Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/6S6bP_h0ejymhUxDb8UsDasrVHo.roa
File: 6S6bP_h0ejymhUxDb8UsDasrVHo.roa (raw, json)
Hash identifier: AOOU/sciwZoc01DjJBTVYTza8I5GqC5EOq4V8XE0hng=
Subject key identifier: E9:2E:9B:3F:F8:74:7A:3C:A6:85:4C:43:6F:C5:2C:0D:AB:2B:54:7A
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018B99F29E1C1C9DCBF00338D3F02B20F131
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/6S6bP_h0ejymhUxDb8UsDasrVHo.roa
Signing time: Sat 04 Nov 2023 10:48:16 +0000
ROA not before: Sat 04 Nov 2023 10:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211293
IP address blocks: 2a13:b487:4100::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:99:f2:9e:1c:1c:9d:cb:f0:03:38:d3:f0:2b:20:f1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Nov 4 10:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e92e9b3ff8747a3ca6854c436fc52c0dab2b547a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:5f:ce:f1:68:69:b9:9d:4f:b7:f8:e0:0a:
af:11:bc:87:5a:84:4f:2f:2c:e9:a9:58:99:8c:ca:
4c:67:10:cb:75:57:bd:af:e1:ec:8f:88:a1:04:2c:
18:29:f8:7b:11:29:13:45:bb:01:13:26:24:cd:59:
23:0d:18:e2:09:6e:83:d6:6b:e6:93:42:08:8f:87:
d9:c9:65:e5:31:32:d8:17:16:29:f4:02:c9:44:da:
2d:ed:72:50:1f:d8:9d:17:85:e1:2e:11:60:c3:34:
6e:8c:2d:90:b9:1a:45:d0:a3:85:f3:1a:92:a9:51:
dc:5e:5d:61:63:ea:40:20:23:eb:5b:3f:3d:84:96:
f2:79:98:f2:c6:c2:b9:2c:6b:85:4d:6c:bb:75:8c:
84:4b:ac:b5:5c:0e:7e:5a:0f:c2:fc:5f:eb:7c:b2:
1b:8b:af:fb:dc:6f:08:6e:43:40:81:a6:e0:f0:0f:
50:aa:76:8d:cf:c3:fd:e0:10:81:3a:66:c5:ad:6d:
9e:21:cc:0a:1c:2a:48:cd:e2:11:65:17:41:54:5f:
5c:43:e5:fd:53:01:8d:04:dd:c0:32:24:7f:7a:7b:
b7:81:70:d0:2f:3a:67:e1:4d:d9:2f:19:b0:28:3e:
c5:5c:68:ce:6b:50:62:40:ce:54:c5:29:f5:3c:00:
2f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2E:9B:3F:F8:74:7A:3C:A6:85:4C:43:6F:C5:2C:0D:AB:2B:54:7A
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/6S6bP_h0ejymhUxDb8UsDasrVHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:4100::/40
Signature Algorithm: sha256WithRSAEncryption
8e:8c:29:ab:fa:47:04:87:08:54:26:15:49:df:0d:97:fb:3b:
50:44:4f:0e:ab:15:73:75:1a:09:37:dd:19:0d:a1:73:a1:ca:
dc:cc:65:65:31:73:b0:b6:65:f8:0d:fe:59:03:2e:b1:69:75:
08:60:72:e9:db:b5:ad:80:37:20:01:10:78:03:e0:b7:ad:65:
1c:67:85:46:ca:88:06:c8:e4:51:a2:65:8a:67:d4:3f:51:c1:
7e:78:59:c1:43:dc:97:35:12:a5:26:24:dd:64:ab:67:f9:25:
4d:fa:24:1a:a3:a9:6a:1b:5d:cc:d3:8d:6d:d2:28:0d:23:fb:
9d:c9:c4:13:57:a3:8f:55:38:3c:29:71:13:28:25:df:ca:04:
6c:93:0b:3f:93:b6:2e:7a:af:a3:32:0e:f7:a8:11:83:ef:82:
69:01:78:60:41:af:4d:a9:f2:13:a6:c3:1b:f8:dd:28:3e:78:
89:c6:4f:85:a8:35:ed:bd:6e:20:31:46:b8:ba:6e:68:c9:90:
71:fe:90:27:8d:35:57:6f:b3:eb:74:7f:13:96:9e:b4:53:56:
cd:9f:03:de:e5:99:2e:67:87:e8:31:51:df:4b:06:d3:ec:7c:
b8:b9:e7:3b:7f:18:e4:c3:c9:46:bb:31:02:d3:78:34:4d:1c:
82:f9:6e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org