Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BXYmpVT9vD1kR9kE_4q2G2gWBIg.roa
File: BXYmpVT9vD1kR9kE_4q2G2gWBIg.roa (raw, json)
Hash identifier: 79eRJvAqb1C5ecYayjYEsYJH6i60eJz5S26oBl8z/4g=
Subject key identifier: 05:76:26:A5:54:FD:BC:3D:64:47:D9:04:FF:8A:B6:1B:68:16:04:88
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E5710449F7046F787598D8777005E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BXYmpVT9vD1kR9kE_4q2G2gWBIg.roa
Signing time: Mon 02 Jan 2023 06:14:51 +0000
ROA not before: Mon 02 Jan 2023 06:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205591
IP address blocks: 2a0c:b642:1a09::/48 maxlen: 48
2a0c:b642::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:57:10:44:9f:70:46:f7:87:59:8d:87:77:00:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=057626a554fdbc3d6447d904ff8ab61b68160488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:48:8c:18:e5:91:69:36:53:fe:91:e2:63:a8:
53:34:dd:bf:76:59:c5:79:a8:fa:61:99:e9:43:24:
7b:19:27:ca:95:64:7b:9a:05:65:d3:93:75:fc:96:
f2:ce:36:4e:49:cc:d2:e0:0b:8d:4f:1d:3b:c4:06:
48:90:ce:eb:e5:b0:30:48:67:58:10:90:b3:f2:7a:
d5:fa:da:54:6c:fa:38:16:af:5a:88:f8:0f:bd:81:
17:0e:f4:7b:65:bc:38:1c:90:93:49:af:b1:46:91:
93:77:85:5e:1d:78:88:f1:f5:d7:57:c0:97:bf:ed:
67:84:c1:af:ef:07:65:d6:8a:77:6d:fb:ec:9a:10:
c0:15:42:be:7f:de:e2:c5:c8:92:0a:ae:e0:97:96:
65:41:9b:2e:64:57:a2:23:2f:9e:90:a1:c0:36:fb:
12:25:4f:4c:f5:05:13:2f:4e:6f:b9:e2:3f:e1:13:
92:de:b6:82:59:1a:94:93:02:b6:20:08:e4:f3:13:
2e:b4:e4:65:33:ad:af:48:0c:08:9c:9d:39:53:83:
e9:1d:db:15:79:a3:74:12:96:d0:2f:79:3b:1b:cf:
e2:08:95:55:c7:e2:c6:1d:55:8b:3d:5d:d7:75:b8:
12:f8:2a:1c:0d:1c:9a:74:e7:cb:29:2c:2c:6f:e8:
04:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:76:26:A5:54:FD:BC:3D:64:47:D9:04:FF:8A:B6:1B:68:16:04:88
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BXYmpVT9vD1kR9kE_4q2G2gWBIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b642::/36
2a0c:b642:1a09::/48
Signature Algorithm: sha256WithRSAEncryption
48:51:99:b9:10:03:3e:cd:d5:b7:16:b4:cf:e5:0a:09:9d:2e:
77:ee:86:12:90:16:4b:bf:87:3a:95:36:1e:f8:8d:88:b7:38:
a1:be:d8:f5:0b:08:f4:20:06:6f:7c:b1:0f:bd:55:91:7d:c8:
91:63:ff:66:04:0d:7d:c7:1c:93:e4:03:27:09:f1:e1:d3:fc:
1a:db:f5:1c:91:82:04:39:fb:6b:b9:e9:52:32:f7:22:5e:56:
b2:57:09:9a:76:18:af:dd:0e:ec:a3:95:f2:13:12:ce:ae:b7:
8d:e2:2d:ce:70:af:59:56:16:2f:18:16:d6:dc:98:8a:d9:56:
97:e3:6a:ab:89:80:8f:42:c7:36:10:11:eb:1e:76:28:48:15:
a1:6a:78:2b:ed:89:ea:2f:11:0d:a6:38:cd:9f:40:75:43:87:
48:9e:b9:1f:f8:b9:3d:62:63:6b:92:02:40:08:50:16:01:d7:
8a:8a:f1:ed:32:a3:e9:3f:fb:e2:83:c4:ae:2a:27:69:c5:29:
2f:d0:34:04:da:12:e2:2f:79:15:16:65:78:9e:75:3c:e5:d0:
0f:8a:88:5b:55:ef:b0:77:17:ea:6e:92:3e:4e:be:eb:cf:9b:
b1:8f:5c:9f:0c:84:ce:5e:6d:58:37:2e:88:45:ba:81:4f:52:
eb:13:f8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:37 2024 by rpki-client on console-ams.rpki-client.org