Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/6-KWoH8i3_Rfr4O2bnlKxmHgpHE.roa
File: 6-KWoH8i3_Rfr4O2bnlKxmHgpHE.roa (raw, json)
Hash identifier: aRi0tGG0D9lib/hJFwD7nILDH0tXb8HJZ3aYVyRCbNE=
Subject key identifier: EB:E2:96:A0:7F:22:DF:F4:5F:AF:83:B6:6E:79:4A:C6:61:E0:A4:71
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 0189265C4D409543157BBCA090890715F57D
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/6-KWoH8i3_Rfr4O2bnlKxmHgpHE.roa
Signing time: Wed 05 Jul 2023 14:02:10 +0000
ROA not before: Wed 05 Jul 2023 14:02:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:85c0::/40 maxlen: 48
2a13:85c0:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Jul 2023 14:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:5c:4d:40:95:43:15:7b:bc:a0:90:89:07:15:f5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jul 5 14:02:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebe296a07f22dff45faf83b66e794ac661e0a471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f7:5f:40:33:d3:13:51:66:d7:fc:22:08:8d:
d9:6e:7c:fc:e3:40:0f:8b:3e:1e:b2:64:9e:87:4e:
cc:24:ec:c7:10:ca:31:1f:60:d8:28:9a:6b:c6:11:
e7:0c:a6:83:27:f8:a5:cc:44:0f:87:6e:44:34:79:
fa:f7:f8:3b:5c:0e:b7:09:d4:30:17:95:ec:26:c2:
2d:e3:c8:e4:37:15:7f:1d:8d:9e:94:7d:e3:a2:db:
f6:39:bc:b8:53:1b:86:af:58:30:26:0a:c3:e5:b7:
be:41:c5:e2:f0:1b:1d:df:4d:13:bc:91:19:8e:c8:
ac:12:ef:4a:d7:4c:76:be:c9:9b:aa:24:82:c7:42:
16:9b:85:e1:b4:8c:60:d0:33:95:b9:9a:29:28:5a:
87:4d:4f:a6:79:4d:c9:fe:af:50:03:3d:82:33:85:
66:47:56:53:80:f2:9c:32:b5:bf:9b:f1:d1:63:8a:
8c:78:94:40:fd:0a:38:95:79:09:72:9b:c3:4a:b8:
2b:5e:f1:d7:51:08:87:3e:5b:58:9b:1b:cb:63:b3:
1f:b6:0b:c6:ef:88:6d:83:cf:2c:75:d0:c1:91:2a:
de:4b:ea:19:dc:3f:84:9e:28:73:10:d3:b2:09:0c:
56:17:fe:2c:0a:c8:a1:c5:f3:62:26:b9:be:7e:04:
ca:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:96:A0:7F:22:DF:F4:5F:AF:83:B6:6E:79:4A:C6:61:E0:A4:71
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/6-KWoH8i3_Rfr4O2bnlKxmHgpHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:85c0::/39
Signature Algorithm: sha256WithRSAEncryption
63:e2:93:80:7b:3f:e5:b4:82:8c:74:c4:96:b7:71:ad:e2:60:
12:f4:79:c1:8f:f6:1f:92:e1:fd:3f:8d:ba:63:d1:2b:99:ff:
71:2f:9c:e7:90:91:a7:54:13:54:72:4d:0e:58:51:51:a5:e7:
39:3e:9d:99:3a:33:cd:8d:81:79:05:19:52:5a:4a:a8:81:c0:
47:85:92:dc:de:77:1c:71:c2:a5:e3:b9:96:87:53:14:98:c4:
e7:cf:b6:2a:48:24:c2:26:8f:17:ce:c8:1a:b5:44:e3:21:57:
fe:d4:e4:07:89:f9:b0:1b:12:3f:69:aa:37:92:bf:4d:0f:16:
9e:30:96:bf:29:4b:86:6e:0e:6b:f1:d1:50:90:9e:0b:51:f6:
45:42:b2:2b:a9:fa:5f:d8:f0:3d:41:c7:84:db:c5:95:fb:c3:
3e:54:96:05:74:7e:6a:62:c9:b7:d2:5f:2a:4c:d6:72:02:f0:
a9:67:9c:9c:35:fd:d4:d0:24:89:43:0c:d0:4e:d1:c7:cc:e2:
e3:2d:58:b1:d0:f5:29:e4:67:89:90:b6:50:d7:72:14:fc:b4:
b3:0d:ab:5a:7a:9f:27:b5:10:dd:df:03:83:35:d0:86:81:51:
18:95:2f:62:d1:ee:44:cb:7c:95:66:eb:ec:38:9a:a3:a0:b1:
43:89:fb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:27 2024 by rpki-client on console-ams.rpki-client.org