Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/A_nJEH43W3F039cKibYeN6Bpf-k.roa
File: A_nJEH43W3F039cKibYeN6Bpf-k.roa (raw, json)
Hash identifier: zqNeilPwcCqhJqWKqWr3r6UHioFWFmnir6M4WrGAUk0=
Subject key identifier: 03:F9:C9:10:7E:37:5B:71:74:DF:D7:0A:89:B6:1E:37:A0:69:7F:E9
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018CC26D1E768F59552F9EB4D80484457C10
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/A_nJEH43W3F039cKibYeN6Bpf-k.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 2a13:3f81::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jan 2024 14:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1e:76:8f:59:55:2f:9e:b4:d8:04:84:45:7c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f9c9107e375b7174dfd70a89b61e37a0697fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6b:1a:fe:2d:81:de:5b:86:6a:7e:1b:75:ad:
94:18:46:15:9b:dd:8d:ff:1f:8c:76:09:7b:dd:79:
42:1a:12:71:4c:00:8e:5a:8e:17:8f:51:23:23:c1:
62:63:80:78:93:f3:06:3f:b6:14:d0:b7:d3:93:27:
d1:55:3f:39:68:e3:d2:d4:21:bd:3f:55:18:1f:d8:
ea:40:f9:c8:3e:e1:9e:a4:b0:04:e2:c9:d8:22:52:
07:23:e8:d9:3a:8b:49:7d:bf:ce:ce:b9:1c:75:41:
33:07:44:6b:e4:2c:c8:d5:f4:6c:3f:6c:e3:63:63:
87:a0:19:e0:df:f7:18:5a:bd:bd:1c:e3:60:44:97:
30:44:c7:1c:31:40:20:48:e8:9c:74:4c:36:ef:f8:
cd:97:59:7b:e8:ad:ec:83:d2:99:88:38:d4:a7:21:
c1:56:d9:e8:5f:07:85:eb:e2:9f:9c:5a:d1:bd:34:
7c:d4:c8:cf:8c:0e:dd:19:1f:40:c4:4b:f9:5f:bb:
21:5c:c2:22:b9:cc:6e:27:93:3f:62:d0:26:ca:97:
84:50:aa:0d:0e:70:c4:55:41:cb:10:b9:9f:2f:c3:
af:19:7e:2c:e6:50:87:92:d8:4e:5c:0b:16:ec:b8:
3c:81:92:ec:2f:35:6b:e9:c5:64:de:bd:ba:35:43:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F9:C9:10:7E:37:5B:71:74:DF:D7:0A:89:B6:1E:37:A0:69:7F:E9
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/A_nJEH43W3F039cKibYeN6Bpf-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9b:9b:e9:de:90:e2:36:33:d7:a8:3d:04:28:b4:58:42:55:27:
22:de:3a:5b:7a:96:c9:50:19:12:85:50:9d:83:be:b7:5a:b4:
bd:f6:66:7b:55:6b:0c:45:84:45:6c:1d:96:19:60:cb:fa:61:
d1:a6:35:2a:ac:d0:6d:71:f0:33:c6:0a:2e:f0:a0:42:06:1a:
86:4a:15:7a:bc:bf:76:9e:60:a3:32:3e:3a:e0:f0:cc:0e:3a:
2c:e5:dd:e6:74:e6:27:35:b2:62:b3:20:e7:d5:e6:42:69:0f:
de:b0:83:4b:78:f5:3f:8b:fb:bc:fc:a6:92:e6:9e:d1:fd:48:
10:60:f8:49:b0:70:aa:a3:7e:99:93:58:54:9a:6b:3a:4e:13:
6b:3f:dc:99:d4:de:82:59:91:cc:e0:7b:32:73:3c:c8:bc:5d:
43:43:7f:29:f3:93:52:98:6e:5d:59:76:f2:0f:e2:e9:29:1c:
e7:0c:87:6f:85:2b:84:cb:a3:e0:e0:3b:69:43:eb:69:e8:6d:
00:93:66:4b:67:1d:7c:e7:69:37:7c:fa:13:56:f3:79:86:0a:
dc:a6:92:12:5a:a8:d6:b3:63:ed:a3:d3:6c:10:3b:41:0b:3d:
20:f8:8c:2b:38:62:85:91:39:04:8a:5a:e9:70:4b:79:96:03:
88:ad:a6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org