Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BOzrrp4sb-J3Rkirfj8b8z5Ok34.roa
File: BOzrrp4sb-J3Rkirfj8b8z5Ok34.roa (raw, json)
Hash identifier: ztbSv9D439eoWRxP2tOjU3SjpM1+cz/IMDgK3gEV0ug=
Subject key identifier: 04:EC:EB:AE:9E:2C:6F:E2:77:46:48:AB:7E:3F:1B:F3:3E:4E:93:7E
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0188D7EB07D14B34BCCEA56D1C2A45AE7F8B
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BOzrrp4sb-J3Rkirfj8b8z5Ok34.roa
Signing time: Tue 20 Jun 2023 08:28:04 +0000
ROA not before: Tue 20 Jun 2023 08:28:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199705
IP address blocks: 2a0c:9a40:8210::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:eb:07:d1:4b:34:bc:ce:a5:6d:1c:2a:45:ae:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 20 08:28:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04ecebae9e2c6fe2774648ab7e3f1bf33e4e937e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:47:95:de:c4:27:1c:b8:92:47:c3:22:58:c1:
a6:c5:a2:39:a3:52:90:9d:fa:77:a1:15:f9:df:a3:
75:fc:3a:4f:3c:6c:9b:72:cc:10:ad:2b:02:8a:17:
8a:a0:52:39:94:6b:76:90:ae:53:41:74:d7:f0:fe:
01:39:37:cc:dc:5b:1b:ed:da:17:ee:8e:fb:e0:bd:
4d:94:17:16:13:ee:84:5e:49:94:cb:e4:62:86:b7:
22:2f:54:40:b7:59:67:7a:d3:b6:6b:97:3f:33:23:
e8:0c:ad:37:cd:5f:bf:20:a6:83:b2:a4:76:4f:34:
bc:ac:35:6b:bd:66:05:32:00:46:9a:4a:8a:1e:f5:
df:c4:fc:2c:5e:f0:3e:bb:34:e6:d7:d6:b9:79:a5:
d7:80:4f:56:dd:77:ff:bb:31:b5:35:83:27:3b:e0:
45:08:e3:b2:c5:15:58:4e:7c:51:72:e6:6f:12:75:
17:fd:42:b9:46:ce:55:76:00:49:00:1f:cf:2f:02:
e6:75:fc:e5:b1:e7:55:be:ca:74:f7:f9:c9:33:76:
00:2c:87:50:39:d1:40:9e:08:2b:c5:00:a5:69:1d:
5c:1c:ce:77:2b:8b:70:bd:b7:5e:72:54:2e:0f:46:
2f:81:ec:ae:58:0b:4d:eb:e1:5a:ad:3e:ab:a7:48:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:EB:AE:9E:2C:6F:E2:77:46:48:AB:7E:3F:1B:F3:3E:4E:93:7E
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BOzrrp4sb-J3Rkirfj8b8z5Ok34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8210::/44
Signature Algorithm: sha256WithRSAEncryption
1e:d7:ea:9a:96:9a:42:2e:8a:c0:31:06:ab:73:43:91:32:41:
36:8b:58:62:d8:23:ff:23:b6:37:44:9f:5a:5e:52:a5:33:b3:
b5:3f:92:ab:28:3f:38:63:1d:83:ac:1e:7f:64:d2:fa:84:22:
b5:09:43:fe:b4:df:4e:51:13:18:7a:f7:cb:1e:6b:51:b5:ba:
5e:6e:b3:34:20:99:37:ca:80:5f:d8:15:32:ff:8e:49:18:e4:
69:3b:71:fe:38:d2:c5:41:85:7c:67:51:90:10:eb:f6:99:80:
ce:ce:c5:35:94:12:3d:6b:45:4d:52:ea:f5:1c:48:c7:b9:40:
89:ad:64:0c:d3:df:71:87:f5:80:dc:76:1c:58:e7:89:f9:9d:
a5:90:08:18:26:72:90:ef:ad:13:6a:23:fd:45:17:69:59:f5:
14:52:b1:46:ac:33:72:f8:a1:3c:9d:ae:7f:cf:3e:89:0b:2f:
99:56:02:63:b5:d7:6d:b1:3e:17:fc:4d:7f:73:40:5b:27:5a:
d0:63:4f:6a:fe:25:8f:9e:fa:0c:1d:58:f5:5a:ab:f6:dc:11:
69:34:42:a0:9a:95:e4:b6:7c:2f:fb:74:83:8c:0f:f6:1a:31:
bb:e4:4c:0f:9a:46:05:17:eb:cb:b2:c3:5a:58:2c:3c:d4:90:
13:be:19:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:15 2024 by rpki-client on console-ams.rpki-client.org