Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ANVrFRxH9t0A0R1m90TRc8dpclA.roa
File: ANVrFRxH9t0A0R1m90TRc8dpclA.roa (raw, json)
Hash identifier: ZJRxiwqiHdgpNkVVhw2w/caFZzrRV87/Ukmo9Ni/BYo=
Subject key identifier: 00:D5:6B:15:1C:47:F6:DD:00:D1:1D:66:F7:44:D1:73:C7:69:72:50
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E62AAF98162A2BF5A42EAE97BDEBA
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ANVrFRxH9t0A0R1m90TRc8dpclA.roa
Signing time: Mon 02 Jan 2023 06:14:54 +0000
ROA not before: Mon 02 Jan 2023 06:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207759
IP address blocks: 2a0c:b641:20::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:62:aa:f9:81:62:a2:bf:5a:42:ea:e9:7b:de:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00d56b151c47f6dd00d11d66f744d173c7697250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5a:be:f4:5b:ab:a1:43:8d:68:fd:93:45:31:
63:01:15:07:15:52:3b:3b:e2:f5:fd:09:cb:78:08:
3c:31:a8:de:d9:d2:0b:b3:53:b3:94:c2:da:8c:38:
13:75:3f:98:29:c3:68:3f:04:aa:7a:99:30:1b:d4:
d3:19:ea:6c:9c:f5:04:d6:46:fc:e6:1f:23:93:5a:
2f:ab:fa:d9:7d:80:36:a2:bc:cb:54:ee:0a:38:89:
c3:8c:7e:c1:ab:45:d4:93:46:9c:e9:1d:56:d2:19:
31:4e:41:59:8e:6f:4b:d0:a7:be:5c:3f:3f:7f:91:
aa:d5:74:68:90:69:29:80:05:96:86:8d:f0:da:18:
96:f4:96:e7:5f:d4:06:65:11:80:bb:8b:5e:d1:87:
38:d5:3d:19:86:52:46:9a:90:8d:8e:6b:07:f9:9a:
87:26:74:50:d4:72:17:8a:25:2f:52:31:9c:28:d9:
55:f4:fc:ef:b7:76:16:2f:c7:95:a8:e5:88:16:aa:
92:af:21:7a:22:dc:4e:f9:e3:23:a4:77:dc:c3:06:
a3:8e:cb:c1:c3:68:c6:0e:1c:7a:02:1f:f5:b8:90:
55:fa:39:8d:30:10:03:01:3d:b7:83:28:fc:aa:3a:
5b:26:43:64:c0:5e:77:1b:dd:94:73:c6:9c:17:59:
12:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D5:6B:15:1C:47:F6:DD:00:D1:1D:66:F7:44:D1:73:C7:69:72:50
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ANVrFRxH9t0A0R1m90TRc8dpclA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:20::/44
Signature Algorithm: sha256WithRSAEncryption
37:e3:91:f4:91:8d:81:db:1f:e8:ed:ce:7e:8a:21:e0:0d:b1:
c9:e3:f5:a7:83:3c:8d:3e:fb:07:ac:81:4b:c2:6c:3f:d2:38:
8a:9d:96:45:29:66:61:2c:d7:98:30:f1:59:4b:7b:e0:cc:d0:
6b:37:a3:72:40:ca:2b:1a:62:ce:37:b4:52:7d:10:5b:db:52:
e6:9b:06:39:0b:a0:39:77:40:2a:64:1e:0a:b5:dd:a4:95:76:
04:37:20:d4:98:b2:6c:cf:d6:77:70:32:80:74:e6:91:8b:74:
9d:d1:94:78:6b:5c:1e:49:bb:6d:6d:c7:f9:d6:0d:9f:9d:e8:
f9:bb:0e:2e:b3:5d:66:1d:90:73:6c:3c:3d:7f:e8:e4:9f:37:
27:86:ab:a5:fe:e7:5b:da:eb:72:e0:26:4f:a9:8a:8d:2b:bf:
3f:b0:a6:a5:75:b2:dd:77:61:2c:fd:75:7e:7f:6d:b7:5a:ad:
0d:7f:5a:15:a8:cf:2c:86:1e:90:27:9e:09:5f:0d:47:fe:30:
69:56:bc:94:88:b9:71:23:ce:15:51:25:f1:b9:a0:54:1b:8d:
58:f3:7a:d2:68:0d:83:7d:48:e2:87:d9:45:a4:d0:26:49:90:
71:fe:cb:50:84:fe:ac:47:84:d2:6d:41:8f:4e:fa:10:10:3e:
de:e7:21:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org