Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/61C8rgsB2Z_A1WGLuHyYHU2Vk_U.roa
File: 61C8rgsB2Z_A1WGLuHyYHU2Vk_U.roa (raw, json)
Hash identifier: l9G63y9siNMdeeO8nMQd8O6ewY6yWaP+uiaHQ7BD7/8=
Subject key identifier: EB:50:BC:AE:0B:01:D9:9F:C0:D5:61:8B:B8:7C:98:1D:4D:95:93:F5
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018D7A07E9A82AF4B71C7762FAE47927F3C6
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/61C8rgsB2Z_A1WGLuHyYHU2Vk_U.roa
Signing time: Mon 05 Feb 2024 16:09:15 +0000
ROA not before: Mon 05 Feb 2024 16:09:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 2a13:3f81::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 10 Feb 2024 15:29:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:07:e9:a8:2a:f4:b7:1c:77:62:fa:e4:79:27:f3:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Feb 5 16:09:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb50bcae0b01d99fc0d5618bb87c981d4d9593f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cb:0a:65:72:a5:61:dc:f3:7d:e3:bc:ba:86:
74:c3:2b:da:75:56:70:41:87:b9:cb:39:7b:da:c2:
10:84:40:c3:a2:c7:4d:bb:86:cd:2c:4f:83:d2:37:
36:99:74:13:3c:72:1e:92:dd:8f:96:92:77:94:49:
f5:4e:74:9e:07:aa:ea:23:93:2d:c3:52:7e:17:e4:
65:df:8d:56:02:70:91:a8:da:1f:cf:b3:e5:b2:74:
18:6e:43:cf:a4:53:bb:01:2e:e0:65:e2:75:a3:0a:
19:a0:ef:69:b2:19:7f:87:78:86:0c:bf:7c:82:60:
89:51:1b:98:a1:f7:70:c1:57:f0:c4:46:a7:49:c9:
c9:13:39:f6:53:a0:aa:52:14:6e:0f:d9:11:bd:41:
10:45:4a:7f:da:6a:e1:22:46:ad:2d:36:56:7a:6c:
d3:32:d5:08:95:17:2a:01:97:cd:31:53:60:85:99:
c7:18:7a:b9:b5:ce:7c:d5:b8:62:81:6e:42:57:ec:
6d:94:0f:c1:39:53:3b:d3:18:5a:f4:4b:99:d6:37:
b3:c2:cf:85:c3:6b:f2:e5:1b:23:53:2c:cf:c3:6d:
00:42:97:04:6e:89:85:44:95:07:2f:41:51:7d:0c:
11:dd:c1:5d:d9:0e:1d:71:23:06:6b:9c:04:a0:25:
98:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:50:BC:AE:0B:01:D9:9F:C0:D5:61:8B:B8:7C:98:1D:4D:95:93:F5
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/61C8rgsB2Z_A1WGLuHyYHU2Vk_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
33:79:7e:d9:43:f2:50:16:2a:13:7d:e8:99:47:f3:73:69:71:
cb:2f:3e:e5:f1:ee:7d:76:89:4c:16:65:44:51:9a:01:20:1f:
11:94:0f:c9:ad:8d:9d:26:e1:77:1a:15:d6:89:bc:b5:f8:0b:
e1:e7:a8:99:50:7b:89:c2:2b:38:02:85:eb:30:e9:83:e3:ab:
44:0c:ba:ee:db:68:6a:13:64:93:6c:6c:95:4b:70:df:ee:63:
95:ed:1e:ea:b1:f6:b9:19:52:5a:b4:03:b1:29:70:10:2d:05:
d4:aa:d8:02:cd:f5:10:c8:00:72:7c:ed:8c:d2:8a:bc:e0:45:
c6:b0:96:c6:79:26:1c:2b:80:07:89:62:4d:a8:e5:9b:fd:be:
2c:90:21:23:92:52:34:96:20:1b:28:7c:cf:c6:d5:ab:24:56:
d7:4b:00:21:66:a8:58:e9:53:c2:74:31:83:77:9e:21:eb:f1:
d6:e6:61:c4:26:40:36:94:0b:38:72:60:73:41:af:21:3c:cf:
72:0e:9b:c5:41:0e:25:9c:b3:f9:06:bd:cb:be:cb:a3:e0:48:
ba:c5:e9:f5:9f:4c:95:72:0d:23:96:1e:3a:fd:a3:a7:a0:c3:
4e:f4:9b:c8:3c:e5:22:0e:b6:70:c6:c1:04:b7:d0:68:38:3d:
90:56:b0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org