Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Bupb1wKrLQE7htVvPFY-bZuMPAU.roa
File: Bupb1wKrLQE7htVvPFY-bZuMPAU.roa (raw, json)
Hash identifier: PpuuydqL/Ck6a441ifB2wqy+VrOZAYm2T+5Iy0RVYtA=
Subject key identifier: 06:EA:5B:D7:02:AB:2D:01:3B:86:D5:6F:3C:56:3E:6D:9B:8C:3C:05
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42D3BE819542F0DD2C91CDBF72EE87
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Bupb1wKrLQE7htVvPFY-bZuMPAU.roa
Signing time: Sun 01 Jan 2023 21:35:28 +0000
ROA not before: Sun 01 Jan 2023 21:35:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207898
IP address blocks: 2a0e:8f02:f03e::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d3:be:81:95:42:f0:dd:2c:91:cd:bf:72:ee:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06ea5bd702ab2d013b86d56f3c563e6d9b8c3c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:01:fd:74:e3:8a:af:f4:55:98:0b:51:47:
74:ec:eb:16:b3:ef:b6:91:76:5b:ef:ed:e5:14:dd:
32:ab:df:e1:f6:b8:5f:48:31:74:7f:0f:ec:22:50:
55:11:04:31:1b:fe:75:80:d6:eb:9a:c0:cb:fe:38:
49:03:06:d8:92:3a:74:a0:ad:90:15:b7:28:5d:da:
f8:6d:25:0a:24:3f:7a:31:9a:7f:09:67:2a:19:98:
2f:78:da:83:80:9c:ab:f1:7e:6e:db:d7:6b:1b:2b:
76:e8:14:31:97:4e:e5:27:45:ed:5f:08:f6:54:2a:
8e:2c:e6:74:fc:e7:b9:f6:b7:f2:f2:71:3c:eb:3b:
06:e6:97:9c:1e:c6:d7:e6:ed:94:be:8d:50:c2:a1:
3f:00:1d:6a:25:8e:84:6d:95:35:a6:13:d5:fd:da:
fd:79:a5:39:82:5a:48:32:10:84:74:39:55:5e:ba:
8a:1a:a0:d7:9a:ca:5b:fe:de:de:6c:33:68:9a:77:
80:71:9e:eb:90:e1:5b:5d:d4:31:cb:eb:7f:69:41:
78:5f:fa:ca:8e:a8:25:5a:7a:0d:62:94:24:f8:e1:
cf:68:21:b9:61:91:7c:84:c0:ef:aa:ef:2c:8b:51:
38:69:c9:45:46:24:3b:13:55:43:8c:14:d6:05:93:
7d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EA:5B:D7:02:AB:2D:01:3B:86:D5:6F:3C:56:3E:6D:9B:8C:3C:05
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Bupb1wKrLQE7htVvPFY-bZuMPAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f03e::/48
Signature Algorithm: sha256WithRSAEncryption
92:56:bd:5c:6b:ef:72:89:a4:3c:e5:6b:2f:f2:d5:90:67:1c:
50:9f:fd:54:ed:c7:6c:42:fe:30:81:d2:82:e5:af:86:94:b7:
96:c5:11:12:86:7a:f9:18:80:9e:fe:86:08:3c:d6:0a:97:bb:
02:ab:23:9d:96:e6:c1:a3:ee:1c:30:a7:58:55:2a:af:64:b5:
ed:79:67:b6:57:d8:78:87:5b:7d:7b:9a:7b:8d:66:bc:a4:85:
1a:2a:7f:62:f1:4c:6d:58:bd:fe:8a:80:95:f2:68:d3:d4:e0:
c7:e6:f6:70:ee:ae:39:24:79:07:2f:13:15:80:fd:e1:f2:16:
26:85:e2:a9:fa:51:53:ba:67:56:81:72:d8:c1:81:24:9f:9d:
ae:6d:a9:ed:3c:03:2b:b0:e5:d7:c0:23:7e:50:7e:c7:5a:86:
4b:a7:b7:4a:77:2a:e7:dd:36:60:4b:fc:bd:23:6c:2b:64:aa:
4b:d1:6a:af:83:b4:48:b2:92:0c:84:49:c3:1d:72:84:62:12:
8b:c7:51:f9:c5:0f:de:18:5f:26:8b:4d:e6:a6:ae:54:c5:63:
98:e0:d6:af:70:a3:75:c1:1d:75:5a:55:d0:10:dc:bb:1f:99:
ea:ef:ce:e9:88:8b:cf:c9:82:ea:aa:7f:c5:06:5a:31:05:fc:
22:09:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:00 2024 by rpki-client on console-ams.rpki-client.org