Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-ae_tblPbb00-iG9GI59XGlXIFM.roa
File: 1-ae_tblPbb00-iG9GI59XGlXIFM.roa (raw, json)
Hash identifier: Vh+u+4HHk/oe+kihs61Aw9z8SdQlueTSo8wN3ENsz6A=
Subject key identifier: F9:A7:BF:B5:B9:4F:6D:BD:34:FA:21:BD:18:8E:7D:5C:69:57:20:53
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018DAD19BE4C98F8652F49406BB485DE5590
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-ae_tblPbb00-iG9GI59XGlXIFM.roa
Signing time: Thu 15 Feb 2024 14:09:21 +0000
ROA not before: Thu 15 Feb 2024 14:09:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215481
IP address blocks: 2a0c:b641:be0::/44 maxlen: 48
Validation: Failed, certificate revoked on Sun 24 Mar 2024 14:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:19:be:4c:98:f8:65:2f:49:40:6b:b4:85:de:55:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Feb 15 14:09:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9a7bfb5b94f6dbd34fa21bd188e7d5c69572053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:1a:f8:4d:f4:fe:50:85:b9:48:65:69:3b:
5a:0a:ab:c7:2d:a0:63:6e:a5:97:1e:0b:b0:e4:28:
ce:3d:d0:5a:8e:ca:57:8e:62:f6:57:87:28:0d:3d:
7e:95:93:d7:a3:32:af:ae:58:f9:da:ae:f3:1c:2f:
11:28:3a:c4:25:4a:74:bd:ab:65:d9:45:0d:40:3c:
7d:6d:65:33:b4:0e:8b:85:07:49:6a:00:69:8c:4d:
78:e8:68:68:29:2a:f8:a8:69:97:6c:d0:06:c2:d8:
2d:69:65:e0:77:23:e8:48:d4:ad:aa:e7:2f:7d:da:
e5:f8:fc:88:d2:fd:18:12:2a:d4:a0:0a:ca:50:d4:
66:a1:a5:88:73:f2:8b:89:cc:3f:69:75:fa:a6:ac:
d8:f9:f0:a5:0a:d6:55:87:f3:01:ba:76:c5:73:00:
41:11:09:4d:f4:4d:64:a3:37:e9:3c:ec:8a:fb:c5:
d8:52:ed:bf:a5:0a:59:97:3a:d6:5e:3a:33:06:b2:
5c:0d:28:a3:7c:3d:84:0f:53:2c:51:e5:9a:06:1e:
26:e3:dc:98:4f:77:82:aa:46:f4:c8:9b:98:67:a7:
60:04:13:c2:bd:25:58:e7:31:03:db:a2:b5:32:0b:
47:af:94:aa:3d:02:e4:12:6a:34:6a:a1:c4:95:86:
77:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A7:BF:B5:B9:4F:6D:BD:34:FA:21:BD:18:8E:7D:5C:69:57:20:53
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-ae_tblPbb00-iG9GI59XGlXIFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:be0::/44
Signature Algorithm: sha256WithRSAEncryption
5d:2c:a8:67:30:86:3d:bf:2d:cd:00:b1:96:ce:22:dd:4b:89:
7d:a8:cf:01:31:aa:99:cb:22:4c:f9:cc:87:7e:79:8a:a2:82:
78:a3:b4:81:d4:ec:a2:34:47:99:6c:3f:6a:1c:93:36:d5:fe:
f2:91:32:27:e3:1b:de:ed:04:ce:ca:90:f4:91:14:9b:17:c4:
c7:57:71:10:03:28:49:9d:81:bb:39:ab:dd:7c:4c:c6:be:21:
69:2c:b6:ec:1c:3f:82:3c:0d:75:02:32:19:a0:07:77:12:4f:
0f:a1:41:30:ed:71:40:df:6c:5f:6e:1a:c8:ce:53:b6:1a:54:
cf:3b:a8:65:22:7b:2f:2c:f7:b5:48:ee:1e:27:35:5b:cc:db:
93:8c:e8:f3:5e:78:ac:89:96:6b:19:1d:c9:7c:c4:c8:c8:c5:
96:18:c5:da:f1:e8:26:2c:31:65:a0:f4:e2:3a:22:67:3c:51:
66:6d:b3:3d:33:a6:d5:a2:b0:1f:10:7a:81:4f:1d:41:74:27:
f9:0a:6e:a9:fc:b5:af:b3:e7:2c:dc:19:15:7e:b3:f9:95:d9:
3e:78:af:56:6b:2e:3f:9f:b0:e6:90:dc:48:7b:23:6e:10:6f:
4d:0b:a1:f6:cf:49:4c:a9:23:68:15:fb:00:f7:a7:94:2b:64:
5a:4b:0c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org