Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8SgEpdCabLW_LtwFdmfYt58pmok.roa
File: 8SgEpdCabLW_LtwFdmfYt58pmok.roa (raw, json)
Hash identifier: uKuevgUGQVFCrnTVSxwUhBQWN8W4RlOZORr1MobnybM=
Subject key identifier: F1:28:04:A5:D0:9A:6C:B5:BF:2E:DC:05:76:67:D8:B7:9F:29:9A:89
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E40A17FA618B1B4AE2DD047677527
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8SgEpdCabLW_LtwFdmfYt58pmok.roa
Signing time: Mon 02 Jan 2023 06:14:45 +0000
ROA not before: Mon 02 Jan 2023 06:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49367
IP address blocks: 2a0c:b642:1a05::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:40:a1:7f:a6:18:b1:b4:ae:2d:d0:47:67:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f12804a5d09a6cb5bf2edc057667d8b79f299a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0c:99:74:0a:cc:98:15:6f:92:b8:10:e1:f5:
56:5a:3f:de:a2:49:63:da:0c:ea:77:86:75:d3:6f:
f7:de:23:33:5e:a5:3d:ad:4f:c5:5b:00:ea:1e:bf:
53:36:63:85:61:7e:40:cc:20:1b:84:bb:4f:0c:13:
51:19:b2:16:16:bc:23:26:01:89:2b:bb:ef:ed:ff:
c7:a6:21:ab:b4:95:18:c8:55:b5:7e:cc:ab:4a:a0:
5e:d7:26:be:68:06:33:cb:a3:65:5a:ef:20:1c:bd:
31:34:89:10:c5:5b:b1:22:ec:41:87:2c:f1:e2:b1:
94:a7:66:4a:7f:94:d7:9a:af:9d:84:bc:fe:dc:bb:
0a:34:ca:c9:a9:6e:19:8c:37:07:9d:06:ab:5f:3d:
94:a4:73:69:cc:aa:59:4d:ec:a0:47:60:45:0c:f9:
58:97:ba:9e:56:54:1f:3c:c9:7f:e7:07:cb:ae:ef:
a5:d2:6c:03:0f:8c:ab:18:73:f2:85:fe:96:90:13:
59:ee:b6:fc:08:1e:f0:f0:79:e8:fd:b7:3d:e9:5b:
ed:a8:15:16:c9:e7:77:94:a3:7d:7c:c5:82:08:86:
30:c2:d9:de:c1:82:b2:ba:0f:52:11:38:e0:12:8b:
62:f0:3e:c5:7e:5d:03:5a:b6:8d:16:89:e8:96:c0:
a2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:28:04:A5:D0:9A:6C:B5:BF:2E:DC:05:76:67:D8:B7:9F:29:9A:89
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/8SgEpdCabLW_LtwFdmfYt58pmok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642:1a05::/48
Signature Algorithm: sha256WithRSAEncryption
5f:6e:8e:10:ca:1e:5c:33:d6:70:31:67:28:7a:38:6a:36:db:
6a:7b:44:99:88:97:99:27:17:85:ad:92:15:c5:d0:9e:94:6c:
b5:a9:d7:a8:ac:b0:b1:8c:9e:e6:95:f7:84:28:bf:31:d6:0b:
d2:fd:2f:a6:5e:00:0c:a6:66:fb:ec:f1:4f:5e:7f:18:62:f4:
ad:11:57:f2:9c:e5:3f:e8:3a:23:5f:ba:0b:7d:ac:c1:a3:90:
fa:79:95:f7:21:29:74:a0:08:e3:c2:a3:8d:25:42:c5:5e:39:
27:83:1a:2a:24:db:05:82:d1:d6:2c:50:df:65:19:de:ff:22:
3a:c1:61:1c:05:89:d2:78:79:25:0e:e4:fb:50:0f:e0:83:9e:
28:11:f9:e3:e0:c6:22:dc:f7:b8:56:1b:56:f5:74:38:a0:d7:
2a:a7:40:a8:2a:cf:a1:31:81:56:58:f8:d3:57:33:e5:f2:1e:
7a:ee:51:a5:27:af:5d:54:a8:e4:b2:af:a5:57:29:3e:31:40:
59:67:f9:34:92:77:83:9e:d0:31:c9:69:65:fd:0a:54:13:1d:
6c:57:8e:ab:cc:e5:8e:9b:01:83:d6:c4:52:5a:e3:d5:1a:cb:
20:13:d7:b0:ba:c5:52:e7:a2:c2:04:6b:99:2a:5b:3e:87:07:
1f:66:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org