Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5pFBYRgt6rhs-RtQcAi2SlEwKaw.roa
File: 5pFBYRgt6rhs-RtQcAi2SlEwKaw.roa (raw, json)
Hash identifier: HPI2lmSkXpwYhb5Kf1IDdIlTxcuYCnEgQjW8sLs7SM0=
Subject key identifier: E6:91:41:61:18:2D:EA:B8:6C:F9:1B:50:70:08:B6:4A:51:30:29:AC
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E57DBC09902B1B4DEA087C71650B6
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5pFBYRgt6rhs-RtQcAi2SlEwKaw.roa
Signing time: Mon 02 Jan 2023 06:14:52 +0000
ROA not before: Mon 02 Jan 2023 06:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206336
IP address blocks: 2a0c:b641:850::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Jun 2023 19:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:57:db:c0:99:02:b1:b4:de:a0:87:c7:16:50:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6914161182deab86cf91b507008b64a513029ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:45:98:08:72:e6:b6:ca:fd:76:18:71:59:04:
77:39:a3:b0:01:d3:c8:34:30:ad:20:43:20:c8:ea:
9f:a1:29:9f:f8:5e:d9:d8:a1:05:35:0a:07:0a:09:
80:ed:95:62:18:7b:d5:0a:6e:95:be:a7:ef:b2:36:
5a:b7:d4:0c:c3:d7:83:02:ba:ac:28:ca:9f:8e:d1:
d4:5f:e9:35:85:2c:65:99:4f:40:66:b4:c1:52:a2:
db:42:57:94:21:a8:74:cd:12:a4:b6:9f:69:34:d2:
aa:81:2f:a2:44:8f:d6:fc:00:0f:fe:ec:23:5b:e4:
a9:1e:bf:bd:68:de:03:b6:7e:6d:aa:b3:ef:2b:86:
52:a6:d3:28:54:07:8f:1b:a2:71:2f:5e:a6:0f:cd:
a1:fb:1c:ea:5b:b4:15:99:23:27:4c:62:54:83:47:
02:4f:c6:86:e8:d5:0c:4e:80:fc:d8:be:1e:b6:4a:
67:a7:3c:8a:41:f6:26:bd:e8:98:4e:f8:cc:e8:6b:
50:a7:50:6c:29:77:10:5f:9f:6a:9c:13:1a:d7:3c:
eb:85:8b:1d:1f:77:5f:d7:9a:48:56:84:16:93:d8:
44:c5:d5:48:83:be:c5:a8:a6:09:80:d6:22:ab:fc:
b2:4e:9a:21:6e:b7:7e:d5:c1:7b:2b:87:e6:e6:b2:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:91:41:61:18:2D:EA:B8:6C:F9:1B:50:70:08:B6:4A:51:30:29:AC
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/5pFBYRgt6rhs-RtQcAi2SlEwKaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:850::/44
Signature Algorithm: sha256WithRSAEncryption
34:a2:1e:bd:92:c1:17:ad:81:1d:08:b4:57:4a:b7:ca:f4:c9:
62:ab:3a:e4:fa:ba:15:d0:e0:9c:cb:ac:e3:58:01:02:5f:4d:
aa:9c:fc:78:16:bd:0c:3c:ec:7a:28:76:5a:c9:1b:37:6f:ed:
e4:56:e7:50:54:05:44:ec:1d:2c:4a:72:d8:93:a1:f8:06:d6:
50:c3:ec:d1:1b:db:69:1b:fe:36:b1:c6:11:8b:e5:69:01:42:
9c:18:1d:fc:15:9a:09:a2:a9:5c:b5:7a:e8:e8:f7:a1:9d:c5:
17:26:99:65:f8:86:0e:75:65:b6:a4:fc:56:d1:e3:b0:90:89:
97:97:a2:96:b8:88:46:73:b3:c7:4d:09:ed:ad:b6:2a:df:6b:
a3:28:9b:06:9f:6f:3b:70:82:7e:87:cc:ab:4d:03:bd:0b:ff:
b8:e9:cf:fa:83:bc:10:d2:ca:34:fe:75:c5:50:95:6e:f3:96:
75:77:8f:bd:a3:74:26:97:8e:03:81:75:be:8f:d4:79:d9:73:
10:7e:33:15:70:53:57:d1:6d:b3:12:39:06:65:9b:58:27:c3:
70:e1:3c:7a:d6:e5:ca:d1:84:0e:6e:7f:59:8f:dd:81:17:51:
b1:eb:05:08:a6:33:8d:a7:3f:1a:b4:43:e5:b4:73:0d:d4:be:
9e:f7:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org