Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/AdPXEXnLnDVlBTdj3YvOCIgwKy0.roa
File: AdPXEXnLnDVlBTdj3YvOCIgwKy0.roa (raw, json)
Hash identifier: K+Y6r0bPt8Jb/v7N3eq7+LWJhLlSbE4cAuJOZbePMvs=
Subject key identifier: 01:D3:D7:11:79:CB:9C:35:65:05:37:63:DD:8B:CE:08:88:30:2B:2D
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 0186D0A49836DE55AF4FB08EE123DE5E116E
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/AdPXEXnLnDVlBTdj3YvOCIgwKy0.roa
Signing time: Sat 11 Mar 2023 12:28:13 +0000
ROA not before: Sat 11 Mar 2023 12:28:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 2a13:3f83::/40 maxlen: 40
2a13:3f80::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 11 Mar 2023 13:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d0:a4:98:36:de:55:af:4f:b0:8e:e1:23:de:5e:11:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 11 12:28:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=01d3d71179cb9c3565053763dd8bce0888302b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a2:68:9a:94:22:f3:27:6f:21:d5:b5:4a:4a:
62:48:b6:e6:e6:d6:aa:09:a0:ba:a5:f0:3a:d5:c6:
ec:b2:0c:4f:17:1d:fb:a3:08:34:43:27:9e:db:b1:
ae:29:4c:0a:a3:83:96:64:b6:49:8a:4b:18:23:03:
aa:34:49:54:df:2e:bf:2b:af:32:24:7f:e8:a1:37:
04:a2:ee:97:f1:66:0f:0f:b3:49:0d:8d:4e:4d:f7:
74:d0:d7:94:63:e8:f8:af:0e:f5:1d:93:ba:2f:f8:
29:63:13:fc:1b:cb:c0:5c:62:63:1b:7f:bd:03:a2:
ea:3f:78:86:97:a0:8c:35:b8:c5:fb:e6:0b:05:4a:
ab:c0:39:06:d6:a5:29:9c:4d:fd:bc:d1:f1:5b:56:
d1:d7:4a:f1:0b:1a:a4:63:f6:3a:fc:1a:8a:2f:50:
cc:97:c1:b1:3b:92:9f:f5:95:88:55:5b:c2:73:54:
6d:43:f7:c8:77:79:aa:74:a9:88:34:78:ca:38:e6:
7c:db:49:b4:0c:e9:b4:f6:be:58:fd:08:cf:de:e3:
26:3d:7b:b2:a3:f1:9b:71:86:08:df:15:6e:c0:8a:
54:24:7c:73:74:7b:be:85:44:a6:ab:94:53:5c:c6:
5a:3f:67:ca:e6:cb:47:e3:1c:8a:43:1e:a4:68:20:
b4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D3:D7:11:79:CB:9C:35:65:05:37:63:DD:8B:CE:08:88:30:2B:2D
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/AdPXEXnLnDVlBTdj3YvOCIgwKy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f80::/32
2a13:3f83::/40
Signature Algorithm: sha256WithRSAEncryption
ab:7b:fd:4e:0f:29:ff:68:c8:60:de:60:7a:40:8b:06:a7:b0:
25:b0:dc:6e:26:b9:e0:5a:25:fc:11:94:fe:84:7f:c9:93:c8:
53:5b:13:e6:02:6e:40:0e:7f:2d:af:0a:d8:fc:4f:b2:f1:5a:
73:69:d5:de:1c:b7:e2:c9:f9:2b:58:0a:15:14:e8:ae:8a:39:
cf:1f:64:f2:a2:0e:ea:08:c5:6e:e8:09:72:49:96:b1:38:76:
72:71:25:03:06:de:e2:d3:41:a0:c3:d6:53:66:06:e7:0b:02:
eb:dd:3c:02:b6:5c:1e:22:78:d5:56:5f:35:8e:c3:bc:c5:b2:
f2:68:c1:b8:7b:51:6a:66:89:29:db:a9:b3:32:29:a6:6f:4b:
71:46:f9:ee:b2:f4:a0:9d:94:e1:d2:7b:2e:ab:44:f1:fc:69:
f8:dc:39:1c:a2:02:a3:26:f4:82:d2:d6:57:ab:24:2d:44:47:
30:b1:af:18:6b:9c:bd:17:a7:e5:99:06:54:67:1b:d4:e9:b5:
ba:72:3f:ef:74:1f:33:c8:07:25:81:ba:4f:2a:f2:b2:a7:36:
ed:c1:dc:b5:45:81:8c:ec:df:10:b5:40:4f:fe:6e:0c:35:b0:
2b:73:be:29:9b:4d:52:71:d3:58:b1:eb:83:24:a9:38:27:b3:
21:1f:bf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org