Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/w2Jdpa1z7xM0U-uljUsKYw_z9lo.roa
File: w2Jdpa1z7xM0U-uljUsKYw_z9lo.roa (raw, json)
Hash identifier: 7ALLjaKJOWAe22W54rcouZHrig44JIS+LPZLSOe3tf0=
Subject key identifier: C3:62:5D:A5:AD:73:EF:13:34:53:EB:A5:8D:4B:0A:63:0F:F3:F6:5A
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 018DF5457D665A1B4CBFADE22AF14DB8EED2
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/w2Jdpa1z7xM0U-uljUsKYw_z9lo.roa
Signing time: Thu 29 Feb 2024 14:29:48 +0000
ROA not before: Thu 29 Feb 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199326
IP address blocks: 2a13:7705:ff00::/40 maxlen: 40
2a13:7705:ff00::/48 maxlen: 48
2a13:7705:ff01::/48 maxlen: 48
2a13:7705:ff10::/48 maxlen: 48
2a13:7705:ff14::/48 maxlen: 48
2a13:7705:ff40::/48 maxlen: 48
2a13:7705:ff44::/48 maxlen: 48
2a13:7705:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Feb 2024 14:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:45:7d:66:5a:1b:4c:bf:ad:e2:2a:f1:4d:b8:ee:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Feb 29 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3625da5ad73ef133453eba58d4b0a630ff3f65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c3:94:2f:66:19:52:04:c6:4e:71:0c:d9:78:
fa:93:21:e3:5c:7d:1b:f3:ea:3e:21:68:1a:30:6e:
e8:0f:17:6e:5c:85:e6:0a:b3:dd:e0:73:e5:ce:7c:
e3:e2:85:22:e9:9a:08:7b:cc:f0:04:38:1e:bc:4e:
32:76:4a:af:3e:0d:a4:c2:61:cc:e4:1d:91:c6:e8:
2a:b1:1b:9d:2f:3e:1f:43:b1:13:bd:3d:cd:50:38:
73:ff:40:d9:33:06:45:7d:7d:e7:ce:96:07:e1:4a:
41:5b:ce:16:9a:f1:ac:50:ef:cd:b3:b2:29:c1:fa:
47:cc:ea:87:c4:c8:38:40:48:de:5a:e9:64:2a:54:
aa:9e:e0:40:0b:18:8c:b2:54:6b:01:b5:ed:75:34:
01:8c:32:bf:93:6f:7f:3a:e1:5b:fa:d8:81:5d:f2:
e4:98:6d:26:f0:1e:7d:85:a8:eb:27:08:84:25:1a:
d8:8b:2e:23:64:80:cc:aa:66:6e:96:51:27:38:d3:
47:cd:0c:32:30:0e:f8:68:05:7d:51:33:7c:e0:4a:
d8:e9:01:9c:5c:44:01:57:a5:bc:14:66:bd:8d:fd:
09:03:b9:c1:59:ca:e2:c4:1f:0f:f2:31:81:e9:1e:
83:b6:45:3f:90:2f:f2:2c:48:99:72:1e:ef:69:58:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:62:5D:A5:AD:73:EF:13:34:53:EB:A5:8D:4B:0A:63:0F:F3:F6:5A
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/w2Jdpa1z7xM0U-uljUsKYw_z9lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7705:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
0d:58:76:c5:6f:47:ca:da:2f:76:a3:d0:70:c7:75:f2:eb:f8:
9f:d8:97:c3:20:9f:5d:3a:ca:79:7e:ab:53:25:a5:b8:1c:2f:
9e:16:b2:5b:60:dc:e4:8b:0e:16:0a:a1:85:6f:49:3e:df:fb:
28:05:34:71:a2:de:5a:6d:9f:3d:90:a8:ce:f3:fa:ac:f2:25:
53:86:7f:ce:f1:17:7e:aa:e4:7f:33:41:5c:45:01:5c:dc:c6:
d2:26:24:81:5a:65:73:05:4f:64:59:fa:ff:3a:65:a5:4c:16:
33:8b:49:61:b6:65:7b:7a:a6:0c:b8:1f:76:37:a0:13:62:51:
7a:fa:d2:17:72:09:06:98:62:61:2e:bd:7a:56:44:58:84:49:
4a:e8:aa:dc:54:f2:c7:f2:ae:fb:cb:c8:ca:4a:b3:c7:a4:17:
62:b1:bd:07:db:2f:2c:66:c5:27:8f:42:ef:ed:d0:60:6e:8b:
19:8e:8f:e6:3d:59:08:b4:b4:7d:9a:cc:c9:f5:eb:ec:8c:5e:
3e:44:5f:f0:43:6f:59:69:76:6b:93:28:9e:fb:ad:6f:70:41:
36:26:dc:4c:52:b9:1a:9a:55:f3:29:05:91:a3:df:2e:c3:49:
cb:e2:90:2c:1b:89:8c:fe:72:6b:f4:47:17:ca:61:45:b7:c1:
52:d6:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 29 20:50:18 2024 by rpki-client on console.sobornost.net