Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/zL9V9wLgsOzym5OtRSBBAAeE3ig.roa
File: zL9V9wLgsOzym5OtRSBBAAeE3ig.roa (raw, json)
Hash identifier: JbxiYPkJ+/cfAg007+uNUz6xClqRElgOdtROwX88+Bo=
Subject key identifier: CC:BF:55:F7:02:E0:B0:EC:F2:9B:93:AD:45:20:41:00:07:84:DE:28
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0187479B53CAC7B452C399E1BBCAE14EDE02
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/zL9V9wLgsOzym5OtRSBBAAeE3ig.roa
Signing time: Mon 03 Apr 2023 14:52:54 +0000
ROA not before: Mon 03 Apr 2023 14:52:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198998
IP address blocks: 2a13:b487::/36 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:47:9b:53:ca:c7:b4:52:c3:99:e1:bb:ca:e1:4e:de:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Apr 3 14:52:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ccbf55f702e0b0ecf29b93ad452041000784de28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a6:93:56:85:74:37:77:0c:6d:04:28:d9:2f:
c1:f6:a9:dc:69:8f:05:5a:6e:6e:03:75:90:53:2f:
84:0b:e9:44:17:38:78:9a:b4:31:2b:e1:2b:c2:2b:
46:00:3d:ed:15:49:3d:2c:54:fe:06:26:ad:7c:d4:
d1:7c:3c:1c:cd:a9:e2:64:a3:20:0a:d4:1b:5f:0b:
31:5a:aa:d6:cf:73:a3:43:60:16:07:06:f5:10:e1:
eb:25:9c:3b:c1:73:8d:be:8f:74:98:9b:85:0e:a0:
62:60:6a:fa:1c:cf:50:17:9c:92:be:06:fc:56:0a:
fa:31:a8:e4:2b:49:03:c2:c6:94:dd:c6:93:e2:f4:
d5:9b:21:ff:b2:82:fb:2e:cb:28:a9:8b:93:a1:f4:
84:6a:8c:e2:17:49:53:40:83:79:14:22:44:21:b2:
7a:09:46:df:2f:37:45:52:13:61:47:e6:0b:30:75:
af:50:12:02:bb:7c:56:b2:d0:3c:60:6b:99:3e:bc:
1a:fc:65:9d:4e:c7:38:e8:95:43:6c:68:ff:1c:90:
e9:ca:b6:f4:83:d8:93:6f:7d:ef:99:a3:73:09:86:
83:6a:17:64:7a:f8:50:89:11:f1:4e:ed:8b:7b:32:
32:b2:17:3b:e3:d9:86:49:a1:10:9f:a5:5c:fd:c9:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:BF:55:F7:02:E0:B0:EC:F2:9B:93:AD:45:20:41:00:07:84:DE:28
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/zL9V9wLgsOzym5OtRSBBAAeE3ig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487::/36
Signature Algorithm: sha256WithRSAEncryption
8c:97:39:9b:87:f5:f1:46:db:c6:1d:f6:78:bc:c2:be:18:be:
be:35:66:81:31:ba:e6:7b:73:fa:ac:df:c0:96:38:d2:d4:8f:
0a:17:59:07:5e:72:fc:10:cd:56:00:70:f5:16:97:f5:dc:90:
2b:62:dc:4c:f6:65:95:db:0b:22:e3:f1:58:19:72:dd:f8:60:
cc:fe:99:98:0a:cf:ac:76:30:bf:0a:21:73:06:ef:b5:5e:2f:
81:81:c0:51:c3:45:89:a9:b2:ac:20:a4:8e:99:2e:9d:66:db:
dc:ec:b6:33:64:5e:7e:30:68:6c:67:a5:c8:23:a3:ed:54:7b:
c0:13:42:40:44:ff:9f:a0:e1:08:6d:13:02:c7:98:6d:8c:9e:
b2:f2:f6:a2:96:53:bc:54:7d:f0:0d:70:eb:19:21:d1:4a:fc:
8d:1f:4d:67:cd:09:25:62:44:1c:c0:2b:b3:18:fb:3d:56:2f:
64:c8:ed:eb:37:8b:92:42:4d:61:1e:27:f0:79:7f:8f:54:ac:
37:b0:f4:12:e4:40:19:0b:00:c9:9f:1b:b1:44:ca:41:25:90:
1f:de:4e:0d:f3:31:a9:fc:95:39:73:c2:67:00:1b:af:07:24:
d1:6c:e7:35:45:25:cc:a8:42:66:b2:57:36:b9:92:e8:11:ad:
ce:fa:f3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:54 2024 by rpki-client on console-ams.rpki-client.org