Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XIueieX3dtHSZHKOKB2YVaiLPmk.roa
File: XIueieX3dtHSZHKOKB2YVaiLPmk.roa (raw, json)
Hash identifier: NlUm4tiEPPUfDODU0QsiNGw2A01sGUU5ssiZQ6RwstM=
Subject key identifier: 5C:8B:9E:89:E5:F7:76:D1:D2:64:72:8E:28:1D:98:55:A8:8B:3E:69
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801603FC852832CA427607531AEB8CE
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XIueieX3dtHSZHKOKB2YVaiLPmk.roa
Signing time: Tue 02 Jan 2024 02:29:42 +0000
ROA not before: Tue 02 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205778
IP address blocks: 2a0c:b641:7b0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 12 Mar 2024 19:50:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:60:3f:c8:52:83:2c:a4:27:60:75:31:ae:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c8b9e89e5f776d1d264728e281d9855a88b3e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:73:f8:ba:af:66:92:d2:53:12:25:2c:8d:28:
95:05:22:14:48:eb:ad:b2:ef:4c:51:f6:ff:eb:a5:
a6:ba:b3:bb:4d:25:84:c9:82:40:25:4e:68:e5:ab:
3d:4a:f3:4d:3b:08:39:6c:7a:ec:f0:20:20:de:1b:
b3:ed:dc:48:64:a0:dd:be:36:46:e8:2d:3a:ef:10:
38:1b:26:62:a8:14:f3:2f:4d:77:f1:5c:0d:59:1f:
60:74:00:bb:cc:38:36:29:d4:49:4b:df:56:53:bd:
5c:03:3c:44:b2:5e:d9:0d:83:7f:78:09:d2:10:99:
f3:2c:d9:3c:25:25:d9:4d:8b:da:9f:e9:04:94:d9:
61:81:4e:05:0e:14:9c:9b:88:b1:03:82:24:d8:b2:
5e:a3:65:67:59:6a:de:f2:21:61:97:d5:9a:fa:f5:
2a:bc:f2:be:bf:e6:0e:cc:65:ff:08:43:ba:3b:85:
b5:e0:88:31:64:a4:b3:68:2a:65:61:77:2f:8f:d9:
95:43:66:88:0f:19:36:18:1a:a6:0b:0d:fd:75:27:
cb:22:56:b3:d7:6b:42:fb:db:8f:37:d1:60:db:df:
d0:2b:ce:53:8b:6e:66:f4:ad:c7:04:3f:b4:74:9e:
fc:48:83:a0:d8:e5:9c:7f:56:60:e1:f8:69:41:74:
10:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:9E:89:E5:F7:76:D1:D2:64:72:8E:28:1D:98:55:A8:8B:3E:69
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/XIueieX3dtHSZHKOKB2YVaiLPmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:7b0::/44
Signature Algorithm: sha256WithRSAEncryption
98:22:dd:46:8d:2f:e9:59:d8:a1:4b:89:9a:d1:7d:cb:ec:b9:
ae:28:ca:c1:f9:0f:44:02:c4:ad:24:96:41:94:11:79:67:2a:
b7:8b:82:5e:b0:51:e5:54:c8:3a:58:77:c5:11:2b:a0:b7:26:
66:63:3e:43:f4:85:6b:c5:28:9d:f0:46:98:6d:cc:f4:74:ef:
71:52:32:83:1c:4c:8f:60:65:89:c7:2e:7f:5b:07:b2:e2:d2:
20:2e:ca:83:bf:c9:fb:d8:d7:06:2a:aa:40:91:93:96:f0:33:
08:ef:51:16:a9:36:1c:4c:6d:12:c9:88:9d:77:18:de:c7:36:
db:cd:bd:a2:1c:27:8a:af:a0:dc:4f:27:e9:aa:46:51:e5:53:
52:54:d7:13:ee:82:6a:4a:a8:81:e4:d2:a5:00:3a:f2:85:dc:
91:47:90:a4:e5:c3:51:21:81:fd:42:40:76:e5:29:7d:ea:e5:
eb:20:3c:0c:2f:b2:17:36:e0:0b:42:64:94:d3:8f:dc:bd:e6:
1d:a9:60:ee:b1:c0:9a:03:77:c0:bc:5d:5f:c9:49:f0:fd:2a:
91:08:93:da:89:2c:1a:bb:ae:6c:da:9e:29:15:66:03:44:e0:
04:fe:03:b7:19:ef:34:da:8a:2f:ab:83:22:35:d3:48:b7:a9:
40:b0:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org