Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/BVxJFGBMY8ZQiGp_TtA2k2wjQvo.roa
File: BVxJFGBMY8ZQiGp_TtA2k2wjQvo.roa (raw, json)
Hash identifier: EL4ZMYc3VZUtnRcXxUESEVMugBO2tn0ZPnBdZwcaus4=
Subject key identifier: 05:5C:49:14:60:4C:63:C6:50:88:6A:7F:4E:D0:36:93:6C:23:42:FA
Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624
Certificate serial: 018E6089BC45FBA1EF3E6FF6072C6FAA3CF6
Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/BVxJFGBMY8ZQiGp_TtA2k2wjQvo.roa
Signing time: Thu 21 Mar 2024 10:23:43 +0000
ROA not before: Thu 21 Mar 2024 10:23:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:30c0::/32 maxlen: 32
2a06:2600::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 27 Mar 2024 16:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:89:bc:45:fb:a1:ef:3e:6f:f6:07:2c:6f:aa:3c:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624
Validity
Not Before: Mar 21 10:23:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=055c4914604c63c650886a7f4ed036936c2342fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:07:16:d6:f5:55:2f:a6:4a:27:0e:43:a1:
26:87:38:83:77:7e:72:88:71:19:8f:c2:66:e5:2c:
e1:a7:7e:74:e0:21:ca:fb:d0:d1:8f:13:2e:47:9c:
94:7b:81:65:8a:b3:67:5b:3a:2b:39:68:fd:62:55:
38:a1:dc:50:9f:71:4f:e0:27:18:09:8c:9f:b1:5c:
3b:84:1f:0a:12:45:fe:d5:79:99:f2:5b:c8:bd:f9:
69:3d:ab:0e:10:df:8a:42:4d:1f:a8:64:a6:46:01:
a6:ca:4f:21:d0:79:af:a6:37:d2:5d:9a:a1:c9:a6:
62:45:9c:6e:4f:54:6f:82:fd:02:8d:32:7a:ba:47:
fd:a8:a2:23:ec:d7:41:2b:db:d5:f3:11:9f:45:3d:
47:5c:c0:e1:be:ae:51:9e:09:04:66:d4:a8:f2:78:
69:01:9d:ed:f3:a2:dd:0b:83:b2:9d:c5:51:8b:82:
39:54:3e:6c:61:7a:87:ff:e8:71:22:c6:ba:7c:73:
20:48:61:ab:69:e2:99:49:90:45:69:4a:6a:43:e2:
76:d0:31:b9:aa:50:96:0c:4f:0c:3e:20:21:bd:df:
d8:3c:e7:bf:1e:90:72:72:2c:0a:16:99:8d:1b:2c:
17:4d:92:c7:e9:c4:13:14:29:3d:da:df:9d:44:33:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:49:14:60:4C:63:C6:50:88:6A:7F:4E:D0:36:93:6C:23:42:FA
X509v3 Authority Key Identifier:
keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/BVxJFGBMY8ZQiGp_TtA2k2wjQvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:30c0::/32
2a06:2600::/32
Signature Algorithm: sha256WithRSAEncryption
6e:67:f5:ff:1e:61:46:00:4a:64:a2:19:7a:06:fc:fa:ee:bc:
4c:35:54:89:2a:d8:dd:70:59:db:76:69:d9:59:18:2c:7c:3a:
e2:b4:e5:e7:a6:8e:3a:e5:77:2e:b5:5a:79:1f:18:a0:3e:1d:
27:a7:3e:af:d3:81:97:0a:30:b9:7d:02:ab:b8:7c:70:1b:8c:
d7:39:9b:aa:7f:2c:00:e3:4b:87:38:45:4a:cb:f1:9a:1d:a9:
4c:2d:2b:f2:90:1b:36:1c:01:4c:03:83:37:e3:46:6d:5f:4d:
d1:79:40:7a:26:49:83:9d:30:23:90:b4:95:3d:37:ca:aa:23:
cc:fd:1e:64:4e:5c:41:6e:24:ee:99:bd:ee:f7:89:21:71:f5:
e7:17:ca:c7:83:60:68:f7:50:13:4b:3c:ff:64:85:3c:41:c2:
ee:e2:e3:1b:ee:47:64:08:da:5b:60:6e:d2:a3:49:69:8a:15:
61:1c:3b:a7:4a:17:af:72:8b:6d:88:c5:e1:a4:38:0d:45:28:
28:90:d3:12:9e:6f:41:6c:fc:61:77:f0:89:5b:d2:e4:b0:ff:
2f:b0:00:69:32:a7:3e:35:cb:11:36:89:c7:47:37:d6:13:77:
c9:4c:6d:38:0f:12:57:dc:09:fa:8b:a0:6c:7a:9c:a8:26:78:
ba:d1:cb:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:04 2024 by rpki-client on console-ams.rpki-client.org