Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/KTYws6xH63bOaAbYud5wIyfbj_4.roa
File: KTYws6xH63bOaAbYud5wIyfbj_4.roa (raw, json)
Hash identifier: 5VFrr9YkoxkP6+40XHKGl3KqKSv4QOd7qjuYvZlL4eg=
Subject key identifier: 29:36:30:B3:AC:47:EB:76:CE:68:06:D8:B9:DE:70:23:27:DB:8F:FE
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018CC94DCD55FC26F0C4F32C05A1FFEAC6D1
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/KTYws6xH63bOaAbYud5wIyfbj_4.roa
Signing time: Tue 02 Jan 2024 08:32:48 +0000
ROA not before: Tue 02 Jan 2024 08:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198304
IP address blocks: 2a13:a5c5:f000::/40 maxlen: 48
2a13:a5c3::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Jan 2024 09:04:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:cd:55:fc:26:f0:c4:f3:2c:05:a1:ff:ea:c6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Jan 2 08:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=293630b3ac47eb76ce6806d8b9de702327db8ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:41:5f:fb:ea:e9:8f:bc:81:4e:d6:92:5c:ab:
68:c2:9c:b2:0c:3c:44:48:21:e6:a8:dd:b6:98:6c:
dc:fb:80:71:bf:9d:ce:af:83:21:5e:f5:48:09:fe:
88:c3:cd:9e:7a:5d:45:6e:ac:60:22:e7:5d:69:52:
ef:af:84:d7:12:56:c9:91:09:ef:20:38:15:23:db:
d8:ed:ca:88:3f:d2:96:f5:4d:e4:8f:29:a5:1d:52:
01:a5:d9:f5:3f:3b:df:f2:d7:4f:81:7b:a2:23:01:
a8:e0:4c:70:56:02:2b:84:80:7f:6d:21:7e:e7:44:
af:d8:9f:12:c8:c3:52:d1:c4:e9:03:3a:c2:94:94:
7a:a5:d4:6b:51:b0:2d:19:b2:4d:d1:d6:ad:17:12:
55:e1:49:a4:88:dd:8b:a6:29:c2:dd:30:0d:79:9b:
a5:53:0f:51:17:f5:bc:b9:b8:9c:11:60:64:e4:70:
f9:4c:12:9e:1b:fb:e2:2f:47:4e:c6:83:84:e2:c6:
b5:bf:a9:0a:8c:19:bb:b6:a4:b3:23:02:bc:18:cb:
96:e2:5a:46:1e:56:5d:de:ff:6d:95:3b:0e:27:2d:
fe:97:4f:3b:e7:af:11:06:3f:5f:f6:07:a1:33:b0:
1b:d8:0d:1f:33:38:fc:c7:1b:de:42:b1:b1:b0:9c:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:36:30:B3:AC:47:EB:76:CE:68:06:D8:B9:DE:70:23:27:DB:8F:FE
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/KTYws6xH63bOaAbYud5wIyfbj_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3::/32
2a13:a5c5:f000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:c7:00:f4:8d:91:66:e9:09:f2:72:4b:d0:73:aa:61:82:a0:
c0:4a:87:d0:cc:28:80:a8:22:fd:8e:cf:01:76:95:37:26:40:
d9:74:25:ea:fc:26:23:ce:b9:78:84:87:2e:1f:02:54:ed:a3:
e5:1a:24:23:95:df:28:c1:46:48:92:c4:43:77:66:f9:85:56:
f3:d3:41:a3:98:4a:9b:88:31:cb:8b:5a:46:26:c8:3c:a9:f4:
85:c5:35:96:7e:1d:a0:22:9b:bc:72:dc:53:54:12:77:c5:1d:
55:5d:c4:5a:a7:b1:3a:e5:38:7c:7f:27:4c:fc:22:29:d5:cb:
18:cc:bd:0f:17:3c:22:52:00:11:31:bb:90:21:fb:bb:d9:0b:
42:81:d1:58:7a:aa:f7:89:3e:4e:c4:c8:28:e0:64:4a:2f:ae:
dd:c8:56:f3:a1:9e:ba:2d:18:08:5a:37:c1:76:75:31:76:4e:
1b:a6:fc:75:e9:c7:23:ba:ec:63:83:be:20:78:45:83:43:ac:
ff:7b:c5:8b:78:44:a2:dc:6d:29:29:37:83:ac:e6:3b:dc:f9:
50:77:36:57:18:a0:b5:05:bb:b9:0e:dd:47:06:52:21:7e:c9:
4b:d9:94:c5:b8:04:ef:78:0e:d5:b0:d9:96:94:21:70:79:c1:
bf:dc:7a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org