Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/01aLl7lBCi_rzQYZd1ciX7-HWkM.roa
File: 01aLl7lBCi_rzQYZd1ciX7-HWkM.roa (raw, json)
Hash identifier: boRq1rHmAr5k4wQ18xPpvdV5Gvq1WbkdAWX2lmK/8uY=
Subject key identifier: D3:56:8B:97:B9:41:0A:2F:EB:CD:06:19:77:57:22:5F:BF:87:5A:43
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E6A7A17CB008122B3EE431F3D849F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/01aLl7lBCi_rzQYZd1ciX7-HWkM.roa
Signing time: Mon 02 Jan 2023 06:14:56 +0000
ROA not before: Mon 02 Jan 2023 06:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209300
IP address blocks: 2a0c:b641:570::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:6a:7a:17:cb:00:81:22:b3:ee:43:1f:3d:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3568b97b9410a2febcd06197757225fbf875a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:35:35:49:af:93:d5:1b:b2:86:9c:f1:15:
8a:d1:7e:a2:f0:ca:8c:3b:3c:d1:c4:8f:09:ce:58:
9f:31:ea:ee:ea:2a:0a:e2:40:47:e3:8b:f5:46:55:
31:19:2c:99:bd:39:08:71:ad:15:c4:d5:41:7c:4f:
6b:6f:7b:ed:04:eb:0d:da:f8:e7:00:38:94:d1:5e:
5c:b1:7b:77:13:65:05:e9:b0:0f:57:0b:1a:42:16:
86:41:b5:97:24:8b:e3:b5:0b:99:90:08:0e:00:3d:
b0:81:ce:43:32:b0:e1:ad:29:5f:9b:54:d2:68:46:
2d:5e:ba:4f:a9:be:0b:60:23:c8:5a:10:9e:c1:ba:
ab:a8:73:2b:b3:4d:78:23:14:d2:2b:0f:99:90:7b:
1f:2b:7d:5c:da:15:57:e7:df:af:4e:45:a5:f3:aa:
74:86:3f:fc:20:f7:3f:84:cc:00:ea:94:31:43:4b:
ed:52:e0:35:5f:b1:22:43:72:c3:74:22:10:0d:f1:
32:4c:f8:a9:01:a3:98:29:6f:63:5f:1e:f0:81:b8:
9b:32:a6:b8:2e:4a:e9:08:ae:8f:2c:9e:1c:e1:2f:
d0:e4:70:ae:f9:ec:0c:eb:06:e4:05:3b:56:cb:75:
69:09:e8:d3:96:52:95:29:60:02:e2:18:e6:b7:3d:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:56:8B:97:B9:41:0A:2F:EB:CD:06:19:77:57:22:5F:BF:87:5A:43
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/01aLl7lBCi_rzQYZd1ciX7-HWkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:570::/44
Signature Algorithm: sha256WithRSAEncryption
27:14:ad:4a:d4:71:eb:84:0f:39:53:5a:03:d8:7a:ed:cd:df:
67:18:a5:8b:04:38:4f:90:c1:c7:d5:53:1a:a8:a3:88:ad:5f:
4f:e0:e2:7f:58:05:23:42:7c:94:d4:5a:5f:06:83:d8:82:7d:
85:60:57:cb:bf:00:36:b2:58:b5:ee:67:ae:2d:11:f8:f0:95:
90:f1:1a:0e:dd:52:60:7d:b8:97:16:58:6e:73:39:55:03:fa:
61:55:2f:c5:73:37:af:d4:11:d4:70:48:ae:cc:57:53:d6:3b:
4a:58:b9:a0:23:71:a7:5a:fa:70:95:27:31:5b:f8:17:76:4f:
7c:20:92:98:98:2c:10:67:d8:d1:a0:e3:be:f9:cd:d6:d3:55:
6b:a7:c7:27:b6:58:38:70:66:af:5f:9e:36:41:86:fa:1f:7c:
13:06:65:90:93:59:fc:15:f9:50:93:3f:9b:16:a6:40:e8:17:
ff:13:9e:f1:9c:65:77:c5:c2:79:78:e0:b6:d1:ab:67:d0:4e:
d4:12:d8:fe:7f:59:59:88:64:b0:52:bd:90:97:d0:c0:f8:0c:
a3:89:4a:67:00:8a:56:6e:90:bd:d6:41:f4:7e:46:68:a8:be:
ae:62:7a:f0:9c:e5:cd:bc:15:93:53:a9:9a:e1:3d:86:c3:de:
70:54:c3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org