Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/KAnRznP7GJ9ZgXFVZuUmZ6c7X5g.roa
File: KAnRznP7GJ9ZgXFVZuUmZ6c7X5g.roa (raw, json)
Hash identifier: 7Z9RoOsFpPxBZ26QJuTXoeQLV1xSbF7Gs3ocE1g6waQ=
Subject key identifier: 28:09:D1:CE:73:FB:18:9F:59:81:71:55:66:E5:26:67:A7:3B:5F:98
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 01856C1383D571E64DA460B3F07D95D31D09
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/KAnRznP7GJ9ZgXFVZuUmZ6c7X5g.roa
Signing time: Sun 01 Jan 2023 06:44:56 +0000
ROA not before: Sun 01 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57521
IP address blocks: 2a13:bc2:6::/48 maxlen: 48
2a13:bc2:3::/48 maxlen: 48
2a13:bc2:2::/48 maxlen: 48
2a13:bc2:5::/48 maxlen: 48
2a13:bc2:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Nov 2023 17:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:83:d5:71:e6:4d:a4:60:b3:f0:7d:95:d3:1d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Jan 1 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2809d1ce73fb189f5981715566e52667a73b5f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9e:df:f5:f8:31:ce:08:ae:5b:da:0b:77:97:
36:8b:3e:a3:49:c2:47:f4:25:55:73:8d:7c:44:34:
b9:d3:0c:20:49:ed:b0:ba:05:7f:c1:dd:a1:ab:17:
31:94:2b:e5:d5:7d:fd:fa:8f:28:c7:75:5d:18:a9:
33:e1:71:7f:da:fc:1f:57:f0:0f:05:fc:57:77:b2:
28:00:d9:af:b3:d6:c5:8f:95:d4:ed:04:fd:e9:0f:
58:24:a9:9c:ec:b1:fe:e2:f4:86:da:59:d2:b9:f4:
74:4d:fd:a6:8a:90:5a:3f:f8:4c:c8:8f:bf:54:a5:
37:09:7e:a7:cb:b7:64:96:1e:cf:45:e9:93:df:03:
18:5a:95:0d:ba:4f:e3:58:da:90:48:4a:11:cb:00:
64:47:d0:13:58:c1:86:7b:ee:f3:ef:02:6d:ed:b6:
1d:49:e1:14:94:7d:64:e7:1a:29:d7:8b:44:4e:86:
70:7e:45:ef:08:36:2f:0d:d1:1f:db:09:60:de:14:
2b:19:d1:03:73:ea:bd:ea:a0:12:ae:a4:78:ee:b3:
7c:58:94:0c:09:44:21:37:88:92:e8:ad:3c:c1:e8:
8b:8d:74:31:e8:2a:2e:34:c9:a2:ee:a3:e0:22:1e:
cb:ba:55:71:06:b4:91:6b:d9:5d:88:09:37:04:5b:
62:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:09:D1:CE:73:FB:18:9F:59:81:71:55:66:E5:26:67:A7:3B:5F:98
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/KAnRznP7GJ9ZgXFVZuUmZ6c7X5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2:2::-2a13:bc2:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:c6:a3:38:39:25:1c:8a:64:78:c5:23:e2:2b:b9:48:59:e5:
ab:6a:c8:ba:5b:d7:c9:50:d8:50:82:1e:6a:d9:a1:b8:5d:82:
5b:13:36:55:a9:81:9f:6d:c0:65:89:a2:21:91:d5:19:cf:73:
b8:55:c2:fb:95:62:fd:b1:1a:1a:5a:e1:84:6d:8c:48:76:49:
fe:ce:be:47:2e:bd:6a:bd:8c:9b:42:ef:f0:2e:10:cd:01:07:
34:d3:4c:93:33:88:f9:b2:8e:0a:af:ff:b9:1b:91:e7:d5:e9:
ce:a0:22:a5:07:f3:ca:09:60:7e:dd:d9:bd:7d:6b:20:cc:72:
e8:67:de:86:9a:e9:61:e1:42:02:8a:b0:64:25:ce:5a:ab:3a:
23:8b:21:82:6a:30:a0:92:d4:66:81:73:b5:c9:c5:1c:1f:18:
60:8e:6f:ca:0d:2c:cc:2e:bd:50:20:6b:fc:7b:79:88:07:e1:
e0:f3:07:78:e1:c2:da:e0:77:20:c5:e9:84:2c:38:1d:d6:95:
c3:a3:e5:d9:09:7f:8f:45:c4:e5:06:e1:58:3f:ad:fc:7e:87:
39:22:cf:87:17:2f:2f:4c:4a:35:b4:ab:7e:97:11:5a:bb:e2:
54:6b:d6:f6:ee:4d:3e:e1:12:36:b5:8a:f5:61:63:d2:cc:52:
27:01:4b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:50 2024 by rpki-client on console-fra.rpki-client.org