Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/upD_NcD3A6KkR_yADNGQv3MBP0E.roa
File: upD_NcD3A6KkR_yADNGQv3MBP0E.roa (raw, json)
Hash identifier: orj99cKKaaa6IDxksK71/ALKQXoZTfNLsiyNxSGGtMY=
Subject key identifier: BA:90:FF:35:C0:F7:03:A2:A4:47:FC:80:0C:D1:90:BF:73:01:3F:41
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E128886EC3A3C889D7112252C0C379E22
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/upD_NcD3A6KkR_yADNGQv3MBP0E.roa
Signing time: Wed 06 Mar 2024 06:52:01 +0000
ROA not before: Wed 06 Mar 2024 06:52:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 2a13:3b80::/29 maxlen: 29
2a13:4fc0::/29 maxlen: 29
2a13:6e40::/29 maxlen: 29
2a13:8580::/29 maxlen: 29
2a13:9340::/29 maxlen: 29
2a13:93c0::/29 maxlen: 29
2a13:ac80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 21 Mar 2024 04:24:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:12:88:86:ec:3a:3c:88:9d:71:12:25:2c:0c:37:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 6 06:52:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba90ff35c0f703a2a447fc800cd190bf73013f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:46:2e:d7:ad:e7:7f:78:64:61:1c:f6:79:cd:
d0:b7:6b:5d:10:23:07:9d:fc:00:39:70:22:29:28:
3a:ba:b9:2e:fc:64:6a:74:14:1b:e1:b1:27:9a:0d:
e0:c9:cc:b5:d3:6e:83:84:8c:92:2d:d3:b1:52:b3:
5d:34:a3:d5:eb:8e:3e:3e:95:c9:dc:07:18:29:dd:
fd:85:c4:f4:48:bd:9a:be:1a:20:37:e5:b9:8e:24:
c9:51:62:06:67:5f:2c:62:fd:6c:b9:92:a0:21:d1:
69:f6:60:13:e0:1d:b1:41:fb:e7:04:47:06:c5:f3:
20:c7:e5:a7:99:b0:41:cc:27:91:a7:c8:b0:f7:bf:
77:a3:12:47:22:3d:63:5e:b1:72:f8:61:2f:9f:dc:
1f:b6:98:aa:79:e3:0a:01:e0:73:ae:4a:cc:dd:74:
14:6a:f4:b6:7c:8e:a0:cc:e8:d1:fc:23:cc:2e:5f:
9e:8f:bb:5a:dc:28:fb:6b:fd:d3:c4:a0:6a:d3:0b:
a7:16:f7:1e:9d:75:26:ed:7f:0b:79:70:d9:ba:02:
aa:93:a1:d2:eb:40:3d:53:fc:5a:1c:95:0d:43:16:
98:9a:57:cf:58:f2:46:c2:26:8a:04:dc:34:94:2c:
40:d5:c3:f2:03:be:1c:51:94:95:b8:0f:c9:d2:2f:
5b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:90:FF:35:C0:F7:03:A2:A4:47:FC:80:0C:D1:90:BF:73:01:3F:41
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/upD_NcD3A6KkR_yADNGQv3MBP0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3b80::/29
2a13:4fc0::/29
2a13:6e40::/29
2a13:8580::/29
2a13:9340::/29
2a13:93c0::/29
2a13:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
97:75:9a:54:cd:81:93:25:bc:3a:2d:b3:ce:20:c1:17:5c:57:
aa:5e:1e:77:6a:51:b2:2b:03:12:ae:ef:52:6d:6b:12:81:9f:
aa:d7:7f:d7:1c:06:5c:89:34:fc:83:38:57:78:47:22:5a:a3:
e6:5f:88:dc:ed:8c:09:da:7f:36:67:1c:26:93:e8:8d:16:61:
36:1a:ae:68:83:15:c3:83:44:ee:75:95:03:37:2c:48:76:25:
e7:ca:16:b3:8f:eb:7b:34:99:f5:d4:38:5e:36:37:6a:10:18:
25:48:37:85:dd:ed:e5:66:0f:b1:fd:6e:0d:a9:80:79:a0:19:
a3:b5:b6:31:66:ae:33:fb:1f:99:42:74:4e:7b:dd:5e:9a:a8:
10:ec:93:f5:42:31:c8:05:01:17:9d:e8:90:5f:f8:bd:64:fd:
cd:96:5d:ea:b5:84:5b:4e:2b:d9:e2:89:d4:00:db:4c:ba:f0:
99:ca:ae:ab:04:bd:35:8e:f4:0d:7e:fa:6c:40:b0:a0:de:22:
88:30:0c:ea:9d:f2:71:fa:06:0c:fb:fd:ae:97:16:cc:7e:f1:
de:48:f0:81:9d:52:94:05:fb:37:ba:25:5f:d5:1e:3b:8d:05:
8f:c7:e9:e9:60:a9:fe:05:cf:8b:8a:79:16:17:15:cb:00:66:
3c:3f:4e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:54 2025 by rpki-client