Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KGTQvVoYVSpetphHagFrwS5-wE0.roa
File: KGTQvVoYVSpetphHagFrwS5-wE0.roa (raw, json)
Hash identifier: 4oryaOGna8oHJ6siYbu+vPBmIxLHfF+jzKSlCyTECuk=
Subject key identifier: 28:64:D0:BD:5A:18:55:2A:5E:B6:98:47:6A:01:6B:C1:2E:7E:C0:4D
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01857246DB311F77721A26F00CD6AA0C7BD2
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KGTQvVoYVSpetphHagFrwS5-wE0.roa
Signing time: Mon 02 Jan 2023 11:38:44 +0000
ROA not before: Mon 02 Jan 2023 11:38:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210283
IP address blocks: 2a0c:9a40:8193::/48 maxlen: 48
2a0c:9a40:819e::/48 maxlen: 48
2a0c:9a40:8199::/48 maxlen: 48
2a0c:9a40:8194::/48 maxlen: 48
2a0c:9a40:8197::/48 maxlen: 48
2a0c:9a40:8192::/48 maxlen: 48
2a0c:9a40:819d::/48 maxlen: 48
2a0c:9a40:819b::/48 maxlen: 48
2a0c:9a40:8196::/48 maxlen: 48
2a0c:9a40:8191::/48 maxlen: 48
2a0c:9a40:819c::/48 maxlen: 48
2a0c:9a40:819f::/48 maxlen: 48
2a0c:9a40:819a::/48 maxlen: 48
2a0c:9a40:8190::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:db:31:1f:77:72:1a:26:f0:0c:d6:aa:0c:7b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 2 11:38:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2864d0bd5a18552a5eb698476a016bc12e7ec04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9a:7d:58:95:bd:d5:6c:eb:5b:4d:d6:6c:32:
09:54:5f:a1:db:f8:1a:d4:26:1e:0c:fa:56:84:2e:
20:97:4e:3c:a1:59:69:8d:3b:25:0b:e4:a8:38:0a:
f8:0c:cc:86:4a:c9:ae:d3:96:bf:3f:ee:f1:04:81:
67:76:a4:fc:bc:91:ce:95:f2:22:48:a4:5c:9a:f4:
08:1d:be:01:b8:f6:19:2a:84:55:3d:cf:4a:11:32:
56:71:6d:ff:c8:25:c3:0b:bb:2e:88:f5:fc:39:e0:
48:e3:4b:a8:2d:c8:3e:9f:8e:ff:78:b0:d6:4c:8c:
b5:fc:93:4b:e3:02:e9:7a:e9:be:30:c3:17:e5:34:
38:42:be:bf:d7:75:45:0f:d5:08:5d:0a:2c:97:4e:
3d:c1:15:92:30:43:a1:86:5a:63:37:ad:1a:ab:88:
44:f0:48:b5:3d:73:66:ee:61:a2:c9:a0:6b:96:23:
ad:74:c4:da:3e:41:5e:f5:61:5b:32:24:72:73:4d:
9e:f2:76:a3:97:83:53:f3:10:d3:97:5c:ac:49:a0:
b7:ff:e6:64:2c:75:ed:e9:36:13:2f:27:16:1b:ad:
4d:fe:04:2d:6b:15:01:53:7a:56:99:7a:97:60:10:
54:93:32:6c:91:ce:39:1a:dc:ff:1d:71:9e:e7:4e:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:64:D0:BD:5A:18:55:2A:5E:B6:98:47:6A:01:6B:C1:2E:7E:C0:4D
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KGTQvVoYVSpetphHagFrwS5-wE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8190::-2a0c:9a40:8194:ffff:ffff:ffff:ffff:ffff
2a0c:9a40:8196::/47
2a0c:9a40:8199::-2a0c:9a40:819f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:14:e7:60:59:9e:c9:0c:11:16:f3:7d:8d:c3:ea:9e:62:3b:
ec:03:13:60:be:38:4b:12:3e:ce:66:60:3e:1f:2b:d1:bd:96:
80:69:de:c5:08:29:c9:af:d2:f6:90:d4:1a:b5:d8:8a:ef:08:
b5:93:d2:e4:32:de:ca:a9:5d:dd:cb:d8:ba:a9:e5:32:04:42:
45:b4:d0:02:d9:5d:4b:23:12:42:8a:8c:7d:63:3e:c6:81:9c:
3e:c8:fa:31:03:64:4c:ce:b2:8d:ef:61:8b:71:79:a8:48:cc:
0e:29:36:80:f3:11:4e:0c:50:91:6e:19:4b:5a:8d:d0:8c:b3:
a3:40:a5:e3:5b:f5:1a:e9:1a:69:a2:2c:16:11:e3:14:8e:19:
4a:5b:88:b7:80:f5:88:bf:ea:30:36:a0:e8:79:52:6e:cc:e6:
af:f0:45:d3:60:8d:0d:73:b3:16:5b:14:f5:8b:67:43:4a:31:
ce:a1:0c:b4:42:b6:36:b4:2b:8a:8e:69:95:0a:9d:30:27:00:
4e:1f:b7:ec:03:22:0a:73:0e:1c:f6:8d:5a:ee:2b:99:f1:c2:
d1:13:4a:2e:ae:f5:37:3a:2e:26:3e:f3:6e:c3:ee:96:59:7c:
c5:b8:6a:ce:85:57:58:af:30:9d:a9:33:72:21:8f:c5:b2:c6:
2d:ca:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:49 2024 by rpki-client on console-fra.rpki-client.org