Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/kzB0B1LLRn3TVtDjWBp21aJpQAI.roa
File: kzB0B1LLRn3TVtDjWBp21aJpQAI.roa (raw, json)
Hash identifier: BqocFLbqkIf7PB6IoYaqPpKdHwC7IdLKBSxV+p0JtoA=
Subject key identifier: 93:30:74:07:52:CB:46:7D:D3:56:D0:E3:58:1A:76:D5:A2:69:40:02
Certificate issuer: /CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Certificate serial: 018572A7E6531DFFE5903DA3E12989D447B9
Authority key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/kzB0B1LLRn3TVtDjWBp21aJpQAI.roa
Signing time: Mon 02 Jan 2023 13:24:44 +0000
ROA not before: Mon 02 Jan 2023 13:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8758
IP address blocks: 212.6.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:e6:53:1d:ff:e5:90:3d:a3:e1:29:89:d4:47:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Validity
Not Before: Jan 2 13:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9330740752cb467dd356d0e3581a76d5a2694002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:a6:9d:77:7a:ec:d3:0b:97:14:6c:9f:0a:
db:71:5e:99:e7:6d:a2:de:52:bf:8f:75:4b:ff:a3:
d4:7d:c3:33:e5:6a:9c:9b:d8:76:1e:d8:05:75:dd:
c6:1a:28:57:87:59:20:6e:88:b7:4e:1b:81:40:dc:
94:d1:86:97:c7:05:5d:91:bb:f1:c4:71:2b:ac:bc:
51:65:7b:fc:9a:b1:85:78:f4:3b:59:b5:89:89:7e:
aa:88:49:2a:47:16:17:c1:15:05:f0:04:53:87:75:
31:d2:cb:49:5e:1e:1c:e7:2a:a3:e8:bc:51:4f:cf:
8b:73:71:19:27:32:74:81:f3:5a:8e:e9:e8:1d:69:
60:cd:7d:f8:6c:63:2d:49:00:ec:55:04:4f:eb:ec:
f7:15:a1:d2:2f:af:2a:1a:48:e2:8e:83:a8:cc:2b:
a1:5f:5b:3d:7a:71:e5:97:5e:5f:a5:68:d5:4d:66:
f5:c7:82:7f:aa:a3:68:1b:a5:16:08:48:5a:d5:b9:
bb:46:f5:c7:52:49:fc:65:47:1f:6c:97:e9:50:d7:
ca:3f:61:c5:ae:22:9b:b1:ed:67:4a:37:22:62:f6:
af:cc:c9:ad:11:95:77:09:79:d8:fd:ab:6e:0d:ed:
7f:84:7d:ea:d2:b4:52:a8:29:5c:4f:4d:7e:ee:be:
6b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:30:74:07:52:CB:46:7D:D3:56:D0:E3:58:1A:76:D5:A2:69:40:02
X509v3 Authority Key Identifier:
keyid:AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/kzB0B1LLRn3TVtDjWBp21aJpQAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
23:95:df:e2:be:8c:10:4a:1b:d4:9e:c9:b6:c1:73:71:90:02:
de:62:d0:be:17:fc:99:05:aa:77:9d:a6:be:6c:d3:aa:81:78:
2d:c8:4f:e5:b9:da:1e:4b:11:ee:92:a8:79:ec:8a:be:3e:97:
66:07:da:ff:88:4a:0a:73:ee:2e:53:2e:10:c2:31:15:7b:3b:
77:72:cd:d3:f4:79:52:9b:df:cb:75:67:53:dc:df:0a:5f:62:
92:6a:74:ef:51:c7:59:00:21:9b:06:45:bd:84:6d:bc:47:18:
ab:08:f4:39:ad:03:87:ac:2d:bc:6a:ef:6f:0a:dc:51:ec:ab:
d6:e8:e2:62:18:48:91:5e:79:fb:35:9f:d5:7a:64:1b:56:6e:
09:47:9a:5f:36:ee:e6:3f:76:dd:22:c7:03:a5:b7:6a:32:b5:
26:40:00:57:b3:ef:1d:75:1e:9b:9d:3d:8a:fe:d1:ed:19:cc:
d7:37:29:84:01:00:d3:84:e1:33:e2:08:8d:7a:0c:66:f6:9a:
76:28:27:22:50:36:21:ef:f3:e2:49:d1:66:89:2b:10:e0:50:
b7:47:90:6b:e2:84:3b:96:11:31:05:bf:2e:1b:a8:81:d5:a8:
f8:40:7e:fd:4e:1f:6c:b6:5b:de:5e:a6:f4:ce:62:88:23:1b:
99:f9:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:13 2024 by rpki-client on console-fra.rpki-client.org