Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kbB6lHhrDRQWRIABG65kFhQd8b4.roa
File: kbB6lHhrDRQWRIABG65kFhQd8b4.roa (raw, json)
Hash identifier: PLGcTi2sVkORtapxRCnTUxOLZj0ujluK2XE5hQFKdMY=
Subject key identifier: 91:B0:7A:94:78:6B:0D:14:16:44:80:01:1B:AE:64:16:14:1D:F1:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01857D99633A292CA6B1180BABE0F8BAAD0D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kbB6lHhrDRQWRIABG65kFhQd8b4.roa
Signing time: Wed 04 Jan 2023 16:24:42 +0000
ROA not before: Wed 04 Jan 2023 16:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200455
IP address blocks: 2a0e:b107:800::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Jan 2023 17:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7d:99:63:3a:29:2c:a6:b1:18:0b:ab:e0:f8:ba:ad:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 4 16:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91b07a94786b0d14164480011bae6416141df1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:c9:c5:fa:a9:b0:e8:83:26:1d:3a:59:4f:
12:28:52:0b:10:c7:d3:5b:b8:2c:d4:0b:f6:02:fb:
09:f2:3f:0f:7c:c8:80:08:74:bf:e5:6f:b1:97:af:
67:d0:98:55:14:06:d5:9e:07:4a:38:fa:9f:c2:66:
66:fc:7b:4a:d0:c7:07:76:52:c1:b7:f8:58:d7:d2:
4a:aa:fa:92:56:e8:cd:df:22:48:f4:b2:0d:27:79:
ec:c6:15:7a:28:5c:d7:e8:bf:67:fd:f9:9a:a6:20:
aa:eb:5a:33:65:2b:36:6a:34:60:a3:ac:71:39:f0:
18:b8:e7:a6:7c:30:b6:9e:50:5a:f0:13:92:e2:eb:
62:c6:d9:76:5e:5a:7b:17:dd:d9:a9:b4:17:43:21:
51:e2:ce:b7:a7:9c:50:8c:3a:12:aa:e5:99:a3:2e:
a6:14:6e:7e:05:c5:d4:4e:bf:31:86:98:b0:02:97:
63:7b:3a:a1:c2:4b:9c:05:c4:d3:83:c8:e2:60:78:
3e:4a:ce:4a:53:c6:65:46:f0:01:2f:34:94:c2:02:
51:a0:8c:dc:88:f8:25:8d:fd:1f:d1:05:14:22:2a:
9d:92:8f:af:e5:bb:f1:5f:22:4d:04:0e:91:39:33:
c7:2f:68:79:27:53:7f:01:08:0e:2e:04:03:03:6d:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B0:7A:94:78:6B:0D:14:16:44:80:01:1B:AE:64:16:14:1D:F1:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/kbB6lHhrDRQWRIABG65kFhQd8b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:800::/44
Signature Algorithm: sha256WithRSAEncryption
34:d5:5c:05:05:a0:f0:cb:ea:e5:0e:c4:1d:65:f3:97:d9:6d:
65:30:a5:ed:b1:e1:68:c6:33:ab:be:8d:37:f1:d5:d6:15:ef:
e9:91:cf:bd:3b:ac:df:4b:da:8f:88:d8:17:c3:10:16:82:27:
e5:b0:11:a7:19:f5:60:10:d0:af:f0:58:ab:aa:d6:d5:dd:05:
7e:3b:32:fd:e6:b5:c1:74:5c:61:55:7a:e1:68:62:58:d3:d5:
87:be:33:6b:54:17:86:db:34:59:6c:74:0e:61:f6:56:b0:15:
f8:73:6b:9a:21:fc:1b:07:9d:f5:8b:8b:0a:a9:67:68:2e:44:
b8:35:d8:ff:cc:8e:f6:79:89:12:b9:84:2a:0b:ff:cc:39:08:
b3:a6:00:b6:99:ed:86:98:3f:d7:53:10:af:6d:2b:91:7f:ff:
be:fa:eb:d4:03:09:ac:1b:9b:05:93:2e:14:89:0c:45:10:ae:
7c:89:c0:5e:76:32:17:59:05:83:70:bf:da:d9:14:7e:ca:95:
2e:48:37:a5:3e:2a:48:9a:bf:85:66:30:36:b2:87:cb:53:b7:
54:44:a9:47:34:8c:0d:68:e3:f1:8f:c7:aa:52:06:54:e7:23:
00:5e:d2:a4:ad:f7:28:a0:f6:fc:d2:1c:47:45:83:65:0f:ba:
b3:81:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org