Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/wuU_UoTF2SWlPwyUdI0cgI0W_ig.roa
File: wuU_UoTF2SWlPwyUdI0cgI0W_ig.roa (raw, json)
Hash identifier: c4VbuWYNypNNfAK84oKHu96J/p6bcv0TnNHTQv4ZSr0=
Subject key identifier: C2:E5:3F:52:84:C5:D9:25:A5:3F:0C:94:74:8D:1C:80:8D:16:FE:28
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018BE40430BDB87A34E45340DBA61C37CBAC
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/wuU_UoTF2SWlPwyUdI0cgI0W_ig.roa
Signing time: Sat 18 Nov 2023 19:59:21 +0000
ROA not before: Sat 18 Nov 2023 19:59:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198571
IP address blocks: 2a13:3f81::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e4:04:30:bd:b8:7a:34:e4:53:40:db:a6:1c:37:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Nov 18 19:59:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2e53f5284c5d925a53f0c94748d1c808d16fe28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4a:72:24:5a:34:fc:16:86:c9:34:5f:59:e8:
35:92:42:13:cb:fd:cf:ca:40:65:0f:7e:43:e9:02:
57:76:81:d7:fd:14:5f:85:ef:d6:38:d4:c1:52:11:
4c:ae:ed:29:73:de:ae:69:11:33:92:8b:d8:55:83:
f3:a7:28:86:b1:cf:bf:ff:da:06:90:75:17:f7:71:
f4:7d:fa:0f:b9:ca:e6:98:d5:3b:81:01:d0:75:7d:
e4:4b:4d:e6:37:c8:5a:30:40:f4:13:27:6a:16:07:
46:12:e0:b4:eb:ab:32:e1:f8:a4:70:c0:39:34:f1:
87:98:b1:47:f8:df:dc:65:b9:65:78:6d:0a:f5:b6:
37:30:22:cc:87:47:66:34:ee:30:0f:94:c7:f8:3d:
af:4b:49:e0:50:58:4d:3f:2d:7f:14:a5:b4:c2:78:
84:bd:f3:62:eb:7a:2b:24:92:e9:ea:fc:d1:36:c5:
e6:d4:a9:cf:c2:d2:e1:24:f1:a0:10:02:06:7c:21:
ed:e0:4b:92:b3:43:69:17:30:f4:d8:0f:5d:ba:d9:
33:e2:11:36:7d:e1:d8:15:89:4d:e8:12:34:13:4d:
54:7d:51:9c:4e:c9:33:6c:28:89:b4:76:26:57:e0:
7d:6e:92:d5:b1:64:66:8d:6d:b5:53:7d:5e:e6:8b:
57:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E5:3F:52:84:C5:D9:25:A5:3F:0C:94:74:8D:1C:80:8D:16:FE:28
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/wuU_UoTF2SWlPwyUdI0cgI0W_ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
31:ae:91:54:27:bc:cc:12:92:71:3f:f8:0c:1a:31:41:41:32:
1b:5b:76:b4:a0:5f:86:8b:93:7c:d6:a1:12:28:d9:1c:95:38:
f8:01:3d:c9:01:2c:a9:b2:09:b3:b8:d9:45:dd:16:37:87:8c:
37:69:a8:2d:1e:a5:1a:38:70:da:94:fe:30:d1:00:2c:2e:a9:
6a:cf:97:84:3f:69:ca:61:38:6c:b8:18:2b:ce:42:a5:89:a5:
e4:7b:3c:2b:9f:70:2b:11:10:22:07:7a:c5:f3:e5:9e:5b:a1:
86:ff:4c:a9:95:04:c1:15:ae:08:b8:f2:c5:de:95:a7:7f:3a:
57:b0:38:81:ef:2a:66:cf:7b:f3:4f:f5:7f:18:d7:8f:b1:af:
17:67:27:2d:b4:7f:ac:39:6e:aa:ef:09:e2:50:b2:2c:06:4d:
90:19:c8:44:5e:c0:fc:30:a9:e4:fb:5c:14:a6:ad:65:b4:1c:
11:ac:1e:67:a6:d2:3d:6a:45:1d:86:85:2b:68:a3:7a:f0:5d:
74:30:92:49:2b:26:69:df:9c:0b:41:01:c0:ad:f6:92:16:3d:
2e:70:f7:35:c1:3a:de:23:ed:31:ee:5f:7c:f1:6b:b1:78:d9:
23:15:28:ee:3e:f2:65:4c:74:8a:90:f7:00:7e:9a:e8:15:48:
bf:3f:1d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org