Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/_wgjXt0xTv0y4MUgmihJiVJylDA.roa
File: _wgjXt0xTv0y4MUgmihJiVJylDA.roa (raw, json)
Hash identifier: jDL362bKLGzMtGcGvBVmnh3tae6mynx/VSSaA/q1W2I=
Subject key identifier: FF:08:23:5E:DD:31:4E:FD:32:E0:C5:20:9A:28:49:89:52:72:94:30
Certificate issuer: /CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Certificate serial: 018CF8A2B0763B843F7928CD76C73BB4A656
Authority key identifier: A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/_wgjXt0xTv0y4MUgmihJiVJylDA.roa
Signing time: Thu 11 Jan 2024 13:07:40 +0000
ROA not before: Thu 11 Jan 2024 13:07:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216219
IP address blocks: 2a13:f740:1::/48 maxlen: 48
2a13:f740::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 23 Apr 2024 18:38:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:a2:b0:76:3b:84:3f:79:28:cd:76:c7:3b:b4:a6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a8a69009ad2e890986bdd76c633c1b31f06f3a
Validity
Not Before: Jan 11 13:07:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff08235edd314efd32e0c5209a28498952729430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:fa:ad:b5:23:b3:83:e9:f3:20:13:4e:d9:a3:
0b:f1:b9:a2:ac:18:88:33:0d:93:82:20:0a:32:99:
1b:4f:fa:dd:8f:90:3e:81:83:36:2e:f6:8d:56:bb:
d1:8e:b8:d3:0f:ef:c5:45:34:5f:22:1a:f5:87:4e:
fe:b1:e0:2a:44:ec:42:e9:0f:93:9b:3c:63:a4:b6:
1b:0a:a2:4e:47:b4:2e:d5:b4:af:60:7f:6a:ea:01:
f8:d6:69:e9:e2:25:bf:9a:89:9a:bc:6f:e0:3f:7b:
5c:2a:b6:a2:44:18:18:cf:21:4f:0b:45:29:0d:84:
54:56:dc:8e:fc:a3:2e:5c:22:21:f5:5b:a8:22:32:
41:77:35:2d:30:35:57:a6:f6:6c:26:52:83:88:f4:
dd:46:70:ee:81:77:03:e0:c9:3c:1c:9b:8e:d0:63:
6c:93:d3:75:b7:66:d9:62:d3:08:e3:74:e5:5e:6c:
3c:37:99:4d:81:4b:42:81:27:b1:46:1a:8d:36:3a:
48:d2:43:d0:3e:f9:19:72:be:8a:a0:6c:b9:10:61:
58:ec:47:44:0c:8b:ee:f1:37:15:af:2b:a8:e2:b8:
5c:ff:68:a3:00:5f:6d:0a:3f:1c:37:43:ca:07:e1:
30:36:c2:95:b9:1f:4c:10:e5:9a:c1:05:b7:30:1d:
5a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:08:23:5E:DD:31:4E:FD:32:E0:C5:20:9A:28:49:89:52:72:94:30
X509v3 Authority Key Identifier:
keyid:A5:A8:A6:90:09:AD:2E:89:09:86:BD:D7:6C:63:3C:1B:31:F0:6F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paimkAmtLokJhr3XbGM8GzHwbzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/_wgjXt0xTv0y4MUgmihJiVJylDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c4dada-1a29-449a-9ac6-b12ebf345bc3/1/paimkAmtLokJhr3XbGM8GzHwbzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f740::/47
Signature Algorithm: sha256WithRSAEncryption
54:a6:50:34:f9:4e:0f:7e:77:c0:fc:d6:67:82:56:1a:b9:c4:
ca:53:a1:1a:39:4c:10:d6:c2:07:7d:b7:2b:79:72:a3:46:9a:
75:67:88:71:35:d8:14:60:7b:51:67:0f:14:e6:b2:b5:3e:c3:
9e:28:0c:ef:8c:1b:f5:d6:0f:32:42:41:01:82:68:19:70:9e:
cc:b3:b4:63:82:84:b9:f8:0f:8d:64:69:6e:29:ed:44:16:c8:
0c:d2:8d:d5:e9:d0:f6:7d:2e:78:9e:ff:39:31:0f:3e:97:f7:
dd:9e:13:5f:80:a7:c7:a4:d1:50:fe:78:2e:57:11:5d:c5:11:
f9:86:42:c1:11:f1:61:39:ca:bc:cd:6d:a4:b7:a0:9d:53:ef:
cb:80:61:a6:16:23:a5:63:40:4a:f4:1b:9f:74:45:51:84:eb:
f2:42:bf:7f:ad:1e:2a:00:d3:ef:58:ef:c0:f7:91:f6:de:70:
91:af:1d:d0:30:79:f7:a1:02:5e:00:58:50:4e:f0:1a:95:7b:
93:78:9b:1d:f1:88:38:3a:6a:62:f1:b3:ab:2d:dc:51:11:c8:
b5:a9:9b:39:2a:ea:60:1a:76:eb:ab:9d:aa:83:0f:d0:2a:6e:
6e:7f:d8:51:d6:b3:ba:8c:6f:62:aa:01:5b:99:45:09:c5:18:
75:f6:93:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:10 2024 by rpki-client on console-ams.rpki-client.org