Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/rGsUzdSN6oUceJ_XuE7RjYryK3U.roa
File: rGsUzdSN6oUceJ_XuE7RjYryK3U.roa (raw, json)
Hash identifier: 9l0/4kNBLzdPJ8TuBk+kBWZVggks3EC/4C1eJUicg2g=
Subject key identifier: AC:6B:14:CD:D4:8D:EA:85:1C:78:9F:D7:B8:4E:D1:8D:8A:F2:2B:75
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 018571DE77B3C81D3BE734B90306AEF4B4FB
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/rGsUzdSN6oUceJ_XuE7RjYryK3U.roa
Signing time: Mon 02 Jan 2023 09:44:43 +0000
ROA not before: Mon 02 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51144
IP address blocks: 2a13:1c47:ffe0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:77:b3:c8:1d:3b:e7:34:b9:03:06:ae:f4:b4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Jan 2 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac6b14cdd48dea851c789fd7b84ed18d8af22b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:23:cf:3c:07:46:d9:0a:c6:a9:6f:48:3c:ff:
72:df:55:0a:45:92:dd:b9:f7:e3:c0:ef:51:3b:40:
ab:a5:ba:c9:48:3c:ba:45:73:c4:a4:79:c0:cf:f9:
fe:af:20:88:40:db:10:4e:c1:77:db:81:a9:f1:e5:
30:8d:dc:1f:4a:6c:c7:9c:93:a6:ea:22:b1:24:28:
0a:21:40:77:bc:2f:de:44:70:15:4d:be:81:c5:ca:
49:d4:a0:ac:0d:b6:72:6f:fa:14:89:8d:a0:bf:98:
da:96:49:26:3c:d6:94:15:4f:a0:a2:38:8c:81:78:
3f:9b:28:0d:02:72:de:1e:b9:6f:0d:90:8d:20:b1:
ed:58:f9:c6:b9:8d:a7:bd:d5:f0:41:60:c5:d3:b0:
90:65:85:78:d9:a3:da:cc:05:7f:0c:23:3e:78:c6:
6d:06:5c:72:6c:6c:9e:5a:a3:75:4f:41:f8:e1:04:
7d:b2:7d:06:35:c6:10:af:f5:2d:e8:00:a4:5c:5d:
53:04:df:42:62:2a:34:a7:66:81:8a:00:7c:83:d0:
18:8a:64:f7:a6:57:30:7e:c6:5e:84:ac:67:5d:34:
54:dd:ac:ea:b1:79:e2:46:f6:ec:0a:5b:61:64:82:
0b:76:48:9f:94:cb:6a:0f:b1:76:f9:1d:65:cf:0f:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6B:14:CD:D4:8D:EA:85:1C:78:9F:D7:B8:4E:D1:8D:8A:F2:2B:75
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/rGsUzdSN6oUceJ_XuE7RjYryK3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c47:ffe0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:e4:8e:36:be:d6:db:eb:f8:e0:9c:7c:1d:18:0e:74:1c:ca:
0e:80:b1:b2:4b:cd:c4:9a:bb:52:07:7d:cf:9d:dd:51:c6:d6:
50:c2:17:a7:ab:16:97:0a:6e:18:0f:55:0d:1f:1e:6b:9c:64:
b2:5b:41:e0:89:d9:0e:e4:f6:2f:09:a1:df:05:89:c7:14:45:
12:95:fc:ad:0c:3e:40:95:2c:56:20:5d:ab:de:2a:84:2f:0c:
f2:ab:09:6d:78:76:22:af:25:28:f6:d1:23:9d:23:9c:da:76:
70:0d:69:3f:85:60:e7:66:87:8e:52:c7:1c:f0:f3:22:8d:8c:
c4:48:59:b3:ab:7f:0b:36:59:3f:02:8f:eb:18:77:ac:d0:af:
ec:19:98:3b:48:4b:82:8c:46:b3:dd:ed:ea:b4:82:53:07:9f:
57:42:41:2e:0d:5e:a9:6e:84:b0:6a:2f:5a:a8:80:04:d4:65:
c6:22:7a:78:3f:8f:78:e9:98:4b:19:e9:64:1e:e8:38:6c:34:
8b:f3:1d:37:7e:7b:21:da:b6:65:9c:8a:eb:c2:f2:1c:2e:02:
54:30:33:02:f2:77:f7:b9:a9:2b:fb:ca:95:ce:d7:68:7a:d0:
58:cb:ac:20:8a:c2:df:f9:c6:49:ae:5c:86:69:46:6f:6a:89:
c7:b5:c2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:44 2024 by rpki-client on console-fra.rpki-client.org