Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/bZMIxXZBZIA76ut22HUO3Du5FM4.roa
File: bZMIxXZBZIA76ut22HUO3Du5FM4.roa (raw, json)
Hash identifier: DkkftT02njU5p55AGa0jOp7Mg/CElA3iAPU4TWxPZw0=
Subject key identifier: 6D:93:08:C5:76:41:64:80:3B:EA:EB:76:D8:75:0E:DC:3B:B9:14:CE
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 018CC424CF5F5F4B701D3BDBA1D82D239FF8
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/bZMIxXZBZIA76ut22HUO3Du5FM4.roa
Signing time: Mon 01 Jan 2024 08:29:55 +0000
ROA not before: Mon 01 Jan 2024 08:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13030
IP address blocks: 2a13:182::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 22 Jan 2024 09:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:cf:5f:5f:4b:70:1d:3b:db:a1:d8:2d:23:9f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Jan 1 08:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d9308c5764164803beaeb76d8750edc3bb914ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:d9:d2:ae:38:9e:df:86:25:97:57:32:10:
5f:12:0f:d0:5a:11:e5:34:b0:22:e8:e4:5f:b0:7b:
9d:9d:0b:58:3d:4f:ba:00:1c:ab:51:ce:d1:f2:3a:
a5:1f:a6:09:91:e6:8f:d0:d2:e3:6b:87:b5:74:a5:
30:70:bd:2e:8f:03:a6:38:f9:fe:ee:d2:da:58:ea:
b3:48:b8:69:18:76:ac:f3:87:10:7d:ff:84:9a:b5:
24:6c:eb:f9:67:8c:7d:d8:f8:c8:b5:c7:04:2b:07:
10:71:35:b1:2f:cd:61:6d:5c:f7:c4:1a:4e:8e:a2:
cc:8f:7e:af:2e:af:3b:00:39:f0:bd:d3:c0:53:80:
8a:2d:b0:02:c6:e4:51:1c:9f:05:fd:34:0a:06:4d:
39:6f:2b:c5:56:df:04:f0:b1:a1:35:39:c9:16:ad:
11:8a:94:de:9a:db:9d:70:a2:e3:3d:21:10:5c:d7:
0a:8a:44:07:12:32:7b:e9:38:f7:4d:f6:0d:4f:06:
c5:e2:e0:de:b1:55:ff:2b:a0:44:99:b3:57:44:f9:
fd:f6:33:31:c9:e6:ed:d6:8f:2f:f1:b2:4e:f4:fe:
5c:c1:55:0d:f6:3d:a0:0b:ff:74:64:1b:57:0e:db:
0e:8b:8d:45:90:54:0c:92:a3:e1:4f:e2:04:f6:68:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:93:08:C5:76:41:64:80:3B:EA:EB:76:D8:75:0E:DC:3B:B9:14:CE
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/bZMIxXZBZIA76ut22HUO3Du5FM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:182::/32
Signature Algorithm: sha256WithRSAEncryption
3f:2f:b5:0b:04:90:61:56:ca:46:fe:ea:3e:ba:ba:7b:28:b5:
2a:73:71:93:05:5b:9f:d2:cb:31:c6:db:4d:a2:df:95:6e:c6:
90:24:74:b9:49:50:81:fb:22:74:d3:9e:bf:8b:ce:1b:73:47:
9b:24:e4:ee:5b:45:65:11:aa:8f:4f:5b:c4:30:48:40:b9:a0:
0b:0c:97:06:e4:13:1e:e6:8f:f5:99:4f:81:da:62:d3:71:8e:
2f:37:55:f3:33:4c:7d:54:30:5e:0f:41:c6:38:e1:ef:bb:69:
6b:66:5c:e6:a8:4d:98:29:46:54:0e:aa:2e:dd:66:25:7b:6a:
70:84:0c:d1:cc:66:a0:39:d3:ce:b4:9b:40:90:81:c3:11:d7:
f6:cb:c4:e0:e2:4d:b3:b2:d6:a5:f1:c3:6f:0a:21:38:5b:3c:
08:d0:d8:b5:e9:6e:2a:fe:6e:dd:3f:45:4b:32:dc:c5:3e:d5:
db:98:0d:0f:fc:6b:ab:36:1d:d8:99:43:7d:2d:2b:17:0a:0f:
de:bd:c4:f7:9f:2d:41:96:82:89:fa:ed:fb:1d:c6:79:38:f5:
a2:e4:18:3b:e8:3a:85:0e:ca:89:49:7a:d4:04:eb:e9:d2:53:
51:6c:71:e4:b8:16:a1:a4:b2:53:1b:73:1f:96:85:c7:63:ca:
44:fd:b8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 22 12:18:59 2024 by rpki-client on console-fra.rpki-client.org