Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/K2dVHL_JReV9sD9B2wEyKZ9hqmw.roa
File: K2dVHL_JReV9sD9B2wEyKZ9hqmw.roa (raw, json)
Hash identifier: GkyyRbNMhtdIpn9Qg3/TtTGRkH+xh3UU+tauS07iQ9E=
Subject key identifier: 2B:67:55:1C:BF:C9:45:E5:7D:B0:3F:41:DB:01:32:29:9F:61:AA:6C
Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Certificate serial: 01856FF94296C294C8C4F440310EF49726C2
Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/K2dVHL_JReV9sD9B2wEyKZ9hqmw.roa
Signing time: Mon 02 Jan 2023 00:54:43 +0000
ROA not before: Mon 02 Jan 2023 00:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212828
IP address blocks: 2001:67c:a58::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:42:96:c2:94:c8:c4:f4:40:31:0e:f4:97:26:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758
Validity
Not Before: Jan 2 00:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b67551cbfc945e57db03f41db0132299f61aa6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7d:a2:ad:00:42:cc:d0:c1:84:71:8a:f7:d2:
dd:ab:13:51:b4:23:84:6c:f3:62:a4:72:32:88:fd:
84:ba:ee:b3:a4:0a:15:62:56:c3:ae:66:b1:4c:20:
41:8a:36:7c:df:73:7e:db:cd:81:8d:77:a1:32:ad:
e6:db:6a:20:7f:4e:55:cd:c4:a9:f9:b7:8b:86:36:
52:2e:9b:dd:bf:86:cf:da:97:2b:db:4f:ce:ea:bf:
db:bb:bb:cb:4e:ba:0f:d2:e9:f4:08:c1:0b:3c:53:
06:3d:ce:72:aa:b0:d0:c3:66:6b:31:29:e1:ad:7d:
e1:7c:96:1c:a5:a2:c3:84:d4:85:6b:cb:09:d0:10:
92:56:47:20:cc:ac:5f:d9:d1:bb:33:68:37:80:c6:
43:78:c1:16:3d:9f:52:f2:4f:b8:c2:af:e0:8b:77:
3e:62:6e:9e:51:07:20:af:f6:65:d2:fa:0b:37:bc:
77:f6:dc:db:cf:f9:28:92:46:fb:5b:4c:40:f6:64:
a6:c9:ca:ac:81:f4:5a:34:a1:5b:2d:ff:8b:ae:45:
c8:9a:13:8f:63:5c:94:01:be:5f:c3:aa:10:41:a7:
24:b1:e2:50:87:47:7f:a0:9b:3b:f1:dd:87:a0:fd:
3b:4b:ee:90:3f:40:30:9a:df:50:20:bf:47:7f:9d:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:55:1C:BF:C9:45:E5:7D:B0:3F:41:DB:01:32:29:9F:61:AA:6C
X509v3 Authority Key Identifier:
keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/K2dVHL_JReV9sD9B2wEyKZ9hqmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a58::/48
Signature Algorithm: sha256WithRSAEncryption
aa:af:e0:ba:1c:90:c6:4b:9c:74:63:b0:e8:55:c9:c3:5f:da:
b5:47:9a:a8:59:d3:ef:12:89:52:fd:19:07:f1:1f:b8:74:6b:
eb:9b:6f:d7:87:b1:38:1f:e6:d9:35:85:f0:d2:84:23:f0:be:
e5:2f:5f:a3:72:52:21:61:5e:ce:94:65:d5:18:af:51:26:a2:
e3:7b:1d:2c:8e:1f:9b:f7:56:b4:33:a5:fe:8b:0b:a2:46:aa:
72:d6:a5:50:42:27:0c:59:f0:08:f2:b4:93:96:6d:34:f7:f4:
e7:9f:6f:2a:ff:c7:ec:92:70:25:64:be:4a:6a:5e:ab:00:07:
80:fb:c7:a7:e9:a0:e5:1e:26:39:e7:2a:26:8d:65:65:ad:4d:
d7:3a:d7:4b:c7:91:cd:3f:75:33:7a:2b:1a:db:3a:90:64:8f:
fa:6e:3f:0e:9a:5e:07:40:69:0e:22:a8:45:06:e2:1b:d1:c9:
f8:ec:58:84:75:ce:61:b4:a7:bb:08:f6:4a:30:f7:cf:d4:38:
60:11:67:3c:08:5d:0f:7b:6b:72:ec:00:7d:65:e5:7d:6c:60:
4d:58:34:2f:44:83:b4:63:26:7f:5e:24:bb:97:8b:21:45:d6:
dc:47:06:37:88:89:4e:6d:4a:e3:3f:bc:30:47:64:2e:02:3e:
c8:54:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:34 2024 by rpki-client on console-ams.rpki-client.org