Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ERrxrH8EEn26BhZBN50r862d0Xc.roa
File: ERrxrH8EEn26BhZBN50r862d0Xc.roa (raw, json)
Hash identifier: Ij7VeDyd0EKOofTJmZv1v49S159CgQDZc9vssnoBV0I=
Subject key identifier: 11:1A:F1:AC:7F:04:12:7D:BA:06:16:41:37:9D:2B:F3:AD:9D:D1:77
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E7982B48EAE10A2F6BE2CCA760C87
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ERrxrH8EEn26BhZBN50r862d0Xc.roa
Signing time: Mon 02 Jan 2023 06:15:00 +0000
ROA not before: Mon 02 Jan 2023 06:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 2a0c:b641:540::/44 maxlen: 48
2a0c:b641:750::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:79:82:b4:8e:ae:10:a2:f6:be:2c:ca:76:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=111af1ac7f04127dba061641379d2bf3ad9dd177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:5c:14:fa:27:f4:11:a6:5f:bc:34:45:66:
48:a8:cf:59:80:e1:38:25:a4:34:e9:bc:59:96:39:
1c:05:74:d2:e8:75:92:81:95:a2:46:93:d2:4d:48:
dd:37:82:df:2b:06:c5:b8:ff:e4:8d:95:3f:01:23:
ea:ee:28:18:4e:8b:16:b9:2f:74:21:7b:c0:da:dc:
26:e3:18:38:95:aa:fb:54:6d:09:69:9d:7a:d8:90:
12:df:1a:04:85:0c:ee:49:ea:2f:31:5e:ad:bb:01:
82:ab:d4:43:26:02:c4:27:7e:3d:2d:b0:f2:48:c0:
53:08:90:08:3d:9e:c6:4b:24:ac:91:0f:31:9f:45:
f0:b4:35:c6:19:44:c2:bb:a4:ff:bc:55:68:ea:6c:
cf:6a:58:1d:6b:02:43:3c:8c:20:34:ad:c0:0a:93:
28:ee:3d:7b:4f:60:a2:b0:14:d7:9d:f8:2a:40:15:
49:d3:c0:f3:6e:4f:eb:c6:d9:22:ff:c6:3d:78:23:
26:a6:b8:9a:86:4a:1b:af:71:8b:5a:3f:c9:9b:6c:
ed:96:f8:27:b5:6c:56:8d:53:15:32:58:06:c2:41:
36:9e:5b:f3:e9:5f:1b:4f:ec:54:22:1d:5c:5c:75:
10:b9:3a:ac:fe:74:e0:aa:1f:35:ff:76:dc:70:ba:
2a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:F1:AC:7F:04:12:7D:BA:06:16:41:37:9D:2B:F3:AD:9D:D1:77
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ERrxrH8EEn26BhZBN50r862d0Xc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:540::/44
2a0c:b641:750::/44
Signature Algorithm: sha256WithRSAEncryption
99:a9:62:ac:7a:b6:82:ad:2c:9b:cf:b8:3e:55:32:c7:81:50:
f2:17:14:31:ed:6b:7d:1c:02:03:90:7b:13:32:b6:fc:85:2d:
3c:b3:4d:b8:44:df:ee:bd:05:1a:45:8b:d5:57:2f:94:89:53:
6a:53:e9:2f:e1:db:7e:9f:d8:a3:7c:4a:be:7f:0d:3d:70:2f:
cf:88:bb:04:ab:ac:fc:96:6b:03:e3:7d:f0:92:a1:78:4c:95:
7c:1e:8e:23:d0:f7:cc:9f:c3:e0:fc:3d:c5:1b:cb:a6:39:b0:
ef:59:a2:82:39:7d:39:4b:47:c9:a8:fe:7b:81:cf:69:6f:60:
53:1c:d1:37:00:f3:a8:f4:63:b6:85:6e:c6:92:b1:cf:26:f8:
72:65:a2:88:ae:6b:a0:c8:b7:99:b9:92:ef:7f:a4:a5:2b:c7:
f6:e7:e6:80:74:52:25:3c:2d:00:b1:0b:69:5c:ab:a6:b9:4c:
c1:be:11:4d:22:ff:6a:cc:7f:22:70:d4:e6:42:8b:01:97:4f:
66:d2:ca:37:8b:97:4b:19:6d:eb:d4:83:06:f2:f9:2f:66:72:
8e:af:83:70:cf:64:ee:e9:6d:e2:50:d8:93:11:b1:6d:ed:a5:
21:10:b6:c1:1d:7c:e5:cc:18:82:e6:9c:48:19:1e:61:c7:b1:
68:13:6d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org