Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5hImlJDMnbjyaTzoq8G79VEiC6I.roa
File: 5hImlJDMnbjyaTzoq8G79VEiC6I.roa (raw, json)
Hash identifier: 9m0V/rNQcRKwZuAKOrpzhFTl0HK5fRwWKx90vh0xhNc=
Subject key identifier: E6:12:26:94:90:CC:9D:B8:F2:69:3C:E8:AB:C1:BB:F5:51:22:0B:A2
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018DA60CDF79807DB3436954CDDCD5EB6F7B
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5hImlJDMnbjyaTzoq8G79VEiC6I.roa
Signing time: Wed 14 Feb 2024 05:17:57 +0000
ROA not before: Wed 14 Feb 2024 05:17:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a13:3b80::/29 maxlen: 29
2a13:9340::/29 maxlen: 29
2a13:93c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 20 Feb 2024 09:28:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a6:0c:df:79:80:7d:b3:43:69:54:cd:dc:d5:eb:6f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 14 05:17:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e612269490cc9db8f2693ce8abc1bbf551220ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:05:ae:66:89:fc:8b:7d:7f:57:bf:f7:d8:cf:
ad:2c:05:d1:90:ae:26:7e:91:7c:31:cc:34:f5:03:
72:e8:3a:05:d1:78:c2:dc:63:b9:7b:7c:77:ae:48:
7f:26:d0:eb:cd:ff:a6:43:b9:00:f8:28:54:47:ad:
b1:5d:ec:6a:4c:ce:1a:61:74:4e:e3:83:56:fa:4b:
d4:e3:7a:a3:2e:14:4a:1c:9f:45:ad:79:e0:e5:ec:
48:3e:b2:13:39:6e:75:7d:eb:2d:34:10:92:5a:cb:
c8:ce:b8:b2:3c:e3:1f:89:e6:54:9c:e8:0c:bb:8f:
64:a7:95:07:31:dd:22:3d:6c:4c:aa:a4:e6:bb:50:
26:e7:05:e5:68:67:74:27:95:99:dd:38:ce:7d:ae:
d9:77:62:cf:53:79:2e:9a:e8:b2:75:3e:9f:71:4b:
c2:75:3b:17:3e:50:29:b6:60:79:42:90:bd:67:45:
15:49:55:44:65:b9:9e:d6:0c:d6:e7:2d:5a:99:a9:
4e:bb:08:15:b5:5c:48:c1:e6:2b:da:4a:bf:0e:dc:
1d:2e:3b:93:9f:ed:14:a0:1d:83:69:73:19:a6:1d:
41:35:cc:9b:33:bd:41:17:83:f9:40:0d:42:6a:f2:
1e:1d:03:ca:d2:57:5a:67:98:4f:cb:1e:f6:be:c7:
fb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:12:26:94:90:CC:9D:B8:F2:69:3C:E8:AB:C1:BB:F5:51:22:0B:A2
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/5hImlJDMnbjyaTzoq8G79VEiC6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3b80::/29
2a13:9340::/29
2a13:93c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:9e:b9:9c:8e:7d:c4:37:d4:19:7a:12:ae:aa:23:99:aa:e6:
c6:55:83:b8:96:54:01:f0:d8:e9:76:25:45:09:2c:3c:2d:ba:
6d:fb:98:83:f0:d5:5c:db:59:ab:0e:65:9e:7d:ba:cd:76:3a:
52:97:1c:71:83:77:e1:df:2b:3c:ee:5e:47:f1:ea:7f:f9:a9:
72:e8:f7:d2:f6:bc:b5:10:fb:6c:3a:e8:b1:be:e6:de:69:4d:
8f:c3:f3:84:49:eb:6b:ae:9d:ef:8c:f1:7d:53:64:5c:d6:2d:
39:9a:3c:b1:79:3c:c4:bd:f7:b4:11:ac:f3:d0:06:ae:39:2b:
be:bf:fa:5e:de:fc:73:92:98:c2:c3:74:a0:09:ab:a0:a7:8a:
42:51:8d:47:98:7f:04:a5:52:3f:56:4a:39:86:03:28:1f:18:
25:65:3a:bf:32:dc:0f:b7:a3:08:0b:86:e6:e7:a7:7f:6f:46:
28:53:21:60:e6:60:7e:2d:bc:f8:d8:2c:9b:b2:47:55:95:64:
af:92:ff:d6:50:01:f1:25:32:aa:f9:54:b2:a4:30:2a:12:df:
91:a8:60:d5:2b:79:a6:73:34:bd:77:69:da:ab:82:36:b7:14:
08:67:37:d2:c0:04:a5:52:4f:26:92:a9:42:39:2a:cc:4b:59:
3a:e7:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org