Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/bWAc6wj7g-EFOG9UfnfI_uo0-kU.roa
File: bWAc6wj7g-EFOG9UfnfI_uo0-kU.roa (raw, json)
Hash identifier: FP0P4ZJOTWxJS0HZUhhhqDxKTFr6NYZc+y4IQFB7GSI=
Subject key identifier: 6D:60:1C:EB:08:FB:83:E1:05:38:6F:54:7E:77:C8:FE:EA:34:FA:45
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 01857227F88BFC396E6E9FB8FDA508DCEF50
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/bWAc6wj7g-EFOG9UfnfI_uo0-kU.roa
Signing time: Mon 02 Jan 2023 11:05:00 +0000
ROA not before: Mon 02 Jan 2023 11:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201480
IP address blocks: 2a10:4646:250::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:f8:8b:fc:39:6e:6e:9f:b8:fd:a5:08:dc:ef:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 2 11:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d601ceb08fb83e105386f547e77c8feea34fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:44:f3:bf:f4:a6:4a:c5:d7:7f:fa:8e:19:
14:b1:30:d2:9e:cb:3a:04:5b:9b:25:74:ca:01:e8:
16:3c:0e:db:18:89:e7:6d:5c:31:81:82:08:41:a6:
32:61:5c:79:f8:61:a8:4c:82:92:4b:89:e5:09:cf:
c4:21:2f:13:99:0e:8e:5c:49:4b:cb:e0:26:b5:a7:
0c:ca:fd:56:06:be:b5:9a:b8:bd:39:70:a8:76:98:
ba:cc:1e:52:97:1b:51:1c:3c:1b:1f:4e:19:3e:b8:
6e:b5:e1:1c:d4:c6:b9:3f:e4:2a:81:63:07:47:fa:
df:09:87:f8:92:62:d8:72:48:17:b6:e3:75:cb:91:
d1:2b:fb:a9:a7:da:72:58:f3:44:c8:9a:45:98:55:
73:a3:08:4d:9b:69:95:2b:64:10:e8:29:98:ef:1d:
52:1f:e5:91:81:62:c5:3c:88:ab:62:8b:11:f7:36:
c2:a5:e1:ce:ae:66:95:d0:65:52:59:b6:b4:12:d8:
b4:f2:63:01:20:d0:83:ba:7e:5c:19:11:6d:99:a1:
5b:bd:82:58:e1:4e:18:00:89:da:80:ba:4c:75:a8:
23:b2:0b:10:e7:e5:2f:4f:58:e2:5b:0d:a3:fa:1c:
3c:da:88:44:bf:ae:33:d1:d8:42:37:32:91:ce:93:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:60:1C:EB:08:FB:83:E1:05:38:6F:54:7E:77:C8:FE:EA:34:FA:45
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/bWAc6wj7g-EFOG9UfnfI_uo0-kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:250::/44
Signature Algorithm: sha256WithRSAEncryption
6f:16:80:2e:44:72:d7:ba:bc:cb:03:69:42:82:ce:e7:b2:90:
9d:73:6f:c9:f2:fc:0f:7f:5b:47:26:d1:f9:a7:38:25:3a:a1:
b2:56:e4:80:68:27:82:9f:37:52:ff:28:e9:c3:95:25:78:65:
fa:9d:83:a8:8b:7a:26:a8:09:c9:dd:fd:4e:9e:b5:62:d1:88:
97:f8:e6:f5:e4:d8:4f:e7:9e:9c:90:36:05:49:f2:f9:d2:c0:
81:d8:32:05:30:36:3f:8b:74:b2:95:31:c3:b5:f9:05:bd:ae:
78:08:cd:9d:2a:4f:f6:03:2e:9c:3f:d7:9e:14:0c:af:7f:3f:
a8:fa:94:89:9d:1b:0b:11:6d:52:07:5f:53:b4:15:03:83:bb:
3f:35:8d:b6:f3:05:9a:bc:19:d1:7d:01:11:a8:83:78:1c:ee:
79:33:8d:f4:a6:fe:c4:54:09:30:b6:2d:e8:64:1f:93:7d:d9:
bb:5a:98:06:51:46:29:1c:9a:14:fd:3f:11:96:19:6f:d9:c8:
6f:a5:50:28:88:25:9f:1a:06:d9:46:7f:7b:68:5c:86:fa:64:
84:82:f2:51:49:f7:73:f1:1f:11:b7:03:79:5d:88:f4:5a:29:
aa:07:d0:65:ab:a7:19:47:f9:c4:71:68:54:2b:7b:97:57:ac:
db:3e:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:43 2024 by rpki-client on console-ams.rpki-client.org