Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/65tGPjwMM2Ow9QHzsE6cZzwwTzA.roa
File: 65tGPjwMM2Ow9QHzsE6cZzwwTzA.roa (raw, json)
Hash identifier: uuej9Q2LceV9ZzVeX2EPq+cj/4jxNmZSiHcy/ccuFmk=
Subject key identifier: EB:9B:46:3E:3C:0C:33:63:B0:F5:01:F3:B0:4E:9C:67:3C:30:4F:30
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018AD65E6D7C1810B8A6F9B5D426860A95B6
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/65tGPjwMM2Ow9QHzsE6cZzwwTzA.roa
Signing time: Wed 27 Sep 2023 11:20:27 +0000
ROA not before: Wed 27 Sep 2023 11:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52042
IP address blocks: 2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 29 Oct 2023 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:5e:6d:7c:18:10:b8:a6:f9:b5:d4:26:86:0a:95:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Sep 27 11:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb9b463e3c0c3363b0f501f3b04e9c673c304f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:44:27:17:56:15:8a:27:a3:cb:f6:ba:f2:33:
cd:c3:cc:6e:b8:20:e0:e7:b1:5a:66:52:97:1a:e3:
3a:4a:8f:67:e0:cf:10:69:13:67:cf:60:03:1b:b1:
5e:6a:c4:55:61:59:07:61:86:f7:87:2d:06:a0:42:
b8:4a:c9:96:3a:9c:b8:75:b1:eb:fa:80:e3:38:73:
e8:9d:30:83:a2:12:17:32:11:35:f1:dc:18:a2:9f:
c9:a5:1a:a4:15:c8:d2:d5:a2:23:1b:b1:a8:aa:3d:
9e:af:68:5d:85:2d:8f:4b:06:f5:c3:26:80:7a:d1:
5f:45:1a:45:4b:d1:22:0c:17:cb:ef:12:a1:45:8d:
74:06:4b:c7:48:78:43:be:00:9d:c1:36:38:d8:77:
0e:90:7a:2a:ee:44:bb:13:8d:04:e2:eb:b2:2b:04:
94:0b:fe:69:01:a3:2d:12:0b:a0:4d:35:ad:ef:06:
f7:2d:0a:d5:79:74:31:d0:b0:47:c3:e2:61:45:b6:
bc:21:13:8c:89:75:40:7f:bd:f7:1f:2b:40:1d:ff:
36:2a:60:ea:c5:16:84:d3:6f:b0:75:be:a9:3b:5c:
f5:4a:b7:ea:f7:f2:3d:19:06:27:22:4d:9e:dd:5b:
8f:9d:38:b1:00:bf:d3:77:87:5c:bb:74:f4:5e:7f:
ca:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:9B:46:3E:3C:0C:33:63:B0:F5:01:F3:B0:4E:9C:67:3C:30:4F:30
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/65tGPjwMM2Ow9QHzsE6cZzwwTzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f82::/32
Signature Algorithm: sha256WithRSAEncryption
50:7e:7d:62:f7:4c:bd:ba:77:c6:ed:ae:2f:00:c2:fb:07:33:
4a:3e:e8:f5:f9:9e:1c:31:de:7d:03:d3:b4:33:8c:e5:6a:63:
02:56:38:c0:03:a2:28:7c:8c:2b:85:71:66:c3:c1:c1:c4:00:
aa:ff:c4:ce:9d:9b:38:16:02:83:33:33:a7:1f:c5:bb:5e:ba:
16:23:b3:f4:bd:bb:be:f5:f1:e3:68:59:62:dc:c2:d9:d0:89:
29:29:e9:3f:53:98:4a:85:3d:ea:db:a0:36:d8:d9:58:4a:b7:
ac:76:e4:85:61:5a:d0:d4:6d:99:1b:72:4c:6d:a5:15:7b:16:
98:d5:69:55:9f:3b:36:87:92:56:da:0c:76:4d:73:72:fc:c3:
4d:f6:d9:68:79:63:db:2c:bf:e2:14:56:cb:af:87:6b:f5:2c:
8d:ec:ad:9e:d0:30:ac:95:f6:10:a8:2f:b6:89:47:c9:c0:ae:
fb:1f:c1:ce:98:fd:6d:f2:ce:d5:40:f4:d8:c1:53:a7:23:82:
de:58:8c:9c:7c:b2:21:db:3a:eb:93:93:b7:06:fd:cb:cf:b2:
dd:bd:87:20:06:6e:2d:b8:8b:7f:53:b9:b4:c0:a4:34:be:00:
22:d1:99:ea:2c:78:47:70:c8:05:93:13:fa:00:dd:4e:ca:49:
38:ab:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org