Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Bza_fdHVXx3lhUW56dUd2h2VJQA.roa
File: Bza_fdHVXx3lhUW56dUd2h2VJQA.roa (raw, json)
Hash identifier: yGPxTBSdSfJlL2z2JHD/e7zNaYMhTNn0Y18iXSHAjus=
Subject key identifier: 07:36:BF:7D:D1:D5:5F:1D:E5:85:45:B9:E9:D5:1D:DA:1D:95:25:00
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0187B7DACB15CFCED9AFCDC3D3E7B770302D
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Bza_fdHVXx3lhUW56dUd2h2VJQA.roa
Signing time: Tue 25 Apr 2023 09:59:41 +0000
ROA not before: Tue 25 Apr 2023 09:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15562
IP address blocks: 2001:728:1808::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:da:cb:15:cf:ce:d9:af:cd:c3:d3:e7:b7:70:30:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Apr 25 09:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0736bf7dd1d55f1de58545b9e9d51dda1d952500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:da:11:af:76:12:de:7c:de:cb:4b:e6:1e:d0:
8e:42:36:40:ea:5f:59:6d:af:79:fb:1a:96:0b:93:
4d:46:9d:75:7e:48:86:3f:08:ea:db:ec:49:59:b2:
88:71:f9:e6:51:5b:6d:26:90:71:7b:8f:7a:55:0f:
dc:cb:75:90:b8:da:08:59:a9:2a:53:9f:73:45:2f:
a8:fe:2c:7d:57:84:55:f6:5b:e8:9f:88:b8:a0:06:
b8:89:31:06:96:98:22:22:90:4d:d6:bb:63:9c:e1:
b3:64:ff:63:40:2a:47:46:41:31:b5:34:b1:6e:d5:
f6:71:55:72:e3:18:82:f0:a8:0a:ce:02:b6:29:90:
a5:65:fe:63:f7:e1:30:5f:20:34:f0:5c:7e:6b:d6:
03:f7:79:d7:d2:2f:59:e5:2f:b3:90:ff:8a:02:68:
36:1d:41:2c:10:c9:8e:60:4d:0b:8f:5a:d5:94:b7:
8a:25:16:13:0d:99:8e:a2:74:d2:e3:ec:ea:0f:88:
1c:a6:7c:b1:cd:a4:7c:43:92:62:ec:83:51:15:38:
ff:ac:38:b0:fc:e3:37:30:65:e1:52:bf:67:0c:29:
87:56:17:bd:6f:7d:8c:d5:77:44:be:4f:f8:4a:50:
c9:86:a6:34:84:ff:5e:f3:8f:fb:70:88:fb:de:de:
d0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:BF:7D:D1:D5:5F:1D:E5:85:45:B9:E9:D5:1D:DA:1D:95:25:00
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/Bza_fdHVXx3lhUW56dUd2h2VJQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:728:1808::/48
Signature Algorithm: sha256WithRSAEncryption
90:40:f9:29:a9:c2:b7:34:a8:70:58:4c:45:07:47:bf:3f:b5:
eb:7b:f6:27:51:7c:74:93:3f:6b:55:78:01:ce:67:4c:45:32:
3b:04:30:49:00:5a:95:07:7c:a2:60:72:e8:36:21:54:2a:90:
17:a3:76:73:68:1a:07:cf:d8:95:25:87:f9:aa:02:53:20:fa:
d9:6a:76:88:e7:98:26:65:46:e0:65:3d:d1:ee:af:f2:bf:22:
67:da:9e:9a:a2:78:a6:6c:2c:6d:e0:5f:d3:f2:96:ce:a6:9e:
83:21:b5:fb:6b:b8:d7:b2:01:52:ce:0a:c6:00:e3:8d:23:66:
b2:bf:b2:b9:c8:c1:b0:0b:1d:dc:ca:67:8c:85:da:f0:b5:27:
86:1f:05:88:c5:e7:49:30:a5:1e:78:69:82:23:b8:7f:4d:bd:
94:7a:76:40:37:97:84:f9:fb:b7:8b:6d:e1:34:96:81:1b:63:
50:36:52:c9:15:da:55:75:32:b5:cb:9e:1a:9c:d2:7c:b9:72:
f0:e6:d1:df:6d:7c:d6:1c:42:5a:7f:d0:6f:7c:c6:1b:c8:e7:
7d:ea:45:7f:fa:e3:f7:71:4f:19:b4:9e:6b:37:e5:94:2a:89:
cf:b2:59:90:b8:b4:13:20:0e:ce:41:e7:9e:8e:71:d5:68:3e:
42:7f:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:21 2024 by rpki-client on console-ams.rpki-client.org