Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BOu8rKiW3C8YABQ42kzWRnqWasg.roa
File: BOu8rKiW3C8YABQ42kzWRnqWasg.roa (raw, json)
Hash identifier: X79Hi/EoIbAEc/8ICGkFJDIeRI5sw2sSu53TodIV9iQ=
Subject key identifier: 04:EB:BC:AC:A8:96:DC:2F:18:00:14:38:DA:4C:D6:46:7A:96:6A:C8
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C4170B3F18003CF763BD537B9173DF6
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BOu8rKiW3C8YABQ42kzWRnqWasg.roa
Signing time: Sun 01 Jan 2023 07:35:06 +0000
ROA not before: Sun 01 Jan 2023 07:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209645
IP address blocks: 2a0c:e641::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:70:b3:f1:80:03:cf:76:3b:d5:37:b9:17:3d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04ebbcaca896dc2f18001438da4cd6467a966ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fb:98:cc:ee:04:9e:2c:6d:36:a0:68:d4:6f:
3a:37:0d:5b:87:e8:d4:9d:5d:30:9c:50:a9:36:2b:
e0:17:35:49:1d:b3:45:9f:df:53:6a:87:b4:03:5b:
eb:f4:a6:b5:1b:f9:03:83:63:15:c0:65:b2:be:92:
95:fc:52:d7:de:78:50:90:60:6e:5e:39:86:95:16:
8b:b5:89:be:38:a3:08:bf:1c:0d:98:93:dc:cc:5c:
e1:bb:fa:27:75:01:24:32:bf:b4:8b:5d:2b:9d:bb:
02:c1:78:48:37:f6:4b:ef:79:23:03:9b:c2:0d:85:
43:6f:1b:cb:72:c7:30:26:a6:21:ff:42:51:55:d3:
ac:23:87:fb:91:7c:06:91:8a:13:56:5d:10:96:98:
ed:60:b2:82:31:b6:42:f4:bc:3f:42:de:a7:3e:1b:
32:44:1e:e3:bb:33:b4:08:63:7a:27:53:1f:3a:82:
71:93:49:89:cf:5f:1e:b1:5c:8a:27:72:c7:be:d3:
c0:8a:51:7d:14:f6:5a:e5:25:ff:22:8a:29:00:66:
d5:62:56:ff:83:42:01:5f:65:48:d7:2f:a9:76:53:
17:87:eb:cc:79:79:91:49:2d:f4:b9:0c:4b:93:4d:
68:7a:aa:a4:4d:b9:d6:f4:5d:50:45:65:84:46:57:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EB:BC:AC:A8:96:DC:2F:18:00:14:38:DA:4C:D6:46:7A:96:6A:C8
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/BOu8rKiW3C8YABQ42kzWRnqWasg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:e641::/32
Signature Algorithm: sha256WithRSAEncryption
83:7d:61:f8:00:b3:91:49:48:2b:b5:71:07:27:8e:19:a4:f0:
3c:66:59:a0:61:60:02:5b:da:fe:13:56:39:ff:9c:42:c3:59:
64:53:8f:e0:09:07:ad:d8:39:87:7f:45:87:ab:c9:15:0f:fd:
f7:e3:da:4a:fe:4c:b0:05:10:90:d1:2e:3c:7b:0d:27:95:3f:
e5:b1:dd:4c:f9:23:d4:e8:da:48:37:e2:86:ce:44:19:72:39:
28:5f:d0:4f:d4:43:0f:c2:59:b4:4e:60:6d:f0:3d:8a:7b:5e:
34:80:93:b8:18:18:98:49:8c:e7:dc:cc:b6:af:77:43:3e:54:
38:84:25:92:dd:ee:5c:d5:a5:e2:79:4f:95:ae:63:44:96:c4:
ae:e0:b7:d4:a1:74:12:9d:c5:90:2a:24:79:77:ac:16:4d:b8:
38:36:50:c7:73:cc:9f:4e:d7:98:2c:99:4c:1a:26:8a:3b:5c:
43:ee:fa:5d:bc:ca:46:39:d9:2e:f2:39:cc:ff:ec:e5:37:52:
71:a2:11:45:d4:c6:4a:f0:3a:f2:a6:a5:bf:2a:30:46:56:6d:
59:f2:e6:37:e9:16:14:d7:50:be:45:28:5d:4b:4f:15:13:d2:
fd:6b:ea:39:3d:8a:26:96:e4:07:4c:3c:90:ec:cc:da:4c:d6:
ac:4d:87:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org