Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/34iEhfJNv0dS0vxke3vAmEGewRA.roa
File: 34iEhfJNv0dS0vxke3vAmEGewRA.roa (raw, json)
Hash identifier: D0n5gnlgWCcxh0Y3/MldvWOrAahQ5YVxgOGzFQlUqaw=
Subject key identifier: DF:88:84:85:F2:4D:BF:47:52:D2:FC:64:7B:7B:C0:98:41:9E:C1:10
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E88987BD5368593114A295918D98A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/34iEhfJNv0dS0vxke3vAmEGewRA.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212424
IP address blocks: 2a0c:b641:2f0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:88:98:7b:d5:36:85:93:11:4a:29:59:18:d9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df888485f24dbf4752d2fc647b7bc098419ec110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:ad:93:59:d7:47:83:41:f9:b4:7c:88:b0:
2c:03:5d:b1:2d:f0:9b:6d:7d:f9:a1:99:a8:b5:c6:
d9:43:01:ac:a6:c9:91:0d:ec:97:bd:ba:5a:51:2e:
09:20:6a:8e:61:fe:36:af:e6:02:9b:4e:ba:81:87:
95:1c:e7:a5:a4:28:83:8c:0f:7b:78:fa:db:22:7a:
57:cf:2d:eb:f2:06:9c:97:89:6f:08:03:b6:dc:d4:
49:6e:b2:39:80:9e:e0:07:c7:96:45:e1:75:56:b5:
39:be:5a:64:44:3c:79:6e:f4:60:23:0b:0e:6d:84:
81:a0:d4:d0:6b:3f:22:88:04:39:bb:9f:52:73:11:
46:d1:e9:94:bd:ba:10:ea:37:7f:c5:9d:cb:a7:d6:
09:04:9a:64:d5:4b:67:1b:52:d9:4b:11:55:ae:02:
94:f2:2e:1d:b9:fc:1d:bd:39:29:ed:e1:bb:c7:c2:
f4:e9:17:8d:c0:d7:1c:8f:e7:72:b7:99:34:7d:38:
eb:e8:d5:3d:d0:e1:db:8f:1e:8a:71:3c:df:6f:53:
df:32:58:05:4d:b6:7b:27:77:25:e9:52:e8:1d:2d:
ed:03:17:64:14:20:25:2e:85:61:8b:78:17:07:f9:
5c:18:20:1f:6a:4f:f0:e5:41:b5:ba:27:ea:cb:54:
43:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:84:85:F2:4D:BF:47:52:D2:FC:64:7B:7B:C0:98:41:9E:C1:10
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/34iEhfJNv0dS0vxke3vAmEGewRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2f0::/44
Signature Algorithm: sha256WithRSAEncryption
31:a4:da:82:f5:b5:20:ee:08:8d:9a:d3:07:5d:f5:4a:71:d3:
a4:08:08:43:6e:de:2d:5d:5a:2f:5d:7a:2f:b2:ae:f8:eb:c8:
dc:67:6f:93:5b:d0:3f:7f:ec:a2:81:6c:a0:ff:e7:84:7e:e0:
d0:6f:73:27:1d:05:eb:ce:a0:c9:5d:83:88:96:9d:1c:30:bb:
71:ef:73:63:99:04:7e:61:ef:3f:6e:5d:27:cf:50:1d:6b:f1:
12:12:ba:6c:8c:ab:d3:39:54:dc:e1:32:d9:bf:97:74:65:95:
a6:5a:89:7a:41:55:46:75:b8:48:47:ae:5f:22:d2:21:13:15:
30:91:e7:64:07:ed:10:4b:4b:d9:3e:ba:38:49:c7:0b:09:d7:
97:8e:78:68:7a:09:a0:46:69:9a:ac:73:4f:c0:e1:00:5d:41:
71:7f:fc:1c:71:9d:ee:7c:49:54:8d:6c:89:5c:f2:b7:a7:04:
d1:25:5f:45:ea:85:71:40:32:15:9c:9c:03:6d:49:ac:86:7d:
80:dd:f1:0b:4b:af:e5:6e:00:86:a7:db:c6:f6:f9:b4:a6:67:
b3:84:b1:fd:dc:a0:1d:4b:45:ea:f3:8a:16:f6:fa:d0:70:80:
58:86:61:a2:98:c6:fc:af:62:be:5b:08:01:2d:91:74:02:20:
cc:b0:4c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org