Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/X3_2y_gmLYoD4huqCww7bP7ryY4.roa
File: X3_2y_gmLYoD4huqCww7bP7ryY4.roa (raw, json)
Hash identifier: U+NSLhsXJ6y7NguKQYQaoI+l1w+9TfVTT7/Oyg7I12M=
Subject key identifier: 5F:7F:F6:CB:F8:26:2D:8A:03:E2:1B:AA:0B:0C:3B:6C:FE:EB:C9:8E
Certificate issuer: /CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Certificate serial: 018A1D3EE7A8258DC3EBE65E161564D76727
Authority key identifier: B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/X3_2y_gmLYoD4huqCww7bP7ryY4.roa
Signing time: Tue 22 Aug 2023 12:36:16 +0000
ROA not before: Tue 22 Aug 2023 12:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60550
IP address blocks: 2a13:b240::/29 maxlen: 36
Validation: Failed, certificate revoked on Fri 15 Sep 2023 08:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:3e:e7:a8:25:8d:c3:eb:e6:5e:16:15:64:d7:67:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07fafdb86d38f37bf0c26d3f2731fdef6b14e4a
Validity
Not Before: Aug 22 12:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f7ff6cbf8262d8a03e21baa0b0c3b6cfeebc98e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:ce:37:39:a2:6c:17:bb:e4:f1:22:2c:2e:
f5:b8:df:26:65:bb:3f:d7:1c:ad:a0:18:e1:c7:6f:
4c:37:de:7a:cd:c7:96:b7:f7:e8:99:92:6d:90:13:
12:ab:3c:80:74:61:cf:1b:22:fd:bf:ea:77:9d:4f:
76:9b:ba:9d:eb:7b:24:e3:47:00:36:20:c9:75:b7:
5f:f2:9b:85:2f:a7:b5:9a:4e:1f:fc:91:22:e3:26:
2d:01:cc:65:64:10:c7:a5:6d:78:7b:a3:e7:db:56:
39:2b:f0:46:23:31:6a:70:63:9f:2a:77:25:c1:ec:
69:26:28:e4:9b:16:a1:bb:ef:d5:0d:e8:0c:e2:eb:
00:61:55:6e:b5:40:27:9f:4c:02:56:d9:4f:f2:21:
0e:05:98:f6:72:38:56:e3:02:26:41:11:a7:1c:14:
ad:8e:02:9d:fe:52:df:75:5e:34:bc:d2:94:6e:e1:
5e:f8:b1:2a:f7:49:c5:ab:9d:c8:9a:36:82:a3:91:
5f:f7:86:64:da:9b:85:ab:a9:87:a7:98:56:02:05:
67:10:0a:85:70:18:97:c8:51:05:70:f7:de:2a:cb:
1b:32:50:a1:61:75:99:00:e2:2f:ef:3b:ab:6f:78:
8b:c1:e0:fa:a1:21:77:b7:e7:f1:3c:5f:09:c4:67:
a2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:F6:CB:F8:26:2D:8A:03:E2:1B:AA:0B:0C:3B:6C:FE:EB:C9:8E
X509v3 Authority Key Identifier:
keyid:B0:7F:AF:DB:86:D3:8F:37:BF:0C:26:D3:F2:73:1F:DE:F6:B1:4E:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sH-v24bTjze_DCbT8nMf3vaxTko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/X3_2y_gmLYoD4huqCww7bP7ryY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d6d263-29f9-4613-bb7d-4938b8d0c3de/1/sH-v24bTjze_DCbT8nMf3vaxTko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b240::/29
Signature Algorithm: sha256WithRSAEncryption
12:a6:05:96:11:de:da:d1:14:de:93:d0:6f:3c:63:1a:cc:69:
f2:0c:de:1a:3a:aa:35:fd:f9:0c:ee:70:45:ea:96:e9:3f:25:
7a:96:4b:68:d6:ee:93:75:94:16:e7:67:bc:19:de:45:f9:0b:
81:ff:e1:5a:1a:98:f3:04:73:a9:05:5c:83:fb:15:7b:4d:5a:
c8:11:d7:56:7d:51:8f:4d:44:62:14:6d:c1:57:0a:c1:d2:38:
ba:33:46:28:bf:6b:68:fc:2f:e6:72:d8:fc:f3:be:fc:27:4e:
ec:de:5f:d6:29:5f:a5:2f:2a:a4:62:e0:01:3b:66:6d:15:49:
fe:b6:78:7f:73:8d:39:2c:37:3e:9c:54:fa:08:5c:32:9c:d3:
f2:74:85:29:a6:5b:39:55:90:23:e4:47:81:6f:4d:5f:71:c6:
b0:35:83:68:43:4f:3c:84:c3:c9:9b:3f:d6:2e:9c:a2:b4:ad:
06:98:78:17:4a:4e:70:20:4b:00:34:4d:08:1c:0e:42:e1:85:
fa:8d:1c:5d:6f:4c:97:6d:ed:ec:24:c7:61:52:4b:ae:f2:09:
09:e8:7e:a6:3a:72:63:a5:b8:0e:d4:e2:aa:30:2f:59:ad:0f:
53:d5:05:7a:5d:a7:32:ea:87:36:dd:62:21:0f:6d:ef:de:9b:
3c:f3:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:54 2024 by rpki-client on console-ams.rpki-client.org