Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/B1MFFwA0IiyzQeVGXpswnzBs0Ns.roa
File: B1MFFwA0IiyzQeVGXpswnzBs0Ns.roa (raw, json)
Hash identifier: GxSv0I/pJXzh1nrUzPh50MwALo+uWog3AB6iudxmMoE=
Subject key identifier: 07:53:05:17:00:34:22:2C:B3:41:E5:46:5E:9B:30:9F:30:6C:D0:DB
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 018CC34943B477CA9DF68785B15159FD8F02
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/B1MFFwA0IiyzQeVGXpswnzBs0Ns.roa
Signing time: Mon 01 Jan 2024 04:30:07 +0000
ROA not before: Mon 01 Jan 2024 04:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 2001:67c:12d4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 May 2024 20:54:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:43:b4:77:ca:9d:f6:87:85:b1:51:59:fd:8f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jan 1 04:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=075305170034222cb341e5465e9b309f306cd0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:91:41:d5:99:fe:7e:46:fb:9f:5f:ad:99:
5b:05:cc:ab:fb:0c:b6:2e:27:3d:d3:30:5d:a3:16:
86:46:49:30:1b:ca:95:b6:cf:5f:22:e8:61:34:95:
49:e9:7a:17:ea:33:c3:81:61:fe:b1:52:26:cf:e6:
30:72:50:02:28:ca:4f:16:31:78:58:10:fe:51:35:
ef:fb:98:13:24:c7:dc:40:e8:ea:65:e4:2a:72:f4:
cf:e4:51:41:56:7c:04:e7:01:8a:1f:73:3a:23:fb:
04:8a:7a:c4:18:86:eb:d2:30:a9:96:0c:3d:5b:a2:
b1:fd:82:f4:fe:ad:22:25:e6:7b:4d:6d:40:81:59:
3e:bd:ad:3a:b2:d8:1d:83:c1:76:c3:37:26:80:68:
fd:d8:cc:fe:b6:58:40:53:c1:4c:6b:6d:57:f9:a7:
f6:f4:50:7e:af:5c:f5:85:d3:d1:95:d2:d7:12:42:
3f:51:bc:be:cb:9a:4f:2f:28:a0:d6:57:26:a4:5c:
f4:cc:13:fa:08:7d:ee:39:30:65:43:4e:ab:4f:30:
b8:85:78:28:7f:58:b7:60:44:b7:54:d3:35:c2:7d:
24:67:50:d5:13:e7:c6:88:ca:68:b2:50:c1:40:d3:
d9:b1:f5:60:37:61:77:7f:b0:86:e1:00:7a:4a:c9:
23:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:53:05:17:00:34:22:2C:B3:41:E5:46:5E:9B:30:9F:30:6C:D0:DB
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/B1MFFwA0IiyzQeVGXpswnzBs0Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12d4::/48
Signature Algorithm: sha256WithRSAEncryption
2f:5a:cb:e3:50:81:2e:0f:fa:9f:f5:c2:6e:90:45:9d:02:91:
b7:c5:9f:ca:02:87:94:04:3f:67:43:cb:20:51:49:dc:d2:0b:
3a:5c:19:b0:d2:0a:b9:99:15:b9:80:3e:90:37:76:9e:3e:cb:
66:2c:d5:4e:d2:c1:9f:70:64:14:36:38:ff:4c:1f:b5:1d:5b:
14:f7:1b:06:82:2c:af:a1:1d:6e:18:0e:57:7e:54:14:b0:65:
01:4c:dd:2b:80:6e:dc:52:3a:23:f3:77:c5:13:ae:58:80:7d:
f4:f2:b4:d5:62:f9:ea:ab:30:6e:e7:ab:a2:f1:ed:1d:92:7c:
ad:c5:b9:e5:f9:48:50:cb:6e:14:f6:9a:a4:cb:83:39:ae:bc:
1b:ec:31:bb:3c:5a:a3:11:57:d0:6b:f1:56:e4:4f:78:4e:cb:
ba:f2:cf:b3:a3:48:04:c3:41:8f:f2:b4:ed:4e:c9:79:cc:bc:
80:03:62:8e:1b:6e:28:31:cf:01:e3:25:f5:74:87:66:30:3a:
15:3d:8a:96:c7:c0:d5:b9:8f:e9:f0:b0:20:52:56:50:af:cc:
1e:a1:41:b8:d4:b3:bb:ef:56:8a:7c:9c:f3:8b:b5:c4:39:8e:
4b:07:0f:cd:a8:13:f3:51:a9:be:95:2c:f2:04:b8:ac:2f:aa:
5a:7f:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:48:34 2024 by rpki-client on console-fra.rpki-client.org