Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/ntT5Q3CHR3A9plPeerL2g5DeXe0.roa
File: ntT5Q3CHR3A9plPeerL2g5DeXe0.roa (raw, json)
Hash identifier: c+23+OV0V1KU+PPA45+nXbO+asFsIunpki3qC6nDPMg=
Subject key identifier: 9E:D4:F9:43:70:87:47:70:3D:A6:53:DE:7A:B2:F6:83:90:DE:5D:ED
Certificate issuer: /CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Certificate serial: 018674291E65B7BA4D28D255FDFD90DFFB0A
Authority key identifier: 82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/ntT5Q3CHR3A9plPeerL2g5DeXe0.roa
Signing time: Tue 21 Feb 2023 13:28:17 +0000
ROA not before: Tue 21 Feb 2023 13:28:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49703
IP address blocks: 2a13:f700::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:74:29:1e:65:b7:ba:4d:28:d2:55:fd:fd:90:df:fb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8261a42bf2264cb5ebcec6e190d02a6d553b6233
Validity
Not Before: Feb 21 13:28:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ed4f943708747703da653de7ab2f68390de5ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f9:b8:f8:63:27:38:21:12:14:24:71:fe:60:
e0:19:3a:f3:23:dd:33:ac:5f:78:95:1b:3a:22:6a:
88:07:7c:d8:7a:0c:a6:ae:d3:42:24:bf:80:ea:9a:
c3:76:12:d7:29:c6:1d:0f:55:1b:17:41:aa:01:e9:
bc:fc:f0:c2:80:43:ab:1a:72:51:0b:59:bd:a2:35:
04:aa:79:67:96:0b:58:ae:06:7a:b2:d5:d0:ef:49:
db:3e:d5:9d:8c:64:b3:b0:e7:6f:b1:54:e5:ce:77:
72:d6:de:50:28:50:ac:42:1c:85:d5:3c:e5:df:a0:
55:db:63:91:50:9f:3b:bf:33:0c:6f:e3:06:c2:75:
1b:66:fd:da:f2:1a:18:2a:6d:0b:35:fb:86:d6:f0:
20:0a:dc:3b:6f:59:c6:aa:35:4f:1a:54:12:3c:76:
a7:ed:aa:a3:8c:a0:67:f0:09:91:79:68:d2:bf:96:
fb:d2:11:10:8f:fe:d4:3f:0e:e4:94:75:27:bf:78:
67:59:c4:e9:f9:6b:d9:7c:4e:c7:ea:55:0e:d3:15:
91:9e:8d:b7:a7:d3:89:91:f4:19:76:9c:36:20:b7:
69:e4:86:74:81:15:79:d5:98:80:7e:a1:e7:5d:f5:
00:35:c6:10:f2:8c:7f:46:aa:83:4d:c0:08:d6:03:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D4:F9:43:70:87:47:70:3D:A6:53:DE:7A:B2:F6:83:90:DE:5D:ED
X509v3 Authority Key Identifier:
keyid:82:61:A4:2B:F2:26:4C:B5:EB:CE:C6:E1:90:D0:2A:6D:55:3B:62:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmGkK_ImTLXrzsbhkNAqbVU7YjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/ntT5Q3CHR3A9plPeerL2g5DeXe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/54b678-b2fe-449d-b326-dcae70f1c93b/1/gmGkK_ImTLXrzsbhkNAqbVU7YjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f700::/29
Signature Algorithm: sha256WithRSAEncryption
90:6d:30:9f:45:b6:f3:75:71:07:25:60:82:37:5e:89:71:b9:
b7:25:00:01:7b:ac:cc:77:d7:5b:a8:53:9d:ca:28:5e:51:a7:
b2:09:85:4a:be:37:dd:1a:2e:f8:81:98:fe:b0:f6:cb:eb:7a:
f2:20:8f:15:26:6d:b1:8a:e5:c2:65:74:8f:f7:a8:d5:87:41:
1d:67:29:6d:50:b1:c3:91:ec:a9:c6:72:dc:e2:1f:58:8b:4d:
22:0c:87:dd:3b:71:d1:8d:9f:b5:94:b6:d4:7c:cc:29:45:4c:
a1:71:e7:f4:4c:5b:54:68:40:ad:4d:48:01:c4:44:69:aa:6f:
e4:d5:d7:ca:7b:7d:c1:1b:c4:d9:f6:cc:af:a9:bc:f9:8a:66:
bc:f5:2a:a5:55:ee:3f:17:75:92:2b:e9:e7:bd:14:c1:73:5f:
74:e7:64:8a:6a:3a:84:e1:26:d8:68:00:2f:6d:d8:0a:23:2a:
65:90:6a:b4:88:fb:f7:f4:7a:27:b1:50:7c:20:90:f9:20:6c:
7b:9f:98:a3:4e:7b:91:e8:2a:d1:d4:c4:d5:20:93:95:45:4f:
cc:ad:b8:ba:68:7a:88:0a:d7:50:3d:04:22:df:d7:4b:d2:32:
60:d3:2c:e9:38:b0:36:1d:7f:87:e4:98:13:e4:c0:f5:58:29:
dc:61:8f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:11 2024 by rpki-client on console.sobornost.net