2:8e:9b:ae:b5:64:0f:7e:36:2b:4f:
e9:b8:b3:b3:7f:af:0a:bf:5a:50:a0:1c:80:13:50:
b2:4b:fa:00:2d:85:8b:7f:25:4d:9d:7a:bd:62:79:
bc:dc:df:a8:d1:77:11:37:e6:c1:d0:2c:c1:91:36:
e8:50:18:de:03:6d:cb:91:a2:c9:2f:f9:06:82:1c:
cd:d3:aa:35:39:be:ff:b3:a4:75:f0:61:78:b0:d0:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E7:D3:71:D2:58:28:37:41:0B:D9:6B:9D:E7:EC:00:5B:AB:66:83
X509v3 Authority Key Identifier:
keyid:E8:B6:2B:BE:9E:EB:5A:3D:66:E1:CC:22:3A:DE:DC:53:B1:77:C4:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LYrvp7rWj1m4cwiOt7cU7F3xO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/xefTcdJYKDdBC9lrnefsAFurZoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0a0ba9-f4fe-49bc-a368-b3cbb5ad2ad0/1/6LYrvp7rWj1m4cwiOt7cU7F3xO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8140::/29
Signature Algorithm: sha256WithRSAEncryption
30:d6:d0:e3:aa:29:97:5f:4d:9f:7a:4d:0c:44:69:4a:11:0b:
0a:5d:b2:c9:d9:2e:a0:80:b8:89:36:e6:99:c3:af:72:36:e7:
5f:74:9d:0f:a5:38:55:a4:0f:a4:9b:0d:6b:a9:8d:e5:52:65:
7c:b1:4d:66:cb:b5:0f:ac:9b:d8:1f:97:46:72:32:9b:f1:a3:
5c:fb:b4:26:66:12:21:06:2a:7d:8f:bc:48:7d:57:55:b8:e0:
c1:3e:a8:0f:34:a8:b1:be:07:28:04:e5:dc:74:8e:d0:1f:d1:
b4:8e:79:60:8b:ce:73:ff:89:f4:31:2e:bb:4c:59:40:2f:9f:
8d:b6:0a:53:07:f6:07:86:87:91:47:d2:8a:ff:cc:89:ba:ac:
ee:22:07:48:35:31:d7:89:c0:01:a7:1a:bc:17:6b:fa:4f:71:
66:ea:11:0a:76:b1:89:3c:c4:7e:6c:1e:0c:ef:61:30:d7:7d:
87:25:b3:7e:ed:d3:49:a0:c0:d6:9e:07:8b:6b:28:b8:cf:92:
e0:63:cb:ca:5e:56:c6:ee:27:ab:28:7d:44:64:08:74:cb:35:
1c:3f:ee:e9:71:cd:e7:fa:58:9b:79:9f:8d:57:13:4d:55:cf:
1f:2d:51:fe:b0:f5:74:79:0e:c3:2a:7d:df:da:e6:49:f4:ac:
5a:24:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:57 2024 by rpki-client on console-ams.rpki-client.org