Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/K6ZBZRp6sds2PeZ7un2-Z0dBK5g.roa
File: K6ZBZRp6sds2PeZ7un2-Z0dBK5g.roa (raw, json)
Hash identifier: CorTqPrDUIP/Oi9xC0cmh5ue0D4lwP4r9wLAps7N+NU=
Subject key identifier: 2B:A6:41:65:1A:7A:B1:DB:36:3D:E6:7B:BA:7D:BE:67:47:41:2B:98
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 0185DE9CD19E53514BF0650C2DB90F37C3D0
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/K6ZBZRp6sds2PeZ7un2-Z0dBK5g.roa
Signing time: Mon 23 Jan 2023 12:31:37 +0000
ROA not before: Mon 23 Jan 2023 12:31:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47292
IP address blocks: 2a0b:7e00::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:de:9c:d1:9e:53:51:4b:f0:65:0c:2d:b9:0f:37:c3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jan 23 12:31:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ba641651a7ab1db363de67bba7dbe6747412b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:17:ba:5d:5c:3a:8e:89:73:24:a4:56:79:3e:
71:62:a0:c4:09:12:d4:e5:44:29:ec:f0:19:dd:23:
70:31:7c:ab:fb:ef:2e:7b:e6:f0:b5:9f:34:5b:ad:
b7:3a:4b:f6:f6:44:63:09:1f:0e:07:3c:86:98:85:
c4:aa:ad:b8:67:f5:a4:99:54:5e:4f:4a:6f:f0:00:
c0:16:ba:0a:a0:23:82:37:75:62:70:6c:97:02:1f:
b3:52:17:8a:ae:56:92:89:7e:14:86:78:f3:4a:a0:
86:ff:d1:e5:f7:19:c2:a0:ca:2e:47:d2:07:35:f4:
a8:63:fd:66:5d:29:c9:dc:43:58:e1:4a:d5:cc:51:
4b:4c:58:3e:4d:cd:51:bd:d8:b8:c1:60:8b:a7:5a:
96:62:fa:e2:99:3b:e6:65:bc:50:35:ea:5b:94:01:
f5:9c:68:f4:33:c8:21:0c:f0:4d:95:65:69:70:18:
de:97:64:c3:7d:f5:40:52:6f:d8:6e:30:66:5c:c9:
51:91:9a:c3:90:11:0a:a4:b5:b8:15:af:ff:5b:d3:
9a:19:88:1a:da:07:d7:e4:0e:9a:59:34:5e:56:c0:
95:c0:d1:e1:8c:0b:85:1e:74:d3:98:04:b6:36:fd:
85:27:2b:62:f0:2b:6e:19:6a:e7:b0:1e:5b:9e:2c:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A6:41:65:1A:7A:B1:DB:36:3D:E6:7B:BA:7D:BE:67:47:41:2B:98
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/K6ZBZRp6sds2PeZ7un2-Z0dBK5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:7e00::/36
Signature Algorithm: sha256WithRSAEncryption
24:b7:c4:8e:18:c0:c8:ea:aa:15:f5:f0:08:83:a0:df:1e:08:
32:6a:c9:5c:cc:8b:00:39:d5:c8:b7:99:64:90:2c:ef:e3:66:
19:ce:20:a9:14:97:3c:73:40:0c:6d:c2:fc:3b:5e:34:66:56:
c0:d5:53:5f:23:02:c7:72:50:1f:9e:39:15:90:49:2a:98:a6:
19:da:35:5a:60:3f:de:12:ff:1e:e5:84:e2:80:ff:3e:65:eb:
71:fa:81:cd:2b:e5:f5:ec:a9:f3:df:be:63:b9:10:e0:f9:a7:
bc:d2:78:31:5d:4e:4a:03:03:24:39:07:e3:03:c5:5a:2d:4e:
e9:29:91:67:d1:0e:64:8c:7f:ed:51:a5:3d:0d:04:b7:da:f9:
5d:4e:8b:d6:19:cb:49:48:59:1f:7d:21:81:2a:ec:b2:2d:97:
1d:b0:50:87:8b:89:a7:40:32:63:84:73:b4:5b:76:b4:ab:30:
55:1e:63:b5:76:a3:63:c3:4c:ff:a3:de:99:58:b2:00:cc:74:
97:47:6d:d7:ef:1b:6e:82:25:65:d7:cb:cb:41:3d:94:53:e5:
a6:c0:14:7a:39:5e:c9:8a:a7:e8:43:6e:59:a5:9c:3c:2a:b7:
74:12:7f:06:24:66:6d:57:85:89:57:cb:17:d5:75:12:0c:bf:
e5:d3:94:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org