Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/K-5Xn0LETHfMmpw2GRA41JHC6nE.roa
File: K-5Xn0LETHfMmpw2GRA41JHC6nE.roa (raw, json)
Hash identifier: x5GiUuHC3MNDTPIK91Q1HwEgBFpO/bFd8xU2OXQkbhc=
Subject key identifier: 2B:EE:57:9F:42:C4:4C:77:CC:9A:9C:36:19:10:38:D4:91:C2:EA:71
Certificate issuer: /CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Certificate serial: 01856E8204488950BF37AA31E5B29DF877F3
Authority key identifier: A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/K-5Xn0LETHfMmpw2GRA41JHC6nE.roa
Signing time: Sun 01 Jan 2023 18:04:52 +0000
ROA not before: Sun 01 Jan 2023 18:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50907
IP address blocks: 2a12:bc0:5::/48 maxlen: 48
2a12:bc0:3::/48 maxlen: 48
2a12:bc0:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:04:48:89:50:bf:37:aa:31:e5:b2:9d:f8:77:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9b5ffd24d2eb5d5c1e1cfe78b003c4bab5a2f13
Validity
Not Before: Jan 1 18:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2bee579f42c44c77cc9a9c36191038d491c2ea71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f8:f7:7f:c2:99:3d:10:c5:d2:61:94:55:2c:
d4:84:5e:f4:94:05:fd:78:ba:e6:6b:44:be:4c:13:
c2:f4:f5:5a:fe:ce:17:d3:af:1c:12:e2:ba:9e:a9:
d0:c8:0a:b0:d7:9a:f2:a3:26:d5:46:66:55:85:71:
26:ce:0e:4c:cc:1a:87:ee:49:3e:d7:36:59:44:56:
7f:97:1d:db:ba:e9:b2:8c:5a:4e:6b:7f:2a:40:09:
8c:33:4a:73:bf:42:bb:6c:79:1d:54:52:66:be:59:
92:2c:8b:68:d4:2a:09:e6:b9:e8:9f:c7:df:2d:96:
15:47:1b:93:9c:09:9d:27:48:90:26:90:bd:f8:2d:
22:50:9e:8b:77:c7:d3:4e:b8:85:d0:bb:a8:35:f6:
9d:1c:ee:c7:eb:0f:e9:65:7a:5f:48:cb:33:c5:bd:
28:87:f5:a7:2d:1e:ea:aa:64:21:c6:70:16:19:2b:
b5:9f:17:ae:33:5d:02:9c:09:23:d5:56:bf:c3:45:
db:0b:90:89:b4:74:52:29:90:4c:50:55:f0:c1:19:
57:4c:76:aa:41:e3:0b:4a:a7:ea:a0:d0:86:0e:2d:
e9:ac:02:8a:ae:e6:1b:e7:4a:c6:e9:03:a9:58:78:
99:63:bc:55:5b:09:45:8e:be:d6:7c:b6:6d:84:ef:
bb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EE:57:9F:42:C4:4C:77:CC:9A:9C:36:19:10:38:D4:91:C2:EA:71
X509v3 Authority Key Identifier:
keyid:A9:B5:FF:D2:4D:2E:B5:D5:C1:E1:CF:E7:8B:00:3C:4B:AB:5A:2F:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbX_0k0utdXB4c_niwA8S6taLxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/K-5Xn0LETHfMmpw2GRA41JHC6nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0301d4-4805-405c-a6e0-a42e1f1f4798/1/qbX_0k0utdXB4c_niwA8S6taLxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bc0:3::-2a12:bc0:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
88:5d:96:1f:4a:84:9e:e2:83:c6:c4:49:65:88:dc:27:d1:21:
2b:80:17:e6:dc:07:33:77:c6:9e:15:df:aa:25:77:37:10:5d:
91:d2:2c:52:b0:9f:0e:f6:2d:6e:e7:cb:3e:ab:24:33:67:29:
05:74:30:59:12:d8:4e:13:f8:65:aa:ac:6c:0e:c0:26:46:1e:
c2:42:e0:34:5e:2d:54:c3:61:88:0f:23:46:61:4a:0c:d4:07:
ac:97:39:59:5c:71:a2:06:2a:af:9d:60:3e:ac:08:1a:f9:6e:
97:e7:ba:93:2b:07:8e:7f:0b:2b:95:0e:f6:53:63:5b:aa:55:
e6:88:93:9d:66:df:1f:d1:b1:1e:6d:ba:e0:37:0a:43:9e:12:
8f:5e:dd:6a:bc:53:32:a9:f1:c7:d1:fb:51:26:ff:a3:5d:1f:
5b:98:5c:46:67:65:54:3c:a1:8f:70:0a:71:4f:94:29:0a:b1:
69:62:c2:04:a9:4a:d7:5a:b5:f3:ef:62:d9:5c:50:10:12:99:
4d:a7:f2:61:ed:1d:50:b1:8c:82:ac:f8:7d:db:6b:46:73:7b:
20:24:db:3b:ed:d2:66:90:f5:a2:0b:fd:ff:d8:c3:44:50:e5:
e3:4b:fc:9d:0b:18:ce:01:e9:fc:b6:9e:d7:1b:31:05:aa:c3:
20:d4:0c:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:15 2024 by rpki-client on console-ams.rpki-client.org