Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/IL3gEu6mOeaYGNWYs3Fiswaa8RA.roa
File: IL3gEu6mOeaYGNWYs3Fiswaa8RA.roa (raw, json)
Hash identifier: //5UilLcQjDClLo/ZuDYjqw+F5lEraxgPy+F6Hv9PpY=
Subject key identifier: 20:BD:E0:12:EE:A6:39:E6:98:18:D5:98:B3:71:62:B3:06:9A:F1:10
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018CC26D1EFB2AE6FBD0B4DBEFD18134ECD3
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/IL3gEu6mOeaYGNWYs3Fiswaa8RA.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200373
IP address blocks: 2a13:3f85::/32 maxlen: 32
2a13:3f83::/32 maxlen: 32
2a13:3f87::/32 maxlen: 32
2a13:3f84::/32 maxlen: 32
2a13:3f80::/32 maxlen: 32
2a13:3f86::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 Feb 2024 16:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1e:fb:2a:e6:fb:d0:b4:db:ef:d1:81:34:ec:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20bde012eea639e69818d598b37162b3069af110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:39:4c:9e:8c:1c:7f:20:5a:d5:d7:23:73:df:
c5:aa:54:cf:75:b2:c0:90:03:71:17:e3:75:c0:0f:
bb:4c:4b:22:6c:95:af:f2:76:6f:1d:ce:6e:62:4a:
5e:86:c8:3e:aa:d0:fc:8e:d0:d7:10:f4:f2:42:7a:
7f:d6:b8:17:c6:6d:03:77:ae:6b:d0:b1:99:a4:a7:
75:af:f1:a8:40:27:3a:f3:20:4b:1c:e9:80:c2:20:
69:72:6d:da:53:79:34:9c:90:dc:3c:f4:4d:79:28:
9e:3c:6f:74:41:9f:fd:f1:48:16:b0:a4:22:a6:55:
3a:aa:36:da:c3:1c:ac:6f:e4:48:f3:55:40:30:8a:
4c:8f:3d:e9:c4:1d:12:b6:69:4f:4e:21:2d:35:13:
21:38:be:77:ad:a9:ea:5e:fc:a6:54:cb:0e:45:d9:
cc:c1:f9:2c:1d:d1:10:ba:93:73:f9:d1:34:4b:2d:
93:2f:84:9b:28:3a:21:01:d5:53:fb:cd:70:07:86:
fb:52:a8:7f:79:1d:26:a3:a9:cc:5d:ae:ca:49:68:
43:36:55:2b:65:56:7b:ff:6f:bf:ab:7f:fb:9b:e7:
6a:b3:19:6e:83:56:b3:4e:28:b1:c7:b3:70:cf:a6:
5d:93:c7:27:fb:ae:e3:c9:7e:c4:0f:c0:95:38:2e:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BD:E0:12:EE:A6:39:E6:98:18:D5:98:B3:71:62:B3:06:9A:F1:10
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/IL3gEu6mOeaYGNWYs3Fiswaa8RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f80::/32
2a13:3f83::-2a13:3f87:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
54:9f:d4:ba:15:9b:a0:0b:c6:fc:a4:28:9d:5c:2e:ca:c7:22:
12:65:b1:31:fb:fd:b3:53:36:e1:c7:c6:46:ed:21:e8:80:65:
0b:5a:4c:8b:2e:d3:c5:ef:88:4a:e1:a0:41:66:ad:ef:34:41:
d5:04:17:5e:6f:f7:7f:1c:d8:5c:d0:e5:22:45:0e:23:35:e4:
06:1d:45:54:73:64:f3:62:71:29:e1:60:d0:4f:90:df:d2:23:
3b:a9:a3:8f:20:c6:54:6e:80:59:c4:1d:1f:c5:65:b4:f1:92:
bc:21:51:12:74:75:86:e9:a1:3c:24:e1:20:2c:67:5a:25:2f:
35:56:57:46:ee:2c:68:b6:6d:be:f4:b6:1a:ba:56:57:4b:db:
48:32:60:09:a8:27:dc:33:19:cf:2d:d1:06:e7:43:14:8a:6e:
b5:0f:6b:e3:b4:7c:82:ce:03:d6:c6:33:ba:4b:ff:32:b6:ab:
e6:4b:54:e5:87:4e:30:ee:76:85:f5:f0:3c:9b:35:bb:04:cf:
8a:fb:b6:fc:66:90:38:f3:6e:cf:d3:19:8f:d5:4b:1a:4c:f5:
b4:78:52:16:e2:3d:1c:69:9d:3c:41:2a:25:6b:ac:3f:fb:f1:
ba:15:96:f5:74:b5:ea:fb:e0:c2:35:95:2e:6a:67:09:8a:25:
cb:65:b9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org