Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/k8tbrWwFDP6r4FtqdZniGnALjqs.roa
File: k8tbrWwFDP6r4FtqdZniGnALjqs.roa (raw, json)
Hash identifier: k2IlgGf/0ioLa0CKaUrQvNcOrN7mVcBKOA6CyshTbrg=
Subject key identifier: 93:CB:5B:AD:6C:05:0C:FE:AB:E0:5B:6A:75:99:E2:1A:70:0B:8E:AB
Certificate issuer: /CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Certificate serial: 0185701EE0BECD942CAA510257BF8A6274D2
Authority key identifier: 5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/k8tbrWwFDP6r4FtqdZniGnALjqs.roa
Signing time: Mon 02 Jan 2023 01:35:49 +0000
ROA not before: Mon 02 Jan 2023 01:35:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 2a05:bec0:40::/48 maxlen: 128
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e0:be:cd:94:2c:aa:51:02:57:bf:8a:62:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a376c8008d6abd962341563dd2a4dccaf153cba
Validity
Not Before: Jan 2 01:35:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93cb5bad6c050cfeabe05b6a7599e21a700b8eab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:82:3c:81:93:80:de:6d:75:96:ff:7b:58:29:
b0:d8:2a:4d:c6:f6:f6:71:da:f1:fa:ba:ee:82:ce:
b9:2f:61:ae:bd:94:74:0d:1c:de:c6:e0:fe:c5:64:
d0:bd:72:e3:05:e2:d8:ee:a3:43:62:f5:4a:36:6f:
2e:7e:3f:3d:b2:97:20:9a:79:17:f9:cd:3e:44:b1:
73:0d:d4:5e:9d:5f:f3:0f:4e:db:c8:75:49:6e:0e:
8c:00:dd:9e:50:95:b9:e6:0b:6a:fa:26:74:57:fd:
04:cd:aa:71:eb:27:d7:31:9a:9f:f9:21:51:61:c9:
71:9a:47:78:e0:29:a1:47:7a:24:7a:bb:4c:fd:6d:
22:5d:bc:94:82:ca:f6:01:8c:41:f9:99:96:73:87:
e1:f4:60:fa:90:11:57:ef:7f:94:6d:68:47:c5:9d:
55:2c:d8:96:dc:d7:05:7f:b8:0e:f2:39:37:0e:e7:
74:a6:ec:d1:73:18:b7:79:5f:50:00:f8:65:38:48:
04:9a:3c:80:6b:61:e8:0f:e3:41:ad:d9:02:3d:22:
7d:e4:99:9a:ab:5f:13:8f:27:31:5a:0c:d0:9b:0d:
bb:c8:a3:a9:4c:18:b8:29:6f:38:b9:e9:a0:3a:70:
39:5a:8c:bc:de:45:4c:c4:38:99:5b:07:eb:19:0b:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CB:5B:AD:6C:05:0C:FE:AB:E0:5B:6A:75:99:E2:1A:70:0B:8E:AB
X509v3 Authority Key Identifier:
keyid:5A:37:6C:80:08:D6:AB:D9:62:34:15:63:DD:2A:4D:CC:AF:15:3C:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WjdsgAjWq9liNBVj3SpNzK8VPLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/k8tbrWwFDP6r4FtqdZniGnALjqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/caa743-1c13-4a25-9f6a-65be5503165d/1/WjdsgAjWq9liNBVj3SpNzK8VPLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bec0:40::/48
Signature Algorithm: sha256WithRSAEncryption
9c:8b:77:07:eb:9a:95:ab:63:6f:af:35:0e:e1:c8:85:94:5a:
3a:1b:b5:04:a3:51:c1:d7:93:6b:46:70:73:f0:0f:6f:f8:7e:
a6:cd:af:3a:f7:f0:8f:fd:8b:ed:cd:01:e9:f2:f3:ac:fe:dc:
b5:49:00:9a:66:e2:80:68:e5:cd:cf:d3:5d:ae:73:4f:32:0d:
38:24:22:04:38:f6:b7:2c:f3:40:18:c6:f6:6d:99:6e:af:8d:
34:09:62:62:5d:90:fe:f1:0b:e5:c6:f8:3e:68:0c:c1:33:e4:
6a:b2:38:76:36:14:80:30:cc:2d:a5:40:af:58:c2:04:68:01:
5e:1d:d1:9f:56:67:ec:e2:3c:67:8b:ad:6d:57:38:76:3d:26:
2d:ea:e5:73:a1:b7:bd:68:bf:ab:98:77:53:6c:5c:d2:14:0a:
30:7a:f1:43:dc:94:5e:13:39:d2:ce:da:55:32:82:e6:fb:e4:
0d:fd:50:0f:ec:22:7d:3b:c8:f0:f5:f6:a1:1c:56:99:b4:7c:
33:b2:00:df:fe:a1:d4:ad:89:af:19:4c:5b:c8:1b:65:36:5f:
b9:c7:3e:90:71:35:a1:ee:5d:9b:b5:4c:42:46:8d:88:bc:36:
66:64:8c:1b:20:d0:9e:4a:9d:b0:20:b5:f2:db:0b:c3:0c:cb:
c5:35:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:28 2024 by rpki-client on console-ams.rpki-client.org