Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_tfxGDm2mYrTbsN8qV20DL1HacM.roa
File: _tfxGDm2mYrTbsN8qV20DL1HacM.roa (raw, json)
Hash identifier: NwRvVJXPKwhsEBYnJBUcBap9NkH2MrJ16uYuUEWeLbU=
Subject key identifier: FE:D7:F1:18:39:B6:99:8A:D3:6E:C3:7C:A9:5D:B4:0C:BD:47:69:C3
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E5EBC52D9976D6D9BD164924273B1
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_tfxGDm2mYrTbsN8qV20DL1HacM.roa
Signing time: Mon 02 Jan 2023 06:14:53 +0000
ROA not before: Mon 02 Jan 2023 06:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207299
IP address blocks: 2a0c:b641:770::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5e:bc:52:d9:97:6d:6d:9b:d1:64:92:42:73:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fed7f11839b6998ad36ec37ca95db40cbd4769c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:99:79:8b:0f:4b:e9:c1:2a:1b:7d:45:0a:
e0:ce:11:e9:69:49:3e:db:49:bf:9d:4a:22:82:53:
6b:aa:a7:f7:5c:bc:0b:76:da:fc:cb:6c:6e:97:10:
ab:81:98:c5:a1:b1:03:bb:4b:87:8c:08:f1:d3:13:
3c:96:a4:6a:01:2a:7d:bd:c2:5f:23:61:fc:13:80:
5a:ee:8c:f5:3d:b3:b7:1b:8e:89:be:03:01:26:0f:
db:16:95:ed:b2:7b:18:f9:b5:05:15:63:7d:a2:d8:
a7:d8:d5:54:cc:42:e9:f7:eb:57:d0:9c:a6:eb:c8:
96:ec:79:ba:50:a0:5f:6a:98:03:2b:dd:c1:b4:95:
72:bd:43:74:3d:e4:f2:9b:10:30:bf:25:f3:fa:0e:
b6:8a:74:9b:a1:c1:17:65:28:5e:ae:fb:6a:d4:ef:
62:7f:c4:83:dc:da:b0:49:5b:6f:d7:2c:55:ee:95:
3f:09:87:ab:ea:de:94:35:16:8f:83:88:ba:fc:ac:
65:a7:20:88:b8:51:06:e3:79:7e:e8:ce:08:96:49:
81:14:e2:cb:b0:47:9f:82:d7:88:fd:7e:31:74:89:
b2:4a:af:6c:e1:89:c4:a8:eb:a5:83:45:c2:86:8d:
f0:a2:cc:c8:2b:d9:a3:f7:0e:d9:54:25:39:8f:04:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:F1:18:39:B6:99:8A:D3:6E:C3:7C:A9:5D:B4:0C:BD:47:69:C3
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/_tfxGDm2mYrTbsN8qV20DL1HacM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:770::/44
Signature Algorithm: sha256WithRSAEncryption
45:8e:c6:04:f5:36:1d:bc:eb:1d:9b:e3:b5:b2:a7:9b:2a:ea:
f8:37:d8:9f:d7:aa:db:45:d8:52:1a:5e:16:3e:cc:11:40:17:
4d:c8:18:dd:ff:d6:dd:7c:e4:3c:c3:b4:88:50:9f:8b:af:c7:
a9:22:8a:57:5a:c4:ab:fe:d3:a0:f1:3c:71:33:ff:24:88:01:
3b:94:9a:78:5b:bd:18:ce:62:8f:8a:22:8d:a7:80:05:87:9c:
88:ab:d0:ce:f6:32:96:7a:4c:48:5d:46:c2:fd:5c:97:c6:5c:
37:00:48:bb:f5:39:d6:f0:05:80:3f:31:34:e2:88:5a:41:dd:
63:95:76:7d:d5:19:59:8e:c5:1f:4f:20:63:b8:8d:85:20:6b:
02:e8:96:e0:fe:f6:a1:a6:30:9a:c8:f8:4b:97:06:74:97:7d:
26:88:b3:d3:0d:9b:b9:2c:02:16:4f:53:24:0e:e7:fa:c1:dc:
79:04:33:0e:9e:2a:45:69:d1:0f:a0:23:58:fb:90:dc:91:8c:
cb:9b:75:fd:73:0d:d6:cb:3e:a4:2a:f8:0d:fb:b0:34:79:13:
59:ff:92:76:11:ee:25:ac:9e:35:ab:01:6c:0a:17:77:35:67:
69:74:40:76:cf:53:9f:99:86:2a:6b:7b:0a:09:a3:e8:c2:34:
79:06:09:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:06 2024 by rpki-client on console-fra.rpki-client.org