Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K_0U_RFrTCxzTvbwovESO_3VjXs.roa
File: K_0U_RFrTCxzTvbwovESO_3VjXs.roa (raw, json)
Hash identifier: avtCadjvKBzNC9eq1HSlpNMYAWvaRfL2KiGvdJJvH74=
Subject key identifier: 2B:FD:14:FD:11:6B:4C:2C:73:4E:F6:F0:A2:F1:12:3B:FD:D5:8D:7B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0190D1B9970BDB7BF3F3406C1A71EAD308B6
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K_0U_RFrTCxzTvbwovESO_3VjXs.roa
Signing time: Sat 20 Jul 2024 19:58:39 +0000
ROA not before: Sat 20 Jul 2024 19:58:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a0e:b107:27c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Aug 2024 19:58:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d1:b9:97:0b:db:7b:f3:f3:40:6c:1a:71:ea:d3:08:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jul 20 19:58:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bfd14fd116b4c2c734ef6f0a2f1123bfdd58d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:4c:92:f9:8d:12:c5:41:93:89:8e:75:28:
38:9b:4f:68:43:87:de:51:f0:36:12:65:3f:4e:63:
6e:1a:43:32:8a:e5:4d:b7:ca:33:b5:59:f7:45:e1:
e3:90:23:e1:2e:3b:49:db:52:5d:22:33:16:ad:bd:
66:44:3d:ed:0b:83:bd:d9:5f:d9:08:90:a5:f9:11:
54:92:c2:2a:7c:86:fe:6f:b1:80:32:1b:75:a1:0a:
18:26:63:b8:96:08:8a:43:a2:0a:db:85:07:35:87:
f8:5c:97:3e:df:d6:9c:47:34:8b:ee:cb:ec:96:1d:
72:b7:22:ce:5d:19:23:83:4b:a5:95:6d:d8:06:8d:
2d:bc:fe:49:aa:c2:a8:5e:f4:ed:52:20:af:a1:e6:
c4:f7:8a:be:a0:4d:6c:26:e9:9f:19:f6:57:1e:4f:
ac:9f:6b:75:e6:88:36:0c:a6:81:e6:e7:32:58:f2:
1b:b4:00:0e:f7:5b:74:37:22:5c:7e:05:b4:88:b0:
36:ee:8a:ec:af:10:04:17:35:43:a4:3d:7f:f6:7d:
f7:b9:ba:1a:e0:e3:87:03:26:c9:05:de:0d:82:6f:
19:a9:0a:39:5d:19:8a:be:9f:41:c9:98:55:cc:af:
d0:39:e4:14:b5:d9:f7:63:8b:50:f7:72:9b:51:7c:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:14:FD:11:6B:4C:2C:73:4E:F6:F0:A2:F1:12:3B:FD:D5:8D:7B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/K_0U_RFrTCxzTvbwovESO_3VjXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27c7::/48
Signature Algorithm: sha256WithRSAEncryption
5d:fa:f6:fc:dc:bf:64:69:49:f2:ec:9f:52:a2:a0:9c:20:91:
7e:fd:e7:b3:77:cf:75:9c:3a:fa:59:58:22:43:98:a5:f1:6a:
a1:5a:96:29:2a:7b:42:92:c9:96:b1:41:4d:fc:c2:57:f2:1d:
b2:d9:09:19:10:44:19:30:13:b7:f7:20:1b:a0:f3:77:68:33:
85:d7:35:3a:8c:9a:f2:70:93:56:01:18:20:0c:e1:15:d6:e6:
ff:45:df:ca:f4:77:8a:3c:60:91:7a:2c:aa:09:ad:13:de:34:
4b:c1:74:55:fc:06:b3:f5:c4:98:a3:da:51:48:2b:6b:76:82:
d0:37:e5:d2:ad:19:1b:65:b6:a2:bd:0b:8d:32:bf:e8:64:b4:
dd:fb:dc:3a:d9:20:c8:32:90:2a:98:5a:24:2b:d7:ba:7f:be:
9b:7e:0b:11:84:e3:0c:34:3e:07:3b:e9:5a:72:ae:4e:fe:5b:
eb:35:1a:31:f6:a2:f9:9a:94:59:6f:a5:31:2e:10:cd:c0:17:
1c:0b:16:5a:7b:9e:ed:41:af:c3:c9:c6:ec:d0:e1:fe:b1:66:
d0:65:38:71:60:9e:b2:e7:0f:26:07:58:ef:51:c0:a2:4f:82:
3f:5c:18:4f:b1:b1:04:1c:fe:fc:3d:88:5a:97:b0:f5:9a:28:
62:0a:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 00:08:27 2024 by rpki-client on console-fra.rpki-client.org