Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GHbsUYk5opkvhtQjuftmiwahLmA.roa
File: GHbsUYk5opkvhtQjuftmiwahLmA.roa (raw, json)
Hash identifier: tv/HgMREFstdlgfvj0OdsNil52cCB0g6/wA74bo+0k8=
Subject key identifier: 18:76:EC:51:89:39:A2:99:2F:86:D4:23:B9:FB:66:8B:06:A1:2E:60
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC8018377C99A271646B7CF7FBA9128E1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GHbsUYk5opkvhtQjuftmiwahLmA.roa
Signing time: Tue 02 Jan 2024 02:29:51 +0000
ROA not before: Tue 02 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215906
IP address blocks: 2a0c:b641:b60::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 08 Mar 2024 20:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:83:77:c9:9a:27:16:46:b7:cf:7f:ba:91:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1876ec518939a2992f86d423b9fb668b06a12e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:4d:b0:6c:4c:50:dd:af:f2:ac:2c:e9:72:7c:
cf:96:fc:9b:10:55:20:3a:37:8d:ca:20:c8:24:12:
b6:18:86:68:d2:45:55:f9:ff:66:c2:9a:95:a2:dc:
ee:b2:76:51:d3:72:f6:8a:31:ca:e6:03:a3:f6:9a:
53:51:e2:1d:60:b3:b5:ab:2e:7a:9d:2d:63:7c:45:
d2:15:93:9d:0d:46:ef:50:b8:6f:f4:d8:95:5e:68:
47:32:bf:4c:85:5c:34:ac:06:53:e0:73:ab:08:03:
0a:b2:9c:9c:42:a3:01:55:70:d8:ce:98:40:8a:e3:
6f:d7:ea:e7:e4:25:a9:f3:b6:2f:90:17:ec:ed:56:
90:0d:06:9b:98:af:d5:f8:7c:91:64:74:04:7b:4b:
65:80:f3:90:76:6e:82:46:de:d5:73:29:82:75:84:
07:0e:bb:69:fe:12:63:43:69:42:69:b6:d8:84:04:
d5:b5:17:d1:eb:17:d9:a7:7c:19:09:69:fa:4b:87:
f8:99:7c:1c:9f:55:f8:c3:4c:d7:b7:d1:88:5d:06:
2b:d2:67:71:cc:95:2c:8f:6e:76:4d:91:ad:ec:99:
7b:42:a8:b0:a7:7a:44:fc:7c:d4:9f:83:e7:38:b2:
9e:e6:4c:53:05:fd:d2:35:a7:78:3f:78:87:c3:71:
d5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:76:EC:51:89:39:A2:99:2F:86:D4:23:B9:FB:66:8B:06:A1:2E:60
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/GHbsUYk5opkvhtQjuftmiwahLmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:b60::/44
Signature Algorithm: sha256WithRSAEncryption
6d:45:70:a4:81:0b:64:8b:d3:db:4c:1a:3e:d1:f9:f7:fb:6e:
25:45:09:71:c6:77:12:7d:91:d6:e3:b5:ed:67:1a:83:2f:2b:
5e:27:a6:a0:2f:05:7d:c1:9e:9b:e7:37:55:4c:cb:24:f8:a5:
79:a3:39:77:7a:b6:fe:d6:eb:15:c0:d8:d3:c6:82:b4:33:36:
41:ed:29:e1:58:c9:3b:b9:21:9f:a7:b8:f1:5b:97:77:b1:28:
73:ba:ab:89:83:c4:9a:7a:88:5b:8c:85:94:c3:ac:7a:41:6e:
2a:7d:51:50:6c:b8:93:8c:ab:77:6a:00:c9:e8:81:ae:5c:58:
f9:a4:03:50:48:57:af:f3:f1:61:47:84:28:0a:60:d1:d1:2d:
b8:07:2f:9a:ac:c2:ad:6f:2a:15:de:ce:fa:34:81:5f:cc:43:
f3:cc:7d:9d:b9:e6:2d:21:2a:4d:2f:25:23:ab:d7:b6:52:3a:
90:0f:ef:db:6b:3e:0b:f4:8d:43:90:80:f6:2a:09:a1:4a:1d:
86:07:4e:c8:d0:8d:7e:9e:fc:53:2f:62:3a:6e:7c:a8:8d:62:
51:8e:68:08:c2:00:b5:45:dc:df:68:a8:a7:9a:ee:c5:55:d7:
82:ae:04:3d:9b:6b:a3:c5:6e:35:22:c8:d2:f9:dc:b9:22:b6:
1c:4c:dd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 8 22:22:50 2024 by rpki-client on console-ams.rpki-client.org