Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KygZhserLGMYcdxGWMahj2Rqurw.roa
File: KygZhserLGMYcdxGWMahj2Rqurw.roa (raw, json)
Hash identifier: 5w/6ibt67Lymyvd36nmAfE0hTvw/Tk/9zErFEYQnHqg=
Subject key identifier: 2B:28:19:86:C7:AB:2C:63:18:71:DC:46:58:C6:A1:8F:64:6A:BA:BC
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0189D09739E0A0BE1D3A8ACC5EF2AF2A7E09
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KygZhserLGMYcdxGWMahj2Rqurw.roa
Signing time: Mon 07 Aug 2023 15:21:58 +0000
ROA not before: Mon 07 Aug 2023 15:21:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150173
IP address blocks: 2a13:b487:5000::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d0:97:39:e0:a0:be:1d:3a:8a:cc:5e:f2:af:2a:7e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Aug 7 15:21:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b281986c7ab2c631871dc4658c6a18f646ababc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5e:ac:75:a1:d3:63:9e:75:9b:88:4c:5e:dc:
6f:b4:9c:fb:66:22:6d:24:71:6c:fc:ae:1f:bd:2f:
af:8f:3b:b4:b3:19:58:45:1e:eb:09:c8:83:fe:cc:
e7:ca:c6:90:81:7d:f3:d5:84:3d:e5:c6:4f:a7:52:
9c:c1:fb:b9:4f:19:be:61:2e:5b:88:bd:da:f8:1d:
13:11:38:db:39:97:7f:c5:2a:ed:7b:a1:d3:f5:a4:
8e:1f:b5:10:4f:04:14:cd:49:77:17:03:fd:42:ee:
be:0f:0d:43:1d:8b:33:97:95:5d:b3:d1:d0:bc:11:
b3:aa:f5:69:de:8c:6e:71:5f:b5:ca:b4:de:2d:95:
00:7d:93:08:db:b0:2a:87:b5:a2:f8:0b:34:1d:3b:
7f:3d:d7:e1:0b:4c:b8:d8:65:5f:86:a1:db:d7:30:
d2:56:6d:4e:57:8c:e1:5a:04:95:dd:a5:d0:9d:77:
91:29:cb:b3:64:6f:24:54:00:d6:55:84:58:b3:5d:
b3:f2:1a:85:13:98:9f:f8:75:00:fa:c5:4f:61:5f:
4a:5a:17:21:e7:fa:cf:d8:b8:37:ad:44:ea:fe:cd:
c6:52:57:e6:3f:70:b4:7e:25:72:d4:4c:a8:4f:76:
0a:be:33:09:64:cb:bf:de:5c:de:ea:63:96:c7:50:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:28:19:86:C7:AB:2C:63:18:71:DC:46:58:C6:A1:8F:64:6A:BA:BC
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/KygZhserLGMYcdxGWMahj2Rqurw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487:5000::/40
Signature Algorithm: sha256WithRSAEncryption
47:db:0f:7f:04:8e:57:83:23:e8:27:e7:64:c4:2a:d4:dd:22:
66:cb:85:9a:4d:f0:c5:48:3e:c0:99:89:51:c2:b9:ad:04:ba:
76:2d:82:45:d5:f4:78:86:8d:06:4c:68:d3:61:cd:50:fd:b4:
0d:b8:e9:3d:94:fd:35:15:67:c2:e4:7b:e3:d7:87:89:53:63:
a8:5a:55:04:0c:9b:6f:c1:bb:0c:fc:ad:e6:7c:35:b2:13:25:
4d:1c:a9:7d:71:16:a8:cb:06:5a:9c:84:ab:f0:70:81:7c:e1:
5f:3d:3b:42:92:dd:3f:e2:60:46:1b:ca:7d:72:aa:9a:2f:94:
c8:f8:9f:72:a9:84:ae:43:a0:70:bf:91:2e:e9:d5:ae:df:14:
d6:4c:28:61:f1:f5:63:53:81:ec:b4:d9:26:4e:d8:6e:23:f2:
69:c8:5c:78:2a:bd:a8:f1:3b:59:d6:06:f0:7b:0b:72:c1:82:
7e:94:38:c3:e7:e0:0f:eb:7d:db:1f:e7:e7:f6:f9:62:0e:97:
fa:9b:8f:31:8c:fb:81:83:8d:fb:81:05:10:24:0c:07:e4:b4:
6e:67:af:93:03:e6:7c:3b:fd:77:8d:4b:c9:c9:06:f5:1a:f9:
61:b5:ad:18:c9:dc:ea:bc:68:02:70:40:85:b6:d0:ef:0a:58:
a9:21:c6:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:58 2024 by rpki-client on console-fra.rpki-client.org