Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/KVzLXp1Uth_XIx1qdAbLovZDoCU.roa
File: KVzLXp1Uth_XIx1qdAbLovZDoCU.roa (raw, json)
Hash identifier: ZTD5GlR946hrlziInCjgwbz/SxlSJPm23c0tbLRfa3I=
Subject key identifier: 29:5C:CB:5E:9D:54:B6:1F:D7:23:1D:6A:74:06:CB:A2:F6:43:A0:25
Certificate issuer: /CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Certificate serial: 01856F6701DBB4280BDE61AE2543404CFABD
Authority key identifier: BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/KVzLXp1Uth_XIx1qdAbLovZDoCU.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42927
IP address blocks: 2a07:a440::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:01:db:b4:28:0b:de:61:ae:25:43:40:4c:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfa6e96fca7a2783cb9721ebb62de1b536c163a9
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=295ccb5e9d54b61fd7231d6a7406cba2f643a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:06:46:f3:cf:2c:77:5f:fb:75:b7:b8:5f:41:
ec:53:2a:a2:fa:1e:78:2f:79:ec:ed:2d:9d:50:83:
39:a5:00:9c:6b:16:41:19:89:c6:c0:65:1d:b9:58:
cf:5b:41:9e:26:b5:e5:bb:90:02:09:a9:3b:f8:5b:
dd:af:43:28:33:4c:91:1f:6d:1f:92:b5:1f:71:19:
a0:48:a9:d4:03:aa:6a:aa:cf:fa:27:61:99:c5:fb:
f5:d9:88:38:2d:7d:34:c0:d7:94:72:27:7f:f5:f8:
f5:ff:d9:0d:5c:1d:5a:ba:48:a7:3f:c4:d8:76:ab:
b9:fa:e9:f6:a5:0d:cf:a1:0b:03:e3:e9:76:68:ba:
3a:3e:5b:ee:2e:6e:26:72:69:f2:73:72:7e:ba:45:
f6:df:7a:5a:a2:3d:94:82:50:02:f2:80:0d:7f:f1:
4a:58:d9:63:97:dc:32:bf:5a:19:b5:d8:fb:b1:76:
3f:ad:2c:df:0a:f5:67:d0:85:b1:62:1e:46:ce:90:
c6:99:b4:37:df:e4:e7:af:91:01:12:25:18:ee:64:
6a:be:ff:cc:25:2b:7a:ef:3d:e5:9d:c7:72:ec:36:
14:b4:49:2b:80:85:64:f4:58:c3:59:6b:20:5c:58:
c4:94:2b:0f:45:ed:8e:1b:cb:50:7b:cb:ae:71:93:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:CB:5E:9D:54:B6:1F:D7:23:1D:6A:74:06:CB:A2:F6:43:A0:25
X509v3 Authority Key Identifier:
keyid:BF:A6:E9:6F:CA:7A:27:83:CB:97:21:EB:B6:2D:E1:B5:36:C1:63:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6bpb8p6J4PLlyHrti3htTbBY6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/KVzLXp1Uth_XIx1qdAbLovZDoCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/856ea4-de5a-4f11-8228-87bf6fdbe193/1/v6bpb8p6J4PLlyHrti3htTbBY6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:a440::/30
Signature Algorithm: sha256WithRSAEncryption
13:6d:30:a9:6a:e5:ab:a6:2c:35:74:2f:f3:c9:40:cc:2f:97:
ef:4d:44:3d:b8:db:dc:1d:d2:c7:41:8b:cb:b6:52:10:cd:dd:
1d:f9:dc:b1:05:13:70:9d:a1:55:10:37:f9:d0:d6:4b:8f:0b:
3f:d2:e3:4f:47:99:00:e4:bf:ab:5c:81:dc:72:71:11:e2:53:
2f:6c:76:4f:59:10:5a:01:66:d9:16:d0:fe:90:8e:fd:04:07:
45:a0:60:d7:e1:14:d2:ec:01:a5:f1:68:1a:1d:9c:a5:8d:8e:
ad:c1:25:9c:61:d8:fb:07:07:cf:1b:c5:10:d3:27:f8:24:e7:
11:0d:5b:d9:bb:e4:d7:59:64:dc:17:56:4c:3d:3a:1c:75:bf:
09:40:aa:fe:d6:9d:3d:61:8b:8c:6b:89:57:7d:2f:a8:59:7b:
4c:1e:13:b6:20:86:3d:a5:e5:84:4f:df:c1:11:d1:be:55:72:
48:c7:bb:0b:1d:6c:c9:2f:19:3f:75:c9:ee:9b:a2:3a:7d:87:
99:81:5d:eb:3a:34:b8:1c:ef:1c:94:9f:48:1b:a3:47:35:59:
48:2a:50:8d:f4:bf:d5:64:70:a3:3f:94:b3:c8:21:a5:70:4c:
8a:eb:32:83:95:d9:1e:4c:ab:59:f4:72:e0:72:e5:93:98:7f:
87:25:74:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:21 2024 by rpki-client on console-ams.rpki-client.org