Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/B22fa-_CCJOavGtLlFCPoKSRsgY.roa
File: B22fa-_CCJOavGtLlFCPoKSRsgY.roa (raw, json)
Hash identifier: OV7BB2oY6iS6iclneDzFDHF90ugDHHUDjyGZkkteb+Y=
Subject key identifier: 07:6D:9F:6B:EF:C2:08:93:9A:BC:6B:4B:94:50:8F:A0:A4:91:B2:06
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0188597D9E2BDC93CA07FB5993CD5B7C5BEC
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/B22fa-_CCJOavGtLlFCPoKSRsgY.roa
Signing time: Fri 26 May 2023 19:16:24 +0000
ROA not before: Fri 26 May 2023 19:16:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 2a0c:4144:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:59:7d:9e:2b:dc:93:ca:07:fb:59:93:cd:5b:7c:5b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: May 26 19:16:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=076d9f6befc208939abc6b4b94508fa0a491b206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1f:2c:04:3b:7a:9a:61:ce:91:61:77:5d:d8:
f2:4d:51:79:a6:8e:b6:c0:ed:13:0f:e6:b6:e2:a5:
14:c4:17:01:eb:72:4a:cb:df:cb:b9:b9:fd:01:69:
95:6e:20:80:73:54:e5:a9:65:39:61:36:6f:a9:9b:
fb:35:3c:c4:b7:a8:f0:8d:df:25:1e:4b:73:5b:d2:
48:8e:59:10:6a:29:5a:a5:6c:9b:08:d7:5f:e0:90:
4f:26:b1:fa:1d:1d:98:fa:c9:65:49:6b:4e:31:31:
05:20:5f:db:94:69:ec:cc:8e:9b:92:55:88:2a:a7:
16:99:fd:db:37:ac:28:29:b5:ed:c4:dd:88:46:44:
ee:81:e5:b7:d2:fb:31:a4:b5:2a:ad:46:91:96:3e:
d2:ed:d5:c3:87:a9:06:30:b1:cc:c1:3d:b8:2e:d1:
86:16:be:f1:88:9e:f8:74:a9:93:a8:7a:49:b0:ff:
3f:39:21:61:15:2c:48:2b:6b:d4:fa:9d:ed:9d:e1:
c6:c0:4c:55:fd:67:1e:f9:de:7f:51:62:82:03:a4:
9b:dd:fd:58:b1:9b:a5:e5:2b:67:27:4e:e1:1a:f8:
26:23:53:e9:e0:20:ca:4c:b8:cf:de:e1:71:11:2c:
74:10:29:c6:f0:c9:eb:e0:0c:6c:21:3b:a7:cf:1d:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:9F:6B:EF:C2:08:93:9A:BC:6B:4B:94:50:8F:A0:A4:91:B2:06
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/B22fa-_CCJOavGtLlFCPoKSRsgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4144:200::/48
Signature Algorithm: sha256WithRSAEncryption
56:30:e6:b1:06:49:07:79:b0:8f:81:b0:6c:15:11:98:d1:92:
60:ae:16:34:a8:f7:46:fa:18:c9:db:48:cb:0d:b2:5b:54:b5:
1b:ff:05:08:6e:52:b5:89:03:89:5b:11:c5:1e:6b:35:1d:23:
3e:bb:54:32:08:74:44:44:9e:9a:9a:53:e0:a6:a3:37:36:06:
ad:59:ca:2f:ea:69:99:b6:b4:17:b5:05:59:39:57:23:1d:ae:
a6:92:17:5a:aa:52:23:b4:44:1e:30:b3:32:87:79:e8:a8:32:
7c:67:e5:97:d9:eb:82:ba:67:b5:19:c8:b3:fc:2d:85:e2:f9:
89:6d:de:74:2d:04:47:29:f8:ce:80:f5:b2:2a:da:f8:11:f0:
26:7d:91:57:48:69:69:ec:e3:be:c6:aa:c6:5b:3c:38:49:6d:
0b:f7:54:d8:4b:c3:1e:44:0d:0d:0a:e5:d0:bd:6d:55:0b:48:
e5:9e:33:34:4b:f1:f3:30:e2:9f:75:6b:b7:4e:5d:2e:8a:47:
6b:1b:ae:6e:4d:ae:36:b8:90:85:b3:30:91:d2:d6:1e:b4:09:
ba:39:4c:f0:6c:1c:8f:12:95:76:08:a9:2e:bf:a2:94:6a:74:
3d:ba:bd:63:6d:0c:80:64:12:54:af:2b:04:5f:7e:ea:f6:74:
51:8f:2b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:41 2024 by rpki-client on console-ams.rpki-client.org