Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Ct4ttHfBH_gkneKIw_6KxYj8IC8.roa
File: Ct4ttHfBH_gkneKIw_6KxYj8IC8.roa (raw, json)
Hash identifier: v+3fVN0DaZQ2ygZ6KPYjSm/7D8lxohyRouqTEgNljiE=
Subject key identifier: 0A:DE:2D:B4:77:C1:1F:F8:24:9D:E2:88:C3:FE:8A:C5:88:FC:20:2F
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CE82D8CAE4107A86E9728571D2DBFA950
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Ct4ttHfBH_gkneKIw_6KxYj8IC8.roa
Signing time: Mon 08 Jan 2024 08:25:48 +0000
ROA not before: Mon 08 Jan 2024 08:25:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215761
IP address blocks: 2a0c:b641:ba0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 16:17:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:2d:8c:ae:41:07:a8:6e:97:28:57:1d:2d:bf:a9:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 8 08:25:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ade2db477c11ff8249de288c3fe8ac588fc202f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:d2:d2:9c:13:70:e7:30:75:f6:10:f9:0f:
43:c0:10:64:e5:27:e5:76:c9:2b:50:5b:a7:52:f7:
61:a1:be:06:e3:ce:f8:1a:e2:08:cf:84:a9:05:ea:
48:be:a0:9a:8b:dd:bc:5c:91:0f:50:cd:d7:9a:fc:
46:c9:16:48:69:1e:24:c9:7b:52:87:dc:dd:49:83:
13:01:43:09:7c:72:54:38:b6:f6:49:c4:b2:58:49:
b3:55:54:13:4e:d8:e0:71:89:41:58:0f:76:3e:29:
e6:de:51:79:70:eb:16:76:ce:ed:d5:53:dd:f5:57:
b9:e1:7f:c2:0f:71:9e:e4:f6:fd:c7:a7:b3:df:ac:
0f:f3:8c:84:84:23:f1:5b:6a:01:1e:1c:09:bc:42:
90:7a:fc:6e:49:44:ed:7e:0d:fa:d0:af:4d:40:42:
da:62:d7:87:65:56:30:9a:27:e7:9c:94:6a:1a:64:
b4:3e:0f:0b:fa:4d:09:1b:0a:93:ff:c4:aa:ba:a9:
61:2b:44:d3:fa:ae:c7:28:73:28:33:4b:8c:cd:d1:
7f:10:0f:a9:d4:c7:64:05:17:51:8f:93:8d:af:73:
b1:16:4d:29:27:6f:37:47:24:de:00:e6:7d:f1:35:
eb:d7:b8:9c:a2:cc:06:b5:6f:2d:de:2c:2d:19:1d:
34:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DE:2D:B4:77:C1:1F:F8:24:9D:E2:88:C3:FE:8A:C5:88:FC:20:2F
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/Ct4ttHfBH_gkneKIw_6KxYj8IC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ba0::/44
Signature Algorithm: sha256WithRSAEncryption
07:9c:51:44:28:b1:60:eb:7a:a5:dd:9d:af:ca:a0:0f:46:5f:
4d:9e:93:f0:cf:6d:8d:ad:31:f9:0b:76:83:18:7f:cb:81:09:
28:15:dc:45:05:0e:3d:54:e7:f0:ac:45:ae:41:2e:13:5a:6b:
5c:be:c0:8d:c3:4d:ee:84:ec:18:cf:c8:b6:c6:7d:a5:1c:39:
15:00:66:7a:c4:3d:08:36:cb:61:00:db:d5:83:76:7f:cd:59:
2a:1d:85:8e:b9:31:bd:9f:57:cd:74:5a:08:37:71:fe:18:b1:
5d:65:0d:a1:27:96:cd:65:6e:aa:d3:0a:bf:37:48:d8:b8:20:
7b:94:5f:1a:2e:31:bb:4f:c7:07:6f:76:55:d1:84:57:e6:db:
57:04:57:45:dd:4a:32:c6:4f:f8:e5:8e:cf:5f:e0:d1:a3:c9:
da:03:f9:49:05:5f:59:78:c2:d0:f8:b4:e5:41:53:ae:4a:06:
4c:ef:b7:4a:d7:79:c7:3d:de:7d:b9:c4:81:f9:77:20:e8:f1:
d3:05:93:cd:04:84:7c:6e:08:e1:f7:c6:f8:08:c2:2f:af:87:
8d:ca:67:41:5e:2f:3f:8c:24:45:64:3b:13:00:29:68:c7:32:
b7:68:b5:5e:08:e8:21:2a:fe:66:6e:92:42:56:08:d8:93:c2:
6a:94:c7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 20:57:25 2024 by rpki-client on console-ams.rpki-client.org