Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-ycaDb9e13cT0VHN9qJEsTo6rnQ.roa
File: 1-ycaDb9e13cT0VHN9qJEsTo6rnQ.roa (raw, json)
Hash identifier: SdbAcSljgCJ4MmOxk6cW2iC+sf3ZGlR1AvPafKTVWWo=
Subject key identifier: FB:27:1A:0D:BF:5E:D7:77:13:D1:51:CD:F6:A2:44:B1:3A:3A:AE:74
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E61B3EDFD474A5C22E74BA2CB48B7
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-ycaDb9e13cT0VHN9qJEsTo6rnQ.roa
Signing time: Mon 02 Jan 2023 06:14:54 +0000
ROA not before: Mon 02 Jan 2023 06:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207466
IP address blocks: 2a0c:b641:680::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Feb 2023 18:47:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:61:b3:ed:fd:47:4a:5c:22:e7:4b:a2:cb:48:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb271a0dbf5ed77713d151cdf6a244b13a3aae74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f1:16:74:67:9c:82:df:02:75:57:f2:b4:ab:
d7:1c:35:a2:17:72:9e:33:86:e2:1d:81:b6:3c:5c:
94:92:a8:cd:8b:2d:f7:e5:41:86:c2:0a:b3:1a:ff:
c3:5e:80:c3:f6:d3:ab:03:53:d3:b8:ef:23:19:85:
ce:d8:fd:42:3d:d5:d7:e5:be:76:dd:0c:0b:05:19:
35:ae:5a:56:13:b8:40:1d:ac:c2:3a:6d:9d:ba:f0:
75:36:c1:70:5f:b3:fa:c2:be:b3:da:ad:d2:5b:c4:
42:f0:08:f9:42:f6:7a:2b:3b:5f:aa:bd:0f:37:6a:
38:85:31:ca:58:73:61:8f:cf:79:8b:e4:52:10:f4:
dd:e8:3f:48:67:eb:49:1e:80:27:a9:ac:1d:24:46:
9f:5f:67:fb:bc:58:9a:c1:19:06:e9:21:7f:ff:23:
93:56:02:6f:82:11:1f:30:fa:19:f8:4b:93:15:b6:
33:6c:7d:c0:9f:c9:15:1a:4f:d4:8f:5c:d7:ed:20:
17:9d:58:93:2e:df:92:b8:48:aa:8f:b8:98:98:ab:
08:68:20:78:09:c4:b5:b0:b8:a8:e8:0b:95:69:be:
22:0b:d7:72:19:ac:ca:e8:1b:36:81:20:fa:ad:56:
32:75:ff:cc:07:c5:2a:5a:03:14:1b:69:2a:ec:c9:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:27:1A:0D:BF:5E:D7:77:13:D1:51:CD:F6:A2:44:B1:3A:3A:AE:74
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/1-ycaDb9e13cT0VHN9qJEsTo6rnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:680::/44
Signature Algorithm: sha256WithRSAEncryption
8e:ef:bb:dc:70:19:84:3a:b4:97:c3:63:28:c5:8a:6f:b0:a7:
59:89:da:56:b9:b4:ad:ed:95:f7:aa:15:a3:82:ca:25:f2:e5:
89:e0:e1:4c:35:72:ec:be:8c:d6:92:f5:aa:a3:fd:7e:5c:fd:
d7:14:38:11:9f:41:67:70:c4:e5:ac:4f:c6:ae:61:2b:ad:90:
aa:db:3c:10:02:ae:31:aa:47:65:39:46:26:0f:e8:0e:b7:d0:
89:5d:c4:ca:fe:67:16:f6:98:88:d3:5c:6f:56:3c:39:02:61:
75:ac:49:93:c5:8d:7e:78:bd:cc:9e:8b:49:8e:95:40:4b:28:
8c:aa:6e:94:4c:20:a7:2c:11:a9:f7:4f:aa:1d:28:80:a4:07:
67:85:ae:71:ca:bf:5a:ef:ef:a4:8d:84:47:ae:44:a1:bc:c0:
4c:0f:5e:58:fb:de:3d:c5:05:5e:c8:7e:0b:1d:e9:c3:f6:5a:
52:71:01:05:9d:1f:1e:ea:89:14:e8:4f:77:d9:d2:6e:6c:a8:
51:d5:ed:b2:41:80:5d:a1:6d:b0:d7:3c:6b:53:90:64:97:33:
9c:1b:33:b3:99:ef:38:7a:44:63:5e:77:c6:fb:7b:65:4a:52:
77:07:3b:2b:e0:ad:3d:f2:64:06:d2:ca:6f:8f:4e:2a:f0:47:
a1:3f:66:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org