Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/1-WD407WWtULOKgvQyK7DsuI-vk.roa
File: 1-WD407WWtULOKgvQyK7DsuI-vk.roa (raw, json)
Hash identifier: vxKZGg+6siSFBYG3j5vKW3WGQWq22q4BrCTNGV2THLY=
Subject key identifier: D7:E5:83:E3:4E:D6:5A:D5:0B:38:A8:2F:43:22:BB:0E:CB:88:FA:F9
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0186C12396C5208F66DAE03D949F0EA107B0
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/1-WD407WWtULOKgvQyK7DsuI-vk.roa
Signing time: Wed 08 Mar 2023 12:13:00 +0000
ROA not before: Wed 08 Mar 2023 12:13:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 2a13:3f80::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 11 Mar 2023 12:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c1:23:96:c5:20:8f:66:da:e0:3d:94:9f:0e:a1:07:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 8 12:13:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7e583e34ed65ad50b38a82f4322bb0ecb88faf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:f5:67:b1:83:8a:30:b9:e7:3c:26:46:b2:
ea:d2:db:80:7e:5f:a3:ff:08:93:cb:6a:f0:cb:7d:
fe:2c:f1:73:00:a7:e6:dc:6f:84:2d:cf:6b:d3:28:
9b:56:f2:34:4a:0e:49:04:f8:c6:94:4d:62:c7:52:
de:a0:0f:b5:8b:44:d5:cc:99:0c:c4:ad:f7:0a:a6:
b2:5c:91:92:a7:bd:d9:7f:5d:91:26:a7:2d:ea:9b:
ce:09:ac:b7:e9:11:81:d4:2d:13:26:d1:52:44:43:
e6:0f:d9:d9:de:0f:4e:22:55:14:b4:33:0b:a3:f3:
d0:a6:94:8a:9e:5c:9c:08:b6:ce:0f:30:a5:02:fe:
0e:b2:3b:fa:0e:46:1d:1a:ae:ec:73:ca:75:68:e2:
75:d9:82:aa:be:be:77:f1:b1:fc:a5:94:2b:35:84:
09:7c:3a:f5:90:09:22:4f:90:10:b4:b0:ae:b7:9a:
e9:aa:bc:37:9b:0f:65:6c:64:ab:57:1e:13:df:4a:
cf:66:b7:4b:57:1d:57:c4:05:a0:52:00:da:53:ee:
09:4c:d3:d0:94:a9:73:78:e1:70:7b:54:8b:07:f4:
27:5a:a4:7d:b7:ff:1b:1e:b5:a7:0e:0a:41:01:82:
1a:0e:24:53:cb:bd:f8:3d:80:91:5a:ea:0b:3f:b4:
a9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E5:83:E3:4E:D6:5A:D5:0B:38:A8:2F:43:22:BB:0E:CB:88:FA:F9
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/1-WD407WWtULOKgvQyK7DsuI-vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f80::/32
Signature Algorithm: sha256WithRSAEncryption
04:26:bf:ae:be:35:8f:36:8f:2c:34:10:f6:fb:6e:d1:fc:47:
98:31:bb:21:93:bf:df:1a:6b:08:74:2c:05:ae:18:81:bc:02:
a5:96:fe:2f:54:78:e4:c4:2d:94:d8:41:19:b8:78:aa:aa:e0:
d3:2c:41:d9:fd:20:4d:bb:84:03:65:1e:81:4f:b0:50:1f:89:
78:4d:3e:a7:8e:7f:fd:41:b0:2e:d7:09:8a:01:dc:49:00:02:
ed:5a:86:cf:69:2d:58:bb:b1:54:de:ad:2a:08:5c:07:6c:3f:
21:1c:82:69:c7:9f:73:cd:72:18:b1:bc:b6:e3:3b:c1:28:a3:
eb:8a:c7:39:cb:09:a9:dd:6e:d1:e8:46:f7:0c:58:65:ae:c0:
3c:8d:28:47:0f:92:19:43:6f:ea:0c:c9:4d:f0:27:6f:9e:31:
17:c0:54:bb:6d:2e:88:0c:a4:d2:be:24:0c:f8:ba:98:d6:8f:
b1:39:91:20:f3:f0:3b:d7:16:9f:38:51:fb:67:35:d7:2d:04:
08:88:eb:7c:94:85:27:a8:22:3f:c0:80:b7:66:0b:31:e4:a3:
14:43:c0:c7:33:20:c3:95:59:bf:e6:6c:fb:bc:58:a8:0f:ca:
f9:fb:bf:75:9e:b2:4a:6f:d9:69:9c:f8:4b:95:70:0b:c3:69:
6f:34:65:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org