Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bV9ooilWruQVHb51Ra2wgdlwag8.roa
File: bV9ooilWruQVHb51Ra2wgdlwag8.roa (raw, json)
Hash identifier: o2rwH79UTdsoq/F0qph0Y46JyUAMK5qpPzJdzRPBR6k=
Subject key identifier: 6D:5F:68:A2:29:56:AE:E4:15:1D:BE:75:45:AD:B0:81:D9:70:6A:0F
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01903996112E9BB8C64CD0954AEA63EF5B8D
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bV9ooilWruQVHb51Ra2wgdlwag8.roa
Signing time: Fri 21 Jun 2024 06:57:34 +0000
ROA not before: Fri 21 Jun 2024 06:57:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 2a06:b3c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Jul 2024 14:54:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:96:11:2e:9b:b8:c6:4c:d0:95:4a:ea:63:ef:5b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 21 06:57:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d5f68a22956aee4151dbe7545adb081d9706a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e5:46:66:e6:00:a5:e6:52:77:ab:2a:fa:8c:
3a:c6:d7:35:68:f7:0f:9f:8c:7e:33:d9:05:5a:ee:
58:d2:ea:81:2d:e6:36:c7:d4:b0:ce:26:64:17:13:
e4:e7:50:ed:f1:b0:1b:82:44:95:a1:64:41:0f:e2:
71:1e:ea:34:8c:a0:c3:26:05:2a:3d:30:34:9a:22:
9c:00:54:1d:d1:3b:47:98:59:44:1f:22:03:f4:c6:
76:e2:de:0b:42:32:83:d2:ad:c1:fe:ba:7d:33:85:
c5:57:8a:06:08:54:97:72:1e:bc:93:e5:03:5f:6d:
d7:70:51:54:10:be:58:07:ff:58:ec:cc:e4:b4:7b:
6f:b6:7b:ff:81:13:5a:c6:ca:a1:cc:45:f0:cf:15:
f7:c2:b8:46:4a:29:97:67:95:a9:9e:4c:b8:77:82:
8a:04:0a:b9:7f:a0:aa:95:ac:1b:72:28:95:e5:ca:
bf:7f:8e:c6:bc:da:29:93:66:03:ef:12:74:05:79:
80:2a:94:cf:70:f2:68:04:2c:00:91:99:49:b3:7d:
4e:a0:09:ba:05:7d:8a:f1:4f:51:e0:c9:f1:26:7f:
96:07:f8:34:d0:f9:b7:bc:fa:4f:4e:e0:84:9f:22:
3f:83:6d:c8:ab:c1:ac:a6:6a:7e:df:ae:c7:6d:e9:
47:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5F:68:A2:29:56:AE:E4:15:1D:BE:75:45:AD:B0:81:D9:70:6A:0F
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bV9ooilWruQVHb51Ra2wgdlwag8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
c1:ee:2e:8e:66:b2:06:ef:e6:86:1f:57:97:08:28:6d:ca:73:
14:68:59:86:1a:d7:87:7d:9e:b5:0d:1d:41:59:18:86:07:47:
74:09:57:01:cc:69:fd:6e:8b:3f:c7:8d:1e:51:fd:49:ee:f2:
74:10:ac:4b:c7:39:50:52:df:7b:b5:e5:5e:22:fa:92:75:74:
c4:72:6d:ce:98:37:71:a7:ef:b7:0f:ee:5e:d5:93:db:57:a5:
2d:72:97:be:ed:d8:c5:6b:ee:f2:ed:d5:e6:42:d5:5b:7d:8c:
26:f0:60:92:68:a8:51:18:8b:9a:f8:88:1b:ec:98:48:d6:69:
c3:18:d0:e1:25:ba:63:56:cc:f3:53:2b:e6:3c:63:09:65:c9:
e9:15:0d:86:bf:4f:22:18:7d:c9:18:d5:0b:87:29:90:f4:e0:
5a:f8:07:af:ad:ee:20:87:c0:b1:81:44:1c:77:37:e8:df:66:
dc:29:29:b8:1b:06:3b:22:6a:02:b2:30:a8:28:3f:e3:a3:c3:
74:ff:d9:d6:8f:0a:12:0e:d6:5c:e6:f0:77:40:45:51:1c:c0:
b9:71:83:41:75:c4:ca:fa:48:ba:20:fb:42:92:98:d7:30:0b:
48:c8:a7:0b:50:43:67:f1:bb:eb:ef:4b:f8:ad:5b:06:84:63:
6e:c2:d2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 17:58:36 2024 by rpki-client on console-fra.rpki-client.org