Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/nKkSxdOVwnBMj_Hn1ZrawF60Cmw.roa
File: nKkSxdOVwnBMj_Hn1ZrawF60Cmw.roa (raw, json)
Hash identifier: minRASim7AaDMZ3TYj/EkFrXP8jqWbww45H17VD+ExQ=
Subject key identifier: 9C:A9:12:C5:D3:95:C2:70:4C:8F:F1:E7:D5:9A:DA:C0:5E:B4:0A:6C
Certificate issuer: /CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Certificate serial: 01856F66C3BA4D195A28C6E3B660FCAA0F23
Authority key identifier: 80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/nKkSxdOVwnBMj_Hn1ZrawF60Cmw.roa
Signing time: Sun 01 Jan 2023 22:14:43 +0000
ROA not before: Sun 01 Jan 2023 22:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47368
IP address blocks: 2001:67c:9fc::/48 maxlen: 48
2001:67c:9f4::/48 maxlen: 48
2001:67c:9f8::/48 maxlen: 48
2001:67c:9f0::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c3:ba:4d:19:5a:28:c6:e3:b6:60:fc:aa:0f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b9cfb91309d5d91ffc32bcaf06c36b09772557
Validity
Not Before: Jan 1 22:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca912c5d395c2704c8ff1e7d59adac05eb40a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:03:7a:35:1c:ce:4e:16:3e:a3:36:da:56:
c2:1e:45:bf:1f:13:95:13:a2:0d:01:0e:8c:dc:61:
fd:4d:8d:0f:b0:0b:d9:57:5d:06:2c:c4:71:e9:3f:
3d:58:7b:f4:53:51:8d:cd:0f:20:eb:8a:6f:a4:0e:
55:24:2a:c6:e9:a4:e3:14:da:8e:d3:b8:e2:f3:47:
76:b7:11:9d:94:0e:74:fc:91:36:f6:f5:80:27:8b:
bf:5a:32:b4:0a:99:6e:d0:ea:81:e7:94:fb:5a:18:
23:12:71:8a:ae:d8:34:44:fd:84:3b:dd:fc:52:dd:
3d:12:e7:a4:c9:24:f5:cf:f4:d9:37:62:f6:05:4f:
92:07:dc:66:4e:6f:8a:9e:54:94:62:b9:30:8b:82:
e7:43:0e:76:6b:91:4c:97:3e:1e:2d:f7:18:77:37:
c9:8e:da:51:ee:53:4b:af:96:7f:fd:3d:15:1e:98:
6f:44:58:ad:34:41:91:09:50:cd:58:15:46:e2:50:
1b:1d:54:23:c7:09:28:d2:ba:38:1c:fb:7c:ab:2f:
16:b8:f6:8c:1c:e7:2f:c0:f8:5c:2b:4c:3d:a4:26:
17:83:56:ce:bc:62:68:21:7b:ec:f7:8b:44:a6:cc:
42:f5:d6:d4:40:f0:87:97:2d:fd:1f:cd:bf:0b:94:
90:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A9:12:C5:D3:95:C2:70:4C:8F:F1:E7:D5:9A:DA:C0:5E:B4:0A:6C
X509v3 Authority Key Identifier:
keyid:80:B9:CF:B9:13:09:D5:D9:1F:FC:32:BC:AF:06:C3:6B:09:77:25:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLnPuRMJ1dkf_DK8rwbDawl3JVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/nKkSxdOVwnBMj_Hn1ZrawF60Cmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fd9482-8cd1-4899-8cdb-27bb0b8875a8/1/gLnPuRMJ1dkf_DK8rwbDawl3JVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:9f0::/48
2001:67c:9f4::/48
2001:67c:9f8::/48
2001:67c:9fc::/48
Signature Algorithm: sha256WithRSAEncryption
de:63:60:db:cf:ad:f4:2b:58:45:e1:80:72:8d:e6:5c:f7:b5:
19:4b:2f:d8:6a:2e:f9:3f:1a:8b:fb:1b:4e:10:63:b0:a9:d3:
b1:00:b0:ca:c3:fc:a7:21:27:3d:a0:81:0e:44:3d:54:0f:6d:
9e:a0:92:c2:32:63:dc:1e:d1:a5:0b:8a:60:24:13:3a:b1:7e:
ed:4d:00:d3:54:93:12:28:c9:e4:99:6a:78:43:46:31:cf:7b:
87:8d:3d:2c:c7:dd:bc:13:c9:0b:6a:ef:3a:1f:12:3c:74:97:
b2:f4:4a:01:e3:ef:c9:49:ea:87:18:3b:2f:10:be:11:f8:49:
b3:8b:05:26:ec:b4:9c:e9:3e:b6:62:00:18:54:40:f4:e5:16:
d9:66:cd:aa:03:ed:8b:43:7b:3e:e6:53:da:41:c7:c6:ed:6f:
59:f3:b4:d4:f6:09:4d:1b:b2:23:e8:1a:0d:74:59:bc:64:ff:
60:4c:67:50:3d:09:c3:20:23:73:db:d9:6a:6b:6a:e8:2e:90:
5c:ad:f3:f3:62:6a:c1:2c:bc:09:b2:49:14:fb:28:02:ab:4a:
c5:cf:e3:1b:ed:76:15:8f:b7:0b:36:cb:e5:e8:4b:82:53:ea:
47:ba:8e:ea:e0:6a:94:93:96:41:94:30:a8:29:e9:0f:df:4f:
40:d2:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:55 2024 by rpki-client on console-fra.rpki-client.org