Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KtCHMgiT1en4NAeGGOvxGbvcJbc.roa
File: KtCHMgiT1en4NAeGGOvxGbvcJbc.roa (raw, json)
Hash identifier: 39eYTk2iHe6N4IgF7VC04zs/Q9jOyKXhu2z+YW69h7U=
Subject key identifier: 2A:D0:87:32:08:93:D5:E9:F8:34:07:86:18:EB:F1:19:BB:DC:25:B7
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AC2A00F1F6264D306439065D383A4
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KtCHMgiT1en4NAeGGOvxGbvcJbc.roa
Signing time: Tue 24 Jan 2023 16:09:37 +0000
ROA not before: Tue 24 Jan 2023 16:09:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134666
IP address blocks: 2a0e:b107:30f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 Nov 2023 09:21:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:c2:a0:0f:1f:62:64:d3:06:43:90:65:d3:83:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ad087320893d5e9f834078618ebf119bbdc25b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:81:7b:45:65:b2:f1:52:0f:45:ab:cf:54:
7c:df:6f:41:da:cf:da:4e:ef:71:b5:10:82:17:bf:
73:c0:7b:d3:eb:1e:b9:0e:c4:0d:21:87:ca:7d:6a:
2d:d1:4a:ad:4a:5d:79:83:c2:b2:6a:ba:9c:ef:89:
d4:9c:b2:b8:0a:25:61:61:2a:b4:74:1e:50:e5:98:
f3:26:f8:94:1d:f2:83:89:48:6b:60:f2:aa:e7:f7:
3c:54:d3:0a:3d:e4:d6:dd:22:f0:c1:97:73:d1:64:
7b:ae:ab:db:c7:88:54:ac:c1:5e:85:41:18:cb:ce:
b6:82:01:52:9b:16:de:d5:5c:f8:ae:87:88:c1:a1:
42:8f:1a:16:5f:6e:56:f9:9f:2a:b3:ce:48:80:57:
aa:5b:56:56:85:9d:f2:24:75:f0:50:13:7e:99:58:
f8:2f:a2:f5:78:2c:08:1f:41:ab:bd:02:d4:20:c8:
5e:80:f4:01:07:9a:ca:12:b9:ab:e2:ae:34:62:9d:
d7:9a:fa:b4:c9:0d:57:13:7d:b0:da:05:35:a7:2f:
01:53:73:fd:e8:ca:1f:ef:1f:9b:fb:c7:16:6a:2d:
2d:f9:9d:57:ae:6f:57:c7:40:20:1b:41:45:a4:4f:
c5:2a:b2:cb:cd:33:e2:0f:9b:c1:19:3f:2c:bd:89:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:87:32:08:93:D5:E9:F8:34:07:86:18:EB:F1:19:BB:DC:25:B7
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/KtCHMgiT1en4NAeGGOvxGbvcJbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:30f::/48
Signature Algorithm: sha256WithRSAEncryption
0a:77:12:73:a0:a8:0e:c3:d3:b3:63:b5:f5:bc:a4:88:42:ad:
88:b3:09:a1:77:4b:f3:2d:ea:d0:41:8d:3a:9f:94:58:39:02:
e9:65:2e:5a:f9:fd:38:9c:be:eb:e2:77:fb:85:48:76:9e:aa:
0d:4f:92:3d:d9:2f:c4:23:85:72:4e:40:ba:fa:18:78:26:c1:
f2:bb:a0:9c:d0:c1:03:b9:29:b5:b1:12:a6:12:e9:a2:da:f6:
27:86:cc:ac:70:96:82:2d:fd:88:6d:3d:b8:ba:1c:f9:37:46:
f2:2e:eb:2b:e0:97:50:f0:8f:e3:35:91:dc:98:b0:95:7f:0e:
83:01:a2:d3:4b:45:c6:d6:c7:b9:63:5e:10:43:d9:47:bc:0d:
ad:6a:c5:8c:82:ab:ae:9f:3b:58:c5:dd:af:fa:c8:7c:16:47:
ca:33:f4:5c:43:20:f7:93:7b:bf:ea:2c:60:2f:a5:6e:33:e0:
80:d7:0f:d4:29:6a:78:b9:0d:30:f9:be:c6:fc:e3:71:ce:67:
bb:97:59:0d:e1:f7:1b:d1:d9:aa:00:a2:45:33:14:74:bb:ba:
26:a5:6d:12:1a:3a:05:4d:5c:0c:55:d7:7c:5a:5b:bc:82:4f:
04:78:1f:62:2b:29:16:c7:0e:78:77:06:ea:0b:c8:85:3e:fb:
9e:6b:e7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:00 2024 by rpki-client on console-ams.rpki-client.org