Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/KoAyCQxPGIGwPv51sJHjCs3ky4U.roa
File: KoAyCQxPGIGwPv51sJHjCs3ky4U.roa (raw, json)
Hash identifier: 5CrQ4kGz8XDrDC4jN/FkQXmBelIx+nuuFX2OtTTOFVg=
Subject key identifier: 2A:80:32:09:0C:4F:18:81:B0:3E:FE:75:B0:91:E3:0A:CD:E4:CB:85
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 019276B38F1A1202CBEDEA1CEAC11C4E9FE7
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/KoAyCQxPGIGwPv51sJHjCs3ky4U.roa
Signing time: Thu 10 Oct 2024 13:52:11 +0000
ROA not before: Thu 10 Oct 2024 13:52:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214094
IP address blocks: 2001:67c:e28::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 23 Oct 2024 13:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:b3:8f:1a:12:02:cb:ed:ea:1c:ea:c1:1c:4e:9f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Oct 10 13:52:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a8032090c4f1881b03efe75b091e30acde4cb85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3e:6a:2c:59:11:a8:77:ed:fb:e6:b3:9e:19:
a3:f7:4a:c2:fe:56:07:fd:ce:72:b7:56:0a:9d:d3:
60:77:dd:50:a9:b6:c7:a1:b1:b6:ee:7d:d2:9a:20:
5e:61:d6:10:ed:b8:72:a9:23:6e:6d:f1:9b:e6:48:
05:dc:eb:8e:c7:ab:73:28:ab:9e:c6:a8:6c:c8:56:
35:60:d7:de:dd:61:a7:95:a0:1e:26:47:c4:eb:de:
0f:a9:a5:1e:10:c1:5d:c3:3f:93:c9:fc:b7:0c:ac:
5f:58:21:97:5b:71:3f:71:b9:ee:ce:fc:dd:2c:c3:
77:b4:b7:38:52:0d:e6:55:2f:ad:8b:82:5d:0f:c6:
46:9d:55:9e:a5:cd:10:9e:ec:e6:c0:46:5d:7a:c8:
ca:37:fa:51:95:83:90:60:39:61:c1:83:55:6d:a5:
0f:87:04:45:1d:4c:48:16:18:62:3b:69:0a:0d:1a:
b4:2d:43:38:2e:ff:fb:a4:a3:49:48:ba:58:bf:6c:
94:fb:75:49:4c:2d:e0:c1:a4:18:dc:ac:cd:21:e5:
c5:b6:00:64:15:f5:63:02:e4:ab:ca:c4:32:3c:8c:
e3:d5:2b:cc:de:c1:1b:bf:c3:cb:d7:0d:6c:e4:50:
2d:72:32:a4:be:f3:1c:97:59:01:6c:10:96:86:84:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:32:09:0C:4F:18:81:B0:3E:FE:75:B0:91:E3:0A:CD:E4:CB:85
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/KoAyCQxPGIGwPv51sJHjCs3ky4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e28::/48
Signature Algorithm: sha256WithRSAEncryption
4f:62:96:88:f0:05:0a:b2:b7:06:ec:40:ed:17:dc:1c:6d:3e:
62:40:5b:1f:5f:c2:fb:f4:2a:bf:8d:dc:31:60:42:f6:f4:5f:
60:8f:d6:c8:30:9e:f4:4c:29:93:9f:63:ca:0e:9f:be:bd:0e:
7d:79:0c:22:57:58:ff:50:d5:fd:4c:64:e7:ea:3c:b8:e6:08:
17:c9:98:08:7e:97:03:c7:af:c9:44:43:33:58:72:1b:e7:e0:
c7:5b:5f:c9:df:26:24:91:5e:37:09:8d:82:8c:af:8a:d4:c7:
28:f5:48:aa:a8:98:a6:3e:15:16:08:3b:7f:0b:16:5f:b3:ba:
9c:3e:38:41:1a:99:42:f1:1a:35:34:b9:77:41:96:48:d3:c4:
4f:96:a5:53:bf:29:21:78:67:02:4c:68:03:18:08:fd:50:f8:
d6:40:d2:9e:bd:bf:52:1e:14:20:05:8e:dd:1d:ff:e3:58:7f:
9f:4b:1e:3f:a0:34:a3:71:5c:3a:57:4d:e2:80:45:73:fb:36:
27:ab:10:3a:d2:e9:3a:0a:43:f8:1e:91:f6:a4:52:b8:7f:52:
a4:92:a1:2f:74:52:7f:fc:6f:1b:00:a9:f9:00:cc:fa:7c:ef:
49:70:64:55:be:78:f5:a9:d3:90:af:7b:c6:48:a9:1d:4b:6d:
2e:42:f8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 16:24:29 2024 by rpki-client on console-fra.rpki-client.org