Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/aHbfnvZv4Ug9ogL8nU-NVyoQrxA.roa
File: aHbfnvZv4Ug9ogL8nU-NVyoQrxA.roa (raw, json)
Hash identifier: 4ROuoEm2bJ9G6bqA3E/7DHOE4zVAnTh4xOe1xJDkLHQ=
Subject key identifier: 68:76:DF:9E:F6:6F:E1:48:3D:A2:02:FC:9D:4F:8D:57:2A:10:AF:10
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E97ACE453C0132A09B9FA455A777F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/aHbfnvZv4Ug9ogL8nU-NVyoQrxA.roa
Signing time: Mon 02 Jan 2023 06:15:08 +0000
ROA not before: Mon 02 Jan 2023 06:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213344
IP address blocks: 2a0c:b641:7d0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:97:ac:e4:53:c0:13:2a:09:b9:fa:45:5a:77:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6876df9ef66fe1483da202fc9d4f8d572a10af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6b:54:54:11:d0:43:0e:ac:03:ef:9a:f9:78:
e7:05:df:d6:99:1b:74:fb:76:c4:58:1d:a2:0a:58:
52:86:30:73:52:fa:61:e3:7a:92:eb:47:c2:b8:4d:
a6:38:67:b0:8f:c9:d3:a4:b2:d3:84:b4:91:6a:06:
9e:3e:dc:47:c4:95:70:14:35:fd:1b:7e:c6:d1:8a:
9a:2a:6a:2d:d4:16:87:cf:04:b6:28:87:50:04:63:
11:9a:62:3c:ce:b4:2d:29:14:b3:a4:2d:96:81:83:
a5:fd:18:46:93:ea:14:05:fd:ed:80:07:dd:43:f6:
85:cb:2f:47:d9:6f:6f:a7:ab:97:25:5a:20:a6:77:
96:01:17:10:fb:77:f8:e2:a1:a9:ec:18:1a:c0:7e:
78:00:0d:f4:8f:73:a8:24:56:8b:d1:70:e9:24:ef:
af:12:7a:e1:20:43:e8:77:d3:23:3e:65:be:1a:66:
35:21:63:40:67:7f:78:51:03:d8:08:06:ac:7f:90:
83:8f:17:85:13:fa:35:77:3b:f0:49:46:7f:6b:f9:
b2:d8:28:01:81:db:f2:21:4a:7d:11:72:4d:b0:ea:
36:22:a7:37:ee:35:8a:1b:94:8d:1d:25:9d:73:5a:
d2:6a:4a:f3:8b:2b:38:5c:35:07:f6:8f:52:a9:6e:
2e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:76:DF:9E:F6:6F:E1:48:3D:A2:02:FC:9D:4F:8D:57:2A:10:AF:10
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/aHbfnvZv4Ug9ogL8nU-NVyoQrxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:7d0::/44
Signature Algorithm: sha256WithRSAEncryption
14:ba:d0:d5:a7:8b:d1:45:98:63:6f:00:f4:c6:c9:57:05:79:
b0:c3:6c:df:6b:fc:20:cc:29:88:0c:4d:ed:84:2e:a9:2d:91:
ab:37:aa:4d:bd:08:a0:f4:c9:df:3b:3c:76:fc:76:49:05:6c:
8e:73:8a:4e:c4:0b:d8:ae:7a:a0:00:ff:a0:53:75:3f:b6:d4:
8c:e3:a9:7d:dd:8c:d8:4a:7b:4e:88:1d:f1:cf:96:2b:5c:ff:
74:32:fc:4f:fa:16:f6:2e:2f:f1:37:50:95:0b:a6:8f:27:a8:
e0:74:a3:d3:f6:43:23:16:10:e7:91:ff:02:3d:e3:10:0b:bc:
7a:f2:4c:08:90:6d:b6:da:23:ea:ec:5d:5f:b4:fd:bd:8f:ad:
8b:da:1e:6f:45:91:2b:5c:ec:53:86:6d:68:a4:c4:82:ae:00:
c3:2d:c0:ea:2f:0e:7a:6e:08:eb:68:3a:bd:c1:da:57:e9:98:
ee:9f:d9:8c:79:ca:b3:eb:3b:f1:bf:70:25:ba:4c:a8:43:cd:
d2:54:55:b2:6d:f9:aa:7f:66:3a:6e:97:ce:53:0e:9d:f9:67:
12:2e:13:b3:3f:c5:50:92:31:f8:e6:29:01:f6:32:8a:02:74:
e3:8f:5b:21:54:25:58:7c:b8:80:62:a0:10:f9:56:f1:46:b7:
1c:ee:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org