Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KFFHvkB-RGHsFAbD3TnW_LDberw.roa
File: KFFHvkB-RGHsFAbD3TnW_LDberw.roa (raw, json)
Hash identifier: EtLrfBfmoCWm/q3YGORdsrQaPnLCzezfyjD4L+v7UTU=
Subject key identifier: 28:51:47:BE:40:7E:44:61:EC:14:06:C3:DD:39:D6:FC:B0:DB:7A:BC
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0186BFBBC9F4DA9880125761534AD098C2C9
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KFFHvkB-RGHsFAbD3TnW_LDberw.roa
Signing time: Wed 08 Mar 2023 05:40:00 +0000
ROA not before: Wed 08 Mar 2023 05:40:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7721
IP address blocks: 2a13:b487:1200::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bf:bb:c9:f4:da:98:80:12:57:61:53:4a:d0:98:c2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Mar 8 05:40:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=285147be407e4461ec1406c3dd39d6fcb0db7abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d1:7e:1d:59:5b:f2:f5:a8:b3:96:8e:94:8f:
1a:45:f9:e8:bd:1b:fe:46:63:80:56:cb:b0:46:28:
2d:01:a4:8a:14:bf:b4:c4:11:93:b4:8a:5f:57:76:
4a:e1:bc:4f:55:46:66:b1:45:3f:73:a0:df:fc:6a:
82:55:d9:ab:93:3c:76:6d:15:de:de:34:ca:d7:84:
f6:d2:d8:99:2b:cb:7b:f4:74:27:54:7d:52:80:1c:
92:0d:af:09:12:ba:5d:9b:52:17:ae:ae:72:e9:b6:
77:1a:15:26:33:21:05:7a:18:0e:92:54:4e:6f:94:
ff:78:d9:14:2a:97:9e:57:f2:4e:a3:bf:d5:0e:2b:
69:37:40:f8:51:01:82:22:ef:e6:d2:d2:ec:a8:fb:
f7:b6:9d:d3:67:ed:14:90:21:2e:b0:14:38:22:a3:
28:99:69:07:4b:1a:b7:08:f2:6a:45:cd:8b:ed:19:
3e:70:96:ce:94:69:06:2d:26:6b:ff:08:71:26:27:
dd:ce:96:81:76:d7:6c:a3:b2:b4:fb:75:ac:3a:ab:
9f:95:6a:73:ce:4c:85:eb:53:6b:0b:73:82:6d:fe:
47:ed:f7:a3:6b:d6:44:52:9f:93:b6:19:ba:d4:a7:
b4:e9:33:3f:f8:18:5e:c1:8b:6d:3b:ab:f7:43:26:
40:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:47:BE:40:7E:44:61:EC:14:06:C3:DD:39:D6:FC:B0:DB:7A:BC
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KFFHvkB-RGHsFAbD3TnW_LDberw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:1200::/40
Signature Algorithm: sha256WithRSAEncryption
2a:c1:5a:89:40:93:4a:ec:7f:e2:41:f4:7d:b9:be:9b:97:ea:
b0:35:06:a8:04:45:cb:86:dd:d1:72:ca:b7:6e:a9:f2:af:0e:
aa:00:49:22:59:db:33:60:90:f2:68:d3:57:7c:ff:65:37:a2:
0e:51:4d:93:66:6f:c2:74:60:a0:70:93:cd:a3:30:0c:f7:4f:
28:36:af:54:c3:40:ca:59:bb:05:50:ff:71:34:ca:01:d4:df:
c2:da:13:a4:d2:8f:7a:8f:24:bd:4d:9d:b7:80:ef:9a:6b:5e:
e0:bf:79:ea:3a:64:8c:f1:7e:c0:a5:c6:c4:c0:2c:44:6e:ac:
6d:c6:b0:4f:8e:2d:b4:86:53:99:4e:f4:1f:2c:25:19:2f:9b:
1c:09:de:87:d1:cd:ab:2a:89:b8:9e:36:88:00:04:5b:ce:38:
04:a0:55:e8:23:ba:22:cd:3c:f1:19:f7:65:5b:7a:27:c0:24:
3f:b9:6e:10:31:bb:ef:a1:c7:79:91:e2:13:a4:d3:da:dd:f6:
1b:6d:44:5e:88:52:b2:50:66:86:c9:c9:72:73:2e:2d:38:27:
e2:fb:1d:b4:bc:c4:af:70:9e:ac:39:9f:d9:ab:9e:d9:26:16:
ba:00:a2:8a:5c:b6:9e:11:3f:ad:b2:a1:0a:1e:ad:b3:de:50:
a3:a1:18:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:54 2024 by rpki-client on console-ams.rpki-client.org