Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/D_nfVPEWgPERqLZPYNLPgGZWqkg.roa
File: D_nfVPEWgPERqLZPYNLPgGZWqkg.roa (raw, json)
Hash identifier: Fg0K/xxilCqCPl6bQ2CdM9QKzkTwKFxUFUXPeqK37aY=
Subject key identifier: 0F:F9:DF:54:F1:16:80:F1:11:A8:B6:4F:60:D2:CF:80:66:56:AA:48
Certificate issuer: /CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Certificate serial: 018CC4934C64308BD49DD7D81E922BE44332
Authority key identifier: 17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/D_nfVPEWgPERqLZPYNLPgGZWqkg.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60939
IP address blocks: 2a13:1d40::/30 maxlen: 30
2a13:1d44::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 18 Mar 2024 10:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4c:64:30:8b:d4:9d:d7:d8:1e:92:2b:e4:43:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1732f334d8abb68ef822546d8f6f8e81563c6fd9
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ff9df54f11680f111a8b64f60d2cf806656aa48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:4e:b8:d5:a5:e2:35:8e:26:76:d4:a4:c8:
15:81:51:a4:2f:cc:12:1f:33:24:7a:d2:33:c4:9c:
88:33:76:27:3d:ff:c6:8d:64:12:dc:78:72:a5:77:
c5:2a:89:a5:39:c8:64:8e:ba:41:1e:ce:db:af:7d:
db:f8:d9:fe:8d:1a:62:58:b3:7d:4a:0b:48:0b:fd:
42:20:16:18:65:f9:76:c7:d8:8e:85:d4:8a:5c:e5:
54:0e:e3:f6:0c:90:22:1c:24:7e:04:fa:06:c2:8e:
18:0a:06:58:9f:3d:f7:88:3a:76:b1:de:53:a8:3f:
39:b0:b7:c3:91:d5:ae:10:51:fd:a2:fd:cd:90:a7:
f9:c9:72:2d:d3:d1:35:2c:0f:b0:a9:da:ac:b8:d0:
b3:7c:e6:a0:b5:f4:36:a1:9d:63:60:3b:79:4e:36:
80:9f:f6:e6:46:78:e8:e7:e3:8f:23:a6:18:19:21:
fc:3e:e9:90:6f:73:98:1b:78:e8:d0:02:ae:e4:8f:
2b:e3:05:61:ab:86:c3:3b:38:d6:2f:b3:45:e9:35:
4d:5d:2e:a2:71:73:80:6b:1f:5e:12:9c:b6:88:68:
f4:d5:df:4d:85:8e:be:25:56:41:1f:9d:e0:ea:b7:
d1:22:cf:a2:40:52:c9:a1:83:11:db:8f:14:8b:73:
08:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F9:DF:54:F1:16:80:F1:11:A8:B6:4F:60:D2:CF:80:66:56:AA:48
X509v3 Authority Key Identifier:
keyid:17:32:F3:34:D8:AB:B6:8E:F8:22:54:6D:8F:6F:8E:81:56:3C:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzLzNNirto74IlRtj2-OgVY8b9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/D_nfVPEWgPERqLZPYNLPgGZWqkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7bc8da-cb82-4abc-b2f0-13b4b80c54ba/1/FzLzNNirto74IlRtj2-OgVY8b9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
20:26:2d:46:9d:14:7e:99:90:87:bb:34:b6:23:2d:c7:bc:28:
f1:3b:79:20:ac:7e:3b:21:4d:e4:fb:e6:e3:38:02:b3:a5:c0:
96:55:07:62:fc:19:80:3a:04:1b:c7:8c:58:9b:4d:ad:0c:c7:
d4:3b:cf:48:0d:ce:46:06:f7:25:a3:f0:75:49:9e:1e:c2:69:
fc:3e:ff:5a:a3:d0:58:fc:3c:45:4d:24:2f:5b:54:69:97:4a:
01:b0:f7:51:7b:bc:85:c8:d7:ee:d8:b9:e9:c3:38:dd:ef:c5:
6f:cb:2b:f2:a4:03:22:10:e4:dc:bc:ba:8c:04:25:d7:01:98:
04:b4:de:fa:2c:e8:db:d8:ab:1c:e9:33:75:9a:90:a9:0c:6e:
74:6e:18:c4:49:26:5f:f6:07:90:06:02:e8:cc:4a:27:56:fd:
87:3c:f4:98:87:ef:0e:45:b9:c3:ee:8a:de:bb:85:0d:ef:3c:
92:8d:93:65:29:ee:9d:91:b3:6f:95:51:6b:18:be:18:fe:c8:
72:31:37:cd:ae:da:ac:25:b4:47:af:5c:b6:7a:5f:d1:83:9a:
42:c4:39:76:fb:5d:49:7a:49:51:66:fb:2a:58:a7:7e:09:6b:
80:4f:21:a2:d3:9d:6b:00:7d:a1:4d:aa:44:7e:99:18:45:c2:
5c:e5:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 18 13:53:09 2024 by rpki-client on console.sobornost.net