Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0iZIKiec0NeSzcPRHZKUaZqUE7c.roa
File: 0iZIKiec0NeSzcPRHZKUaZqUE7c.roa (raw, json)
Hash identifier: Acc1wkFK2Ho2u3ZI9D/tvRZPOHNuDSVYx9WB3ZD7xkw=
Subject key identifier: D2:26:48:2A:27:9C:D0:D7:92:CD:C3:D1:1D:92:94:69:9A:94:13:B7
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E5F411888073407DA9695E05BC50D25D6
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0iZIKiec0NeSzcPRHZKUaZqUE7c.roa
Signing time: Thu 21 Mar 2024 04:24:45 +0000
ROA not before: Thu 21 Mar 2024 04:24:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a13:3880::/29 maxlen: 29
2a13:3b80::/29 maxlen: 29
2a13:4fc0::/29 maxlen: 29
2a13:6e40::/29 maxlen: 29
2a13:8580::/29 maxlen: 29
2a13:8c40::/29 maxlen: 29
2a13:9340::/29 maxlen: 29
2a13:93c0::/29 maxlen: 29
2a13:ac80::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 29 Mar 2024 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5f:41:18:88:07:34:07:da:96:95:e0:5b:c5:0d:25:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 21 04:24:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d226482a279cd0d792cdc3d11d9294699a9413b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:e1:12:42:86:cf:da:3b:84:6b:dc:c6:ad:
45:24:63:cb:a6:79:e1:6d:de:9b:c7:de:9c:9f:6b:
5f:c2:14:9a:ce:dc:90:c5:14:1b:79:f0:90:2c:a3:
d8:5f:b9:ea:8f:f5:d4:a4:60:0f:aa:3a:7a:69:2d:
b3:ff:cd:f8:31:fc:4c:88:b6:4b:f4:39:72:b8:c4:
42:15:57:c3:30:00:84:f0:1a:d6:f8:3a:05:e4:18:
2f:10:94:11:52:c0:56:44:bd:36:e0:29:a8:f8:cf:
b6:93:96:a9:d1:07:d1:37:9c:23:49:87:de:30:3d:
47:c5:50:44:4c:54:03:34:56:c2:df:ac:9c:4c:9b:
c4:5a:63:1e:37:76:dd:20:f4:43:dd:39:b3:3f:96:
0d:17:77:32:a0:20:ae:4b:48:29:3b:35:f2:83:57:
37:ce:13:a7:ca:62:9b:fe:e3:2a:c5:c3:c3:cc:f9:
34:75:44:d3:97:3d:3a:2c:b6:fc:64:48:04:d7:02:
a3:60:7e:a5:8b:3f:85:99:32:c6:18:7a:bb:6d:0b:
db:47:dc:f5:91:80:65:a8:38:49:03:5a:11:eb:9e:
15:c5:53:7c:8a:dd:77:26:c9:00:b0:21:b9:b0:13:
17:e8:ab:cf:7d:ee:bc:9e:d4:b6:fd:77:8d:ee:5a:
15:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:26:48:2A:27:9C:D0:D7:92:CD:C3:D1:1D:92:94:69:9A:94:13:B7
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/0iZIKiec0NeSzcPRHZKUaZqUE7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3880::/29
2a13:3b80::/29
2a13:4fc0::/29
2a13:6e40::/29
2a13:8580::/29
2a13:8c40::/29
2a13:9340::/29
2a13:93c0::/29
2a13:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
b4:c8:d5:dc:46:fb:5e:16:d2:4a:ac:fc:cc:65:d4:58:26:16:
2d:d8:19:e1:8d:ba:56:b4:e2:a1:b7:5c:44:13:99:e8:16:01:
c8:b8:be:4c:a5:36:e6:aa:74:ca:e2:be:93:82:37:fa:0a:ea:
9d:9b:94:23:17:44:78:21:05:43:f9:48:61:7d:c4:73:96:f3:
93:7a:79:f1:a0:8a:de:86:ce:84:83:7f:ae:7a:67:7d:14:56:
81:5b:fe:17:5d:f0:c6:c4:e0:cd:37:06:d0:95:3e:7b:e3:8e:
09:1e:e6:48:78:93:20:7e:86:7c:34:17:97:9f:0b:39:bc:8b:
7c:8d:d5:20:ff:21:44:80:9a:8a:0b:69:3d:ee:b5:0e:50:2d:
ee:04:0a:b6:ad:f0:f1:d2:bf:11:07:bf:e8:ab:63:7a:cf:2d:
af:91:58:b1:56:ea:ce:d5:17:4d:3c:44:c9:fa:82:69:a5:4b:
90:59:93:87:2b:39:e6:7f:e2:91:d1:dc:6a:8c:b4:32:eb:03:
6e:f3:17:5c:8c:6d:17:5c:f8:b8:d8:cd:3b:dc:2e:82:9b:b9:
e9:06:21:aa:bc:cd:2f:46:72:a0:4d:04:de:bf:7e:ff:0e:12:
90:83:95:54:a5:d5:ab:a2:4f:bc:1c:21:da:02:6d:18:dd:17:
7b:6f:24:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:32 2025 by rpki-client