Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/KFV5Ob3WCskyf-1NehoAnxs0Ryw.roa
File: KFV5Ob3WCskyf-1NehoAnxs0Ryw.roa (raw, json)
Hash identifier: rTaaQ1c3ygSQQJE7w76/Rc+tYEeb6N+FNmD1ttSurE8=
Subject key identifier: 28:55:79:39:BD:D6:0A:C9:32:7F:ED:4D:7A:1A:00:9F:1B:34:47:2C
Certificate issuer: /CN=42150d463c32667c6a9296c8d25bb383cf419c61
Certificate serial: 018B2904B2C751327A06A392C136604134F7
Authority key identifier: 42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/KFV5Ob3WCskyf-1NehoAnxs0Ryw.roa
Signing time: Fri 13 Oct 2023 12:30:55 +0000
ROA not before: Fri 13 Oct 2023 12:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204174
IP address blocks: 2a13:e2c0:fd59::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:29:04:b2:c7:51:32:7a:06:a3:92:c1:36:60:41:34:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42150d463c32667c6a9296c8d25bb383cf419c61
Validity
Not Before: Oct 13 12:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=28557939bdd60ac9327fed4d7a1a009f1b34472c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f3:1a:c7:da:4b:96:5b:3e:41:83:e8:9b:c6:
81:26:0a:2b:f7:ad:cf:fd:6c:b8:01:aa:07:39:99:
65:70:4d:a8:35:a5:42:89:0b:7e:30:a2:00:0b:d1:
dd:53:6d:3a:65:4f:62:c2:42:4f:69:22:ad:21:6c:
f4:bb:ee:6f:09:3d:9e:ac:27:0d:56:6a:d8:ab:aa:
b5:4c:21:b3:9e:df:7a:74:db:ee:e1:13:df:d3:c8:
7d:1c:2d:a7:ba:63:2f:0b:9d:b4:c2:84:29:6c:31:
54:a0:5c:56:a3:7e:a3:dc:08:9f:dd:ce:75:84:da:
c5:7c:9b:44:d5:8a:38:65:c8:08:74:de:a3:29:38:
f0:45:b3:90:58:7a:1f:0e:c2:57:a8:88:9a:2e:f3:
e7:cf:3e:45:fc:53:41:73:21:c1:1b:a0:19:e8:15:
5b:d4:37:04:9e:02:63:7b:1f:40:73:cb:bc:d1:b0:
62:69:29:2d:1a:03:43:46:b0:1f:7a:fb:38:b0:6c:
98:57:07:4a:78:04:89:c0:ee:95:4c:47:40:f2:0f:
59:b8:a7:1a:88:01:d9:4e:0c:ab:b7:b3:a6:95:e3:
39:a3:48:aa:a0:76:18:2c:75:e4:cf:48:c5:82:bc:
b0:7d:e6:c4:bf:dc:e4:2b:a7:2e:62:f9:e0:dc:a8:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:55:79:39:BD:D6:0A:C9:32:7F:ED:4D:7A:1A:00:9F:1B:34:47:2C
X509v3 Authority Key Identifier:
keyid:42:15:0D:46:3C:32:66:7C:6A:92:96:C8:D2:5B:B3:83:CF:41:9C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhUNRjwyZnxqkpbI0luzg89BnGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/KFV5Ob3WCskyf-1NehoAnxs0Ryw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/079f67-58f7-4bd8-b7db-be267e6a16d8/1/QhUNRjwyZnxqkpbI0luzg89BnGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:e2c0:fd59::/48
Signature Algorithm: sha256WithRSAEncryption
75:ea:ab:7c:62:57:8e:8b:d5:5f:2f:13:62:fc:9a:8b:d1:3d:
42:88:97:a6:8b:74:95:c9:b8:61:cb:ba:f5:d3:e6:d0:85:92:
03:2a:34:cf:2a:a3:0c:a3:20:f1:58:51:41:cf:8d:3f:38:27:
d5:9d:ab:b6:4a:43:65:27:c7:16:ab:53:93:d6:ea:44:7c:95:
32:fd:54:d6:1b:65:50:0e:1a:8a:98:c8:63:3c:1e:d0:7b:72:
55:38:f8:4b:20:d0:9d:f1:9d:86:be:f1:c0:8c:d8:1a:10:8c:
f1:ab:1f:5a:0a:28:6a:f6:49:ae:c5:40:ec:bf:d3:f9:ed:51:
2b:94:33:a2:0d:6b:e0:96:33:dd:38:9e:ee:1f:1b:14:df:f0:
84:88:66:34:04:bf:17:14:04:03:9d:68:e2:63:e1:f3:81:60:
24:aa:2f:4e:91:66:2a:f4:19:7e:af:5f:ff:e7:81:b1:ff:fe:
8f:55:9f:d0:b7:ba:06:10:ce:ec:1b:3c:93:78:aa:f3:66:28:
11:a5:8c:6c:60:12:ac:93:4c:ef:3e:0c:c7:5b:45:d8:bf:ae:
c2:b5:2b:15:7f:e6:a5:e2:19:67:3b:54:98:44:7c:0e:6e:71:
85:b2:d6:98:de:d8:ad:47:e3:97:7c:27:a3:cb:36:d2:f2:b3:
2e:ca:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:16 2024 by rpki-client on console-ams.rpki-client.org