Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/UbZujjhUkW7vxMlVnf7UA_kLHss.roa
File: UbZujjhUkW7vxMlVnf7UA_kLHss.roa (raw, json)
Hash identifier: W/2m9AzHS5NXOinQwusB84h6XNi16WOEYDj+oLTu3Aw=
Subject key identifier: 51:B6:6E:8E:38:54:91:6E:EF:C4:C9:55:9D:FE:D4:03:F9:0B:1E:CB
Certificate issuer: /CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Certificate serial: 01856C780E88130132BF89A9BE0F46DA85BC
Authority key identifier: F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/UbZujjhUkW7vxMlVnf7UA_kLHss.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 2a13:780::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Nov 2023 13:22:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:0e:88:13:01:32:bf:89:a9:be:0f:46:da:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f347ced9a0ed7f944b9f4efc38577b38e6d1c673
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51b66e8e3854916eefc4c9559dfed403f90b1ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:3d:0f:8b:3d:00:19:3a:c2:83:e2:3e:84:
08:7c:23:9f:d8:35:28:e1:a4:0c:28:20:d8:0e:a0:
cf:b6:cc:36:f7:45:6c:3d:66:bc:9d:a7:b7:fd:f6:
94:d2:4e:11:d0:e7:b7:03:60:df:58:0d:15:1f:4c:
69:87:22:02:4e:e5:61:57:d1:4d:1b:50:5f:14:58:
27:1e:bd:92:97:95:05:c4:0b:54:1c:5a:1e:d4:72:
b5:7a:ed:fa:cd:15:9f:d0:8b:92:94:bd:68:22:94:
07:3a:cf:fc:10:56:ec:69:12:12:3c:3a:c1:ac:cc:
d5:3f:32:23:0c:e0:3c:54:a3:d5:d9:2e:7e:99:31:
b1:ab:7e:bf:a2:3b:d7:bd:85:e1:69:2f:9e:ec:ee:
16:1e:bd:11:75:f1:ff:66:c6:81:d9:15:c3:3a:ce:
ab:86:2e:41:84:5a:46:f4:10:64:ee:c1:2c:38:23:
85:ad:13:80:66:a1:e6:18:d1:87:f1:db:e8:4d:ad:
c5:0f:29:74:41:29:c4:a8:ce:c8:0f:34:f7:1c:5d:
9e:c7:28:2f:a3:24:73:b0:ab:d1:68:fa:fc:2d:96:
d2:ee:ce:66:a2:4d:55:31:46:94:2f:02:3e:58:49:
5c:63:c4:c4:77:17:96:0c:e7:a2:a7:62:24:91:5e:
ae:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B6:6E:8E:38:54:91:6E:EF:C4:C9:55:9D:FE:D4:03:F9:0B:1E:CB
X509v3 Authority Key Identifier:
keyid:F3:47:CE:D9:A0:ED:7F:94:4B:9F:4E:FC:38:57:7B:38:E6:D1:C6:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80fO2aDtf5RLn078OFd7OObRxnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/UbZujjhUkW7vxMlVnf7UA_kLHss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/089603-b5be-4ffa-a2b2-232b4b4657e9/1/80fO2aDtf5RLn078OFd7OObRxnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:780::/29
Signature Algorithm: sha256WithRSAEncryption
cb:fe:2e:e2:03:6d:7d:15:5e:86:55:97:f8:97:46:01:df:81:
5d:61:18:27:e2:97:c6:20:a0:2f:02:6e:e1:c0:3b:53:d1:bc:
13:91:63:a3:3a:7a:20:29:a4:32:64:69:ca:8c:05:01:34:ca:
df:bc:e0:a4:e7:84:84:e9:92:82:8c:7a:fc:cb:ab:97:ec:af:
a9:ad:36:bc:5c:f1:50:f1:f8:43:5d:a9:8e:2a:34:12:49:fa:
ec:be:38:76:b5:b7:2d:4b:b8:d4:59:fb:e4:f0:7c:58:b3:79:
38:ff:0f:fa:0e:7b:0f:c2:90:3a:31:cf:d2:2c:02:53:41:ac:
a7:3f:bb:d1:17:c9:39:c3:d3:16:ce:0b:99:19:33:33:e1:89:
67:42:26:41:22:32:f3:25:de:d4:dc:b4:2f:fd:c4:e0:34:37:
31:26:f6:7f:48:e8:b6:04:e2:b5:96:1c:5d:18:85:0d:af:77:
93:5d:ed:9a:b0:da:1e:48:3b:a5:d1:26:49:9c:00:62:46:cb:
9d:41:1a:e2:f2:81:1d:7a:e5:05:ea:76:b9:a0:9e:28:9d:1a:
37:55:ce:82:56:02:76:0d:7d:64:c2:fe:f9:2f:78:90:e8:b7:
35:30:1f:91:62:2d:09:3c:2b:3d:16:c9:d2:1f:b4:a3:a0:80:
eb:70:c9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:33 2024 by rpki-client on console-ams.rpki-client.org