Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa
File: 5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa (raw, json)
Hash identifier: YHBsqYbD5sUXgfQ5LymFlrFJcgfINJUvOOQg4f0fZ+g=
Subject key identifier: E5:FB:BA:66:8B:00:59:48:72:F0:CB:30:65:2C:D8:AB:90:A2:D5:D6
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E741B7771CABF36EE90D51F2E6B2F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa
Signing time: Mon 02 Jan 2023 06:14:59 +0000
ROA not before: Mon 02 Jan 2023 06:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210356
IP address blocks: 2a0c:b641:600::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:74:1b:77:71:ca:bf:36:ee:90:d5:1f:2e:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5fbba668b00594872f0cb30652cd8ab90a2d5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:ba:16:cf:8e:d4:1c:0f:a2:c3:f0:66:81:
e7:ef:b1:64:4c:12:4d:bf:9f:67:7b:10:98:f7:6e:
eb:37:17:1e:9d:69:b3:40:4e:d3:0a:eb:7d:a8:7e:
a5:4b:38:4d:d7:3d:0f:d5:31:d7:65:81:09:f1:8b:
fb:fc:0a:71:e5:4e:aa:e3:c6:70:4f:a2:db:de:41:
18:44:89:8d:83:d7:4a:a3:eb:26:1d:64:25:16:91:
9d:ca:f9:dc:89:89:9e:e9:f9:78:d8:59:a7:22:e2:
95:90:0f:95:5b:8f:e6:df:3d:77:c0:d1:d2:f0:e6:
cd:4f:c3:1a:c7:f6:71:a6:14:49:35:89:b0:36:ef:
d4:18:fb:70:04:ea:63:3e:2b:41:7c:ca:24:7f:42:
58:ec:0a:66:26:83:b9:b9:68:eb:7f:31:c9:8c:1b:
4c:e1:d8:e9:2f:7b:31:07:ab:55:bc:a7:aa:67:1d:
ce:28:3a:8c:b1:13:af:6f:65:4c:c2:ef:cd:76:2f:
d5:a8:29:64:12:58:73:62:2a:bd:7d:c9:3d:c1:1d:
8a:7a:8c:33:8f:78:55:b9:6b:07:63:29:7d:2e:c4:
fd:01:c7:2f:f4:e9:7a:26:a4:a8:0f:c9:e5:e0:8f:
56:1b:ff:cf:89:4d:06:29:95:52:6e:13:e0:06:21:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FB:BA:66:8B:00:59:48:72:F0:CB:30:65:2C:D8:AB:90:A2:D5:D6
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5fu6ZosAWUhy8MswZSzYq5Ci1dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:600::/44
Signature Algorithm: sha256WithRSAEncryption
21:ad:52:30:e8:21:9e:25:62:19:8e:79:2b:49:6c:59:2a:88:
0e:0e:ac:93:9b:08:bd:e8:df:24:45:cb:ba:55:41:17:32:a7:
69:a4:89:d0:00:bc:8d:d1:9d:c4:75:6d:ed:dc:1b:12:f8:31:
79:c5:a9:bf:97:54:91:2e:fb:b1:4e:f3:e3:0e:56:21:80:9c:
2e:05:77:57:71:7c:54:2d:7e:0b:46:b4:45:0d:5a:5b:01:75:
87:21:a2:27:76:21:2c:88:ac:0f:96:4c:d5:a8:0e:1f:9b:a2:
79:9f:78:55:1a:d3:2a:f5:aa:49:04:66:72:61:96:74:0d:b7:
f1:72:1f:2f:70:8d:9c:ff:c4:97:a9:4b:d9:e5:e9:55:4b:d0:
3d:42:25:a5:e8:62:22:12:f2:a9:3f:35:5f:5e:bb:36:ec:0c:
56:8d:2d:6c:34:3e:78:ba:14:8a:4b:94:d3:c7:8a:de:ed:b1:
30:a8:c2:fe:50:93:18:34:fa:81:bc:63:24:a3:b1:48:83:62:
3d:eb:e4:3d:d1:85:be:3b:4f:22:c5:f1:c3:62:3c:0e:00:1c:
74:66:a5:6b:31:42:55:69:1d:c4:e5:78:71:5e:a1:75:54:96:
f1:f1:17:8d:72:b8:d4:3a:f4:59:e3:28:fc:04:f3:ad:cd:10:
43:5e:5b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org