Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/Cae2k7wkRVN_B3GisNGgPca6Rek.roa
File: Cae2k7wkRVN_B3GisNGgPca6Rek.roa (raw, json)
Hash identifier: Uv9wJJA4/lGmFfIQ5Q29A2Qk523eRSrX7f7OPAzacDc=
Subject key identifier: 09:A7:B6:93:BC:24:45:53:7F:07:71:A2:B0:D1:A0:3D:C6:BA:45:E9
Certificate issuer: /CN=61106d2dff7116f35ab7fa10275a45e383bce523
Certificate serial: 0185723A40D4D38F7B00AE7CD07EB168A189
Authority key identifier: 61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/Cae2k7wkRVN_B3GisNGgPca6Rek.roa
Signing time: Mon 02 Jan 2023 11:24:58 +0000
ROA not before: Mon 02 Jan 2023 11:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1836
IP address blocks: 2001:67c:1300::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:3a:40:d4:d3:8f:7b:00:ae:7c:d0:7e:b1:68:a1:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61106d2dff7116f35ab7fa10275a45e383bce523
Validity
Not Before: Jan 2 11:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09a7b693bc2445537f0771a2b0d1a03dc6ba45e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:ad:c0:f2:65:b4:9e:bc:09:93:62:de:46:
a3:9c:0a:b8:ad:96:29:e8:29:5e:a3:fe:9c:6f:26:
28:c3:9f:10:aa:d4:42:79:59:71:34:8b:0a:98:40:
f6:99:30:ca:f6:89:29:e1:db:c4:0d:37:78:79:d7:
ff:c2:24:ee:48:6e:bd:07:ab:1f:c5:4e:40:72:5c:
d7:62:0c:c7:73:2d:91:92:71:dc:28:70:dc:22:55:
fc:4a:dc:76:57:d3:31:91:cd:6a:b1:cc:bb:6a:b9:
d5:ea:c1:e2:6a:5e:1e:c5:25:c6:e2:56:e1:66:ce:
2a:23:7c:2e:7e:3d:55:b3:1b:4c:bd:89:e8:19:45:
1b:2e:ee:b9:6c:93:39:8f:52:21:6b:62:17:b9:e3:
4d:96:b1:a4:ca:08:cf:98:95:3e:91:90:8e:17:45:
c9:9b:83:d6:33:e7:65:9b:95:14:1f:5a:3f:33:8a:
5f:eb:22:84:fa:bf:03:d2:8d:59:39:92:47:30:61:
6d:63:82:4b:89:46:8a:87:15:4d:9e:92:a6:19:5c:
d9:e3:d9:b0:53:c4:90:ad:72:f9:4d:bc:7b:0b:d4:
5b:c4:49:ac:17:6c:0a:9d:e7:25:99:c6:db:4e:b4:
50:7f:81:ba:64:e2:36:4e:cc:76:c7:9f:07:0e:a6:
84:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A7:B6:93:BC:24:45:53:7F:07:71:A2:B0:D1:A0:3D:C6:BA:45:E9
X509v3 Authority Key Identifier:
keyid:61:10:6D:2D:FF:71:16:F3:5A:B7:FA:10:27:5A:45:E3:83:BC:E5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YRBtLf9xFvNat_oQJ1pF44O85SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/Cae2k7wkRVN_B3GisNGgPca6Rek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a16ea5-3867-4406-9f2a-a4944e9625c0/1/YRBtLf9xFvNat_oQJ1pF44O85SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1300::/48
Signature Algorithm: sha256WithRSAEncryption
47:43:4f:ac:bb:7d:d7:1c:ab:86:a0:54:cd:7e:6c:d7:ed:10:
5c:69:4d:a7:ba:95:1b:6a:d2:4f:22:87:5e:82:2e:6a:ec:86:
23:7f:3c:f6:cf:a4:71:9b:85:4b:89:86:ac:23:1b:46:ab:d0:
7f:36:22:f9:aa:1f:d8:9f:55:2c:9c:36:07:5c:3c:b7:fc:6a:
d9:bd:62:98:6b:90:d9:1c:12:83:3d:8a:bc:54:16:32:7b:c3:
76:9c:52:0f:cd:21:9c:f9:8b:66:70:15:b3:a6:65:2c:cd:d7:
a6:97:98:02:18:d1:46:de:1b:c7:88:12:ef:f0:54:84:fb:fb:
18:5a:7c:04:55:b3:1d:7a:7d:6f:64:4f:2b:cb:93:f7:69:ed:
c3:f5:71:9d:7b:7f:39:07:03:68:e5:94:04:d8:0e:d5:28:68:
00:4c:e2:c2:3d:82:3e:1a:37:0f:f1:82:db:c4:b5:ae:59:1d:
66:bc:85:9a:50:c3:c9:8f:f2:51:fc:b7:bc:e3:d2:5b:c4:9a:
7c:79:80:70:c0:b6:ea:aa:84:a4:8c:fc:15:4a:60:91:b3:27:
f5:a3:0c:c2:f8:fc:06:05:5a:d2:cc:97:88:a3:24:54:ec:96:
98:a2:3f:9e:47:36:81:b4:f4:3b:44:41:06:04:a3:18:80:ae:
11:31:ff:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:38 2024 by rpki-client on console-fra.rpki-client.org