Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa
File: DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa (raw, json)
Hash identifier: L+RMAvTPI2uuTuXI/PUD0UFfaUyw6pkQ4d2BGjFgD2s=
Subject key identifier: 0E:B4:ED:3B:F8:36:2A:82:4E:5C:C0:BB:85:3F:B3:2E:7E:FE:67:03
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185CB38EE2FEEA88F6DBFA7D03205877C39
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa
Signing time: Thu 19 Jan 2023 18:09:43 +0000
ROA not before: Thu 19 Jan 2023 18:09:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200202
IP address blocks: 2a0c:b641:940::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cb:38:ee:2f:ee:a8:8f:6d:bf:a7:d0:32:05:87:7c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 19 18:09:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0eb4ed3bf8362a824e5cc0bb853fb32e7efe6703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:62:10:7b:18:b7:e1:bc:2f:9d:8d:f5:6a:0c:
94:98:ea:d3:e3:5d:c2:99:f9:f8:ec:71:d1:bd:85:
be:62:3b:0c:93:9d:9a:d6:90:df:e8:e0:5e:92:10:
17:55:08:dd:82:2b:2d:60:30:a7:00:d8:a2:86:15:
b3:ec:29:f9:59:cc:78:36:a9:1e:60:9d:0a:d4:82:
17:89:87:11:6b:2b:c1:9f:fa:53:8c:aa:62:40:5d:
de:3f:25:21:9b:1f:1d:eb:eb:11:cb:44:14:73:e4:
2e:fc:04:9b:95:0a:e4:d2:d6:c5:e1:e4:c5:0a:23:
fe:97:69:8c:cd:57:7a:1d:8a:cb:6b:53:a2:f2:72:
c0:60:32:11:d9:20:de:85:0e:f5:23:d9:6d:46:f9:
e2:ee:de:a5:57:2a:81:be:78:78:d0:6b:72:ce:25:
6d:ba:47:60:79:01:0c:c1:03:74:ee:50:2d:d0:63:
81:ae:1f:de:7b:37:de:f9:82:d4:6c:4e:ca:94:51:
ec:49:48:45:ce:3b:c6:5a:23:78:9a:68:24:8e:70:
9e:a2:1b:da:e4:9b:c5:ac:eb:11:c1:97:83:71:db:
ce:98:a6:c2:8c:53:b2:be:5d:fa:10:d8:75:66:43:
01:50:c1:be:13:a6:9f:18:58:80:fd:c0:5c:9c:bd:
c5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B4:ED:3B:F8:36:2A:82:4E:5C:C0:BB:85:3F:B3:2E:7E:FE:67:03
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/DrTtO_g2KoJOXMC7hT-zLn7-ZwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:940::/44
Signature Algorithm: sha256WithRSAEncryption
13:be:20:f4:64:96:fb:86:02:8c:23:d6:4e:f6:ef:6b:61:57:
e6:98:7b:f7:57:d4:2e:2d:3d:ec:ef:87:c5:1a:6d:2e:12:26:
df:44:91:74:3c:e4:e4:bd:69:7c:a6:a8:0d:90:bc:c8:53:31:
7a:47:29:6e:48:9f:75:d7:d9:1d:42:78:2a:4c:31:f9:8d:3b:
89:5d:35:5d:b2:77:31:fb:ae:eb:3e:87:53:5e:b6:c0:4d:b7:
cc:96:16:63:41:7f:d1:02:69:70:cd:52:a1:f3:f4:44:0f:2e:
6d:db:0d:f5:8d:5d:52:52:d2:36:c2:a6:9b:c2:50:e8:d9:9c:
a1:3c:a2:fb:d5:e2:94:e2:2c:7e:e0:87:24:e4:49:dc:6c:72:
9a:e0:dd:cc:38:86:fe:b2:cf:bb:18:a6:41:36:f6:75:1a:76:
a2:64:5d:22:f0:f6:02:7b:88:7e:9b:29:9b:26:e5:46:f3:c7:
d4:fe:4a:7e:28:df:7f:26:f0:23:bb:4e:1f:da:9f:93:69:9a:
34:29:ea:7c:7d:f7:b0:32:cd:c7:5f:14:a2:66:01:de:26:2b:
02:c2:d8:b2:a6:56:97:5a:9d:1e:4d:1c:68:04:a0:3c:3c:75:
c7:6b:bf:c1:3d:1b:fa:4a:11:d9:ea:c2:9a:01:b3:15:b3:95:
91:95:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org