Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/KgLulu19_BlS7JGLrxBgszwKUZ8.roa
File: KgLulu19_BlS7JGLrxBgszwKUZ8.roa (raw, json)
Hash identifier: /8g703JglK+vRqWqN78UpMP3AaRkbrHolBgIBkl3d4Q=
Subject key identifier: 2A:02:EE:96:ED:7D:FC:19:52:EC:91:8B:AF:10:60:B3:3C:0A:51:9F
Certificate issuer: /CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Certificate serial: 018C0BF5B7360D7F77D8EEB0F1995FA3BB3F
Authority key identifier: 56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/KgLulu19_BlS7JGLrxBgszwKUZ8.roa
Signing time: Sun 26 Nov 2023 14:08:21 +0000
ROA not before: Sun 26 Nov 2023 14:08:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212077
IP address blocks: 2a13:7b40:1::/48 maxlen: 48
2a13:7b40:a1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0b:f5:b7:36:0d:7f:77:d8:ee:b0:f1:99:5f:a3:bb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5688b42175d6214a31a5407db8b6c95f1ec60d4e
Validity
Not Before: Nov 26 14:08:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2a02ee96ed7dfc1952ec918baf1060b33c0a519f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:1c:af:93:c6:5f:ba:b3:b3:22:ba:7f:39:
d1:62:85:04:30:5f:06:c0:b4:a2:3a:17:f2:02:66:
56:b1:52:61:07:4a:40:b1:bd:0a:80:fa:7c:3b:38:
0d:f1:2e:6f:b4:45:9b:66:0a:8f:02:7a:a0:61:9a:
7f:4f:07:c6:39:3c:31:28:8a:1f:3b:c6:30:f9:78:
98:f7:93:96:0d:5b:43:49:a3:5f:27:e7:34:bf:a9:
48:5a:f5:e7:c6:84:8c:5e:be:e1:57:42:da:12:79:
bb:d7:21:47:7c:36:d5:86:ad:d8:a2:43:a3:23:24:
ef:bf:b8:5e:87:06:fc:94:52:28:22:ca:c0:3b:a1:
fc:72:0f:40:4f:ce:2c:f8:a7:13:ac:9f:ee:d6:69:
4f:16:3e:35:45:65:f5:39:5c:b3:30:ef:90:3c:57:
13:e6:d6:c2:18:c2:31:a8:0d:0d:d9:cf:20:2d:6e:
1f:42:26:2b:2b:28:be:ce:7d:4c:bd:ab:fb:7c:90:
2e:b5:6a:9a:21:23:09:44:fc:6f:fb:0c:63:00:9f:
ab:fd:2e:f8:fb:65:65:0b:22:60:c3:a5:4a:f4:b4:
04:0f:5b:e7:b8:cc:8f:9b:6f:70:c7:3c:f5:ac:fa:
24:71:3b:2e:42:b8:84:40:50:2b:99:55:41:db:02:
22:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:02:EE:96:ED:7D:FC:19:52:EC:91:8B:AF:10:60:B3:3C:0A:51:9F
X509v3 Authority Key Identifier:
keyid:56:88:B4:21:75:D6:21:4A:31:A5:40:7D:B8:B6:C9:5F:1E:C6:0D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Voi0IXXWIUoxpUB9uLbJXx7GDU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/KgLulu19_BlS7JGLrxBgszwKUZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/83d6fa-461d-4a56-a844-9f942bc12a7e/1/Voi0IXXWIUoxpUB9uLbJXx7GDU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7b40:1::/48
2a13:7b40:a1::/48
Signature Algorithm: sha256WithRSAEncryption
1a:e9:52:ea:a0:f9:bd:1f:91:2d:70:06:9a:07:13:3b:67:d6:
ba:6f:c7:cd:15:f6:c7:d5:38:1a:30:72:ce:ef:2e:7d:3c:e9:
2a:97:17:5d:7b:43:24:dd:01:21:9b:f2:f2:6a:ad:fc:b9:4d:
0a:8f:76:63:c7:26:b3:5d:16:9a:48:fc:36:6b:ab:33:8b:16:
c3:09:32:8e:59:2c:66:8f:d2:e5:de:1e:c9:23:28:1e:1a:da:
94:02:e6:2d:5e:83:ba:5a:e0:ba:58:dc:df:09:a7:d0:22:2d:
e2:49:e6:3e:82:9a:6f:f0:68:d0:0c:8d:c7:e7:e2:f9:02:cf:
7e:5a:30:7f:e0:6e:e9:53:fd:ba:54:00:4a:62:46:e9:d3:02:
0b:32:b7:20:c4:eb:35:31:4a:4b:8a:c9:c1:5d:63:41:e0:07:
37:a9:29:c4:9e:f5:30:47:3e:a1:3e:c6:39:6a:db:ef:49:3c:
ef:93:79:f6:37:95:b9:6c:2d:2b:32:f8:4f:7c:39:f5:16:25:
91:80:ab:b1:63:fb:36:58:f0:89:c0:4f:fe:63:ea:ed:c2:a2:
0f:df:8c:e2:c3:08:b9:38:92:3e:a9:6b:0a:ee:4a:04:05:1d:
71:41:bf:53:45:cf:1c:1d:e2:a6:bb:18:7b:95:d1:31:28:e3:
8c:2e:b9:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:46 2024 by rpki-client on console.sobornost.net