Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/kBwBackW5--Y_pPAEL_tnx04Xhc.roa
File: kBwBackW5--Y_pPAEL_tnx04Xhc.roa (raw, json)
Hash identifier: 2MK2Imvrw08icDsmLUvHGHEA/dcgNADZ6AJpWPsx06o=
Subject key identifier: 90:1C:01:69:C9:16:E7:EF:98:FE:93:C0:10:BF:ED:9F:1D:38:5E:17
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 01856F42A2013F85B14F60E01B0F95F25DE7
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/kBwBackW5--Y_pPAEL_tnx04Xhc.roa
Signing time: Sun 01 Jan 2023 21:35:15 +0000
ROA not before: Sun 01 Jan 2023 21:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397515
IP address blocks: 2a01:488:bb07::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a2:01:3f:85:b1:4f:60:e0:1b:0f:95:f2:5d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 1 21:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=901c0169c916e7ef98fe93c010bfed9f1d385e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c7:b2:6a:66:33:b8:01:77:7d:64:ff:e0:45:
38:e0:40:ae:f1:5f:13:33:6b:af:33:ed:b7:d4:56:
53:f2:a2:a7:76:7e:5d:93:e4:88:a2:ff:e1:44:9e:
40:32:be:1c:ab:75:d1:2e:71:b2:d8:cb:82:e9:26:
ab:0f:d1:08:11:ef:23:77:60:9e:e5:47:ca:48:e8:
55:3e:33:82:72:77:05:75:a1:ec:ea:98:d1:7e:42:
f6:58:fe:ee:3c:59:74:15:d1:94:b2:c6:dd:17:a0:
d0:f9:9f:7e:83:1e:ca:69:4b:d3:a2:d0:f7:a5:09:
0d:6d:5c:c4:ce:0b:85:a0:22:5f:1c:07:fb:46:b6:
d8:c9:d7:9f:e0:d2:91:0f:c1:f8:d0:a5:7a:2d:ff:
51:b3:b0:42:c6:28:51:5c:bf:62:78:da:ad:c7:e4:
d6:e3:bc:61:21:83:4a:1b:98:a4:16:81:7a:96:86:
ea:7a:6a:79:a2:3d:bf:8a:d3:67:e7:01:8f:65:72:
4b:63:5f:c7:c3:60:d0:72:e7:74:e3:dc:73:16:e0:
04:64:8f:6e:24:dd:d7:4c:81:d9:ca:7f:51:85:db:
6f:73:2d:d5:da:9d:aa:38:75:27:6c:09:2c:84:f5:
c7:e7:35:f1:eb:8a:b3:31:a7:79:16:88:0a:63:9b:
1f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:01:69:C9:16:E7:EF:98:FE:93:C0:10:BF:ED:9F:1D:38:5E:17
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/kBwBackW5--Y_pPAEL_tnx04Xhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb07::/48
Signature Algorithm: sha256WithRSAEncryption
a7:7a:be:ed:54:ad:b3:12:d3:03:7f:0c:a5:79:ea:a2:71:23:
ec:15:7e:d9:1f:24:64:02:57:32:95:1e:bb:1d:65:23:47:9e:
17:b7:ae:28:35:c0:80:db:0c:25:49:a9:14:ae:e3:81:4c:cf:
4b:6e:3e:ff:4e:ef:08:84:a0:5a:89:96:a5:c0:63:cf:40:37:
d5:b6:f7:57:ee:3c:26:e8:97:1b:11:ee:23:7a:09:39:a0:d5:
54:95:27:bf:ff:76:0d:71:5a:de:be:4e:99:5b:f7:2b:bf:d6:
98:0c:42:ee:e0:89:ea:1b:21:0c:56:86:f0:b6:b8:d6:3f:c9:
36:e6:1b:90:78:a8:36:c7:cc:9f:71:b5:a3:46:5d:29:fa:18:
a7:be:1c:74:ed:94:7d:0e:79:f9:82:a9:ba:af:7c:01:fc:8a:
21:09:ea:f9:c3:e3:a2:c8:92:d0:c4:b0:28:a8:2e:af:f9:ee:
72:3a:a9:bc:f0:9e:f9:bb:f7:3e:44:07:fd:3a:06:35:64:0e:
ad:df:31:a9:b1:e2:cd:6c:5b:ce:39:b8:5f:af:eb:a2:26:dd:
c0:66:ed:03:28:c9:37:e4:f0:a9:df:e5:98:1c:85:81:e6:41:
d1:c8:e5:e4:81:88:71:41:27:a9:8e:99:2a:58:db:53:6b:3c:
48:71:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:40 2024 by rpki-client on console-ams.rpki-client.org