Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KsllS1QecZ4bd9zxv_hXh6K7hng.roa
File: KsllS1QecZ4bd9zxv_hXh6K7hng.roa (raw, json)
Hash identifier: 1QR3qD8EIbaTlWjdWzqSV7wFZ0RgbuA0mWokoJ80dwQ=
Subject key identifier: 2A:C9:65:4B:54:1E:71:9E:1B:77:DC:F1:BF:F8:57:87:A2:BB:86:78
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956586C23CAAE256CDE51F2E660070
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KsllS1QecZ4bd9zxv_hXh6K7hng.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3333
IP address blocks: 2001:610:240::/42 maxlen: 42
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:65:86:c2:3c:aa:e2:56:cd:e5:1f:2e:66:00:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ac9654b541e719e1b77dcf1bff85787a2bb8678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:ff:f6:ac:5b:89:a8:20:7d:9d:83:1b:01:
6b:b6:12:b2:2a:8b:e9:1a:a2:00:a8:39:ec:57:90:
a0:c2:27:ec:55:f8:7c:15:6b:87:1c:a6:6b:f5:10:
e3:f5:6a:55:7f:0a:52:4b:98:b5:51:ba:bb:44:60:
56:85:4b:45:32:ea:97:92:3b:9a:f0:13:97:52:2d:
bd:71:ba:22:88:c6:61:b1:fe:d1:64:ec:ac:14:d1:
47:ec:99:9f:11:4d:72:ca:55:3f:d8:3d:c7:0f:65:
9f:29:95:30:0a:7b:21:42:1a:38:d6:a7:2d:59:fe:
17:07:d0:fd:b0:07:bc:a3:d7:aa:02:0b:21:75:1e:
7e:46:bf:38:9a:4d:c7:25:9c:d5:b2:b7:f8:44:15:
4f:2a:bc:6c:89:d3:2c:f0:b7:67:0b:8f:67:f7:f7:
fb:4a:bc:a2:28:72:bb:a8:99:8f:10:96:1c:5f:26:
be:89:09:eb:67:d1:1e:5d:21:b4:30:9e:84:40:61:
16:02:e9:23:13:1e:83:26:37:2b:76:03:3a:7b:4e:
d1:ff:73:4a:52:41:cb:d3:03:98:a6:02:94:73:23:
7d:86:0a:dd:71:1f:f6:cf:42:cc:10:29:1d:c1:21:
9f:69:52:d8:84:73:51:9c:98:63:64:59:53:50:ba:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C9:65:4B:54:1E:71:9E:1B:77:DC:F1:BF:F8:57:87:A2:BB:86:78
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/KsllS1QecZ4bd9zxv_hXh6K7hng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:610:240::/42
Signature Algorithm: sha256WithRSAEncryption
81:fd:3f:14:0a:f1:92:cb:24:fa:47:8c:b0:de:7b:f0:68:29:
c9:7d:30:04:ae:5f:f9:9c:c7:f1:38:4a:f1:40:f7:89:f9:06:
d8:83:4f:d8:cd:f5:72:d4:a0:b8:fc:5c:4a:dc:44:78:09:8a:
a8:44:d6:66:83:44:2c:45:45:ea:4e:98:0e:fa:27:9e:93:d0:
b4:b9:8a:96:40:73:70:69:03:f3:24:43:6d:d3:eb:3e:b6:f8:
56:b2:8c:3c:4f:96:8e:fe:23:5a:7c:af:71:fc:8b:72:a9:da:
4a:bb:24:76:70:2e:35:65:18:ca:90:2b:dc:04:09:69:e2:b0:
39:8a:01:24:4e:b4:36:ba:a8:56:d6:f2:d4:b6:8a:55:37:e1:
dc:6f:cf:77:b3:16:24:27:02:3e:c5:9d:af:b0:87:77:bf:c3:
9b:92:82:e1:af:ca:f6:b5:a9:3d:eb:8f:24:04:79:46:2d:f6:
d0:e0:bd:90:5e:51:a8:25:06:95:40:93:11:af:99:0c:26:db:
57:19:bd:17:c7:c8:fd:84:c9:dc:a5:0d:dc:7d:b5:fa:70:b0:
df:b9:7e:98:81:92:69:ef:e2:ee:96:2d:26:71:8b:41:5f:7c:
89:6a:dd:7e:7d:13:2a:f1:09:5e:ac:66:62:5d:a6:f6:e5:9c:
75:82:e1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org