Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/k2R-CPcvI2_F2BWzg8Q_1IRmLmU.roa
File: k2R-CPcvI2_F2BWzg8Q_1IRmLmU.roa (raw, json)
Hash identifier: c+NQ9dT76TtugPutLxpiYYYow2hSnV6ZLf4TIxjCr/g=
Subject key identifier: 93:64:7E:08:F7:2F:23:6F:C5:D8:15:B3:83:C4:3F:D4:84:66:2E:65
Certificate issuer: /CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Certificate serial: 0185708CAAF51C01D54376C0E9DF14C7E0AD
Authority key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/k2R-CPcvI2_F2BWzg8Q_1IRmLmU.roa
Signing time: Mon 02 Jan 2023 03:35:44 +0000
ROA not before: Mon 02 Jan 2023 03:35:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44051
IP address blocks: 2a03:6fe0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 28 Jan 2023 21:46:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:aa:f5:1c:01:d5:43:76:c0:e9:df:14:c7:e0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Validity
Not Before: Jan 2 03:35:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93647e08f72f236fc5d815b383c43fd484662e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:81:c8:bc:b4:e5:e5:d8:77:2c:6e:95:35:ff:
70:1a:15:b7:0d:a2:c3:b9:37:0a:62:54:5b:83:62:
1e:e0:ed:d4:b2:ed:18:8d:e8:23:43:84:7d:ac:1b:
85:0d:ee:11:41:04:45:ab:59:18:88:ec:4d:bc:3e:
ec:9b:1f:a8:89:b8:2d:39:c4:2a:bc:17:cd:d5:72:
60:a8:d5:59:a3:07:39:99:ba:8d:04:45:32:f6:69:
e4:02:a4:24:ec:c1:5a:8c:45:7f:f9:76:57:a0:29:
fd:67:16:0e:48:0f:0d:97:ce:8f:69:d0:32:0b:41:
17:dc:33:5d:58:c8:46:ea:87:73:73:b4:f5:80:d5:
60:02:9f:49:2d:e4:9e:8d:48:44:cc:3c:18:52:15:
55:72:d0:6a:b0:96:0b:c4:7e:40:04:24:e5:e8:75:
41:ff:43:77:e4:da:ce:2a:90:9e:72:fe:65:62:98:
0e:fb:f0:94:83:be:d2:f7:4d:11:e1:8b:29:be:cf:
78:93:e0:8e:49:6b:6e:de:e7:f6:1a:aa:df:e5:b4:
f6:f8:e0:88:2a:72:2f:ae:64:b2:0c:de:b2:eb:4e:
f7:db:4f:3a:5e:52:ba:01:b3:a1:88:22:19:39:a3:
34:7d:1d:08:3e:70:0b:ed:13:58:b8:97:03:87:4a:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:64:7E:08:F7:2F:23:6F:C5:D8:15:B3:83:C4:3F:D4:84:66:2E:65
X509v3 Authority Key Identifier:
keyid:96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/k2R-CPcvI2_F2BWzg8Q_1IRmLmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6fe0:1::/48
Signature Algorithm: sha256WithRSAEncryption
33:95:9a:8b:65:97:ee:71:32:ce:91:97:0a:14:f3:6c:c2:b1:
0a:bc:05:14:b2:08:b4:f9:5f:87:d2:1e:5b:cb:5e:e4:d6:c7:
5e:de:f6:41:da:ef:6b:a6:7e:05:2b:a0:2e:fe:6b:4f:0f:f2:
eb:6e:2f:2c:ba:9a:b1:3d:b8:0d:8e:91:be:08:07:3b:ac:f3:
2c:e5:2a:c8:de:60:53:e8:24:75:c2:41:3e:84:a2:bd:68:bd:
a4:c1:5f:4f:0e:0c:e8:75:84:06:9a:1e:fe:c0:a7:04:76:a3:
14:b5:af:cf:d5:5c:14:b9:79:6a:a1:d8:69:72:8a:d8:33:2c:
61:a3:a2:5e:62:3e:34:cd:dc:20:04:21:5b:f5:01:96:5b:b9:
9f:0f:5f:2c:aa:97:c6:1d:28:2c:dd:8d:16:b2:87:3d:32:58:
a9:91:f2:23:23:5a:7d:4c:ee:05:86:3e:1d:20:d4:24:bb:26:
ff:9c:34:3a:6c:3a:8b:9c:6a:04:a0:92:2e:ac:38:7a:96:4d:
8f:92:50:bf:98:60:3b:e1:79:07:89:00:6d:fa:26:50:28:1d:
64:68:fe:9c:8c:25:5c:0d:e9:86:0d:73:ce:1a:94:d7:d7:cb:
b2:00:ee:f9:d0:82:19:be:02:4b:01:14:ee:55:e5:c7:8b:9f:
e1:a3:f7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:06 2024 by rpki-client on console-ams.rpki-client.org