Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ca8_BGTT8I5rm9Nudzlrn0fl7_o.roa
File: ca8_BGTT8I5rm9Nudzlrn0fl7_o.roa (raw, json)
Hash identifier: CCOPMBaEGeGob3t1QZklWsvBtftmv0Mxs/tYxj3tLac=
Subject key identifier: 71:AF:3F:04:64:D3:F0:8E:6B:9B:D3:6E:77:39:6B:9F:47:E5:EF:FA
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E839FCAC608C61430B7A511A8A23B
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ca8_BGTT8I5rm9Nudzlrn0fl7_o.roa
Signing time: Mon 02 Jan 2023 06:15:03 +0000
ROA not before: Mon 02 Jan 2023 06:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211449
IP address blocks: 2a0c:b641:150::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:83:9f:ca:c6:08:c6:14:30:b7:a5:11:a8:a2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71af3f0464d3f08e6b9bd36e77396b9f47e5effa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:d8:09:16:4f:2c:26:fd:0f:43:36:6d:c0:
7e:c9:4b:f3:26:b4:f5:c9:cf:2e:4d:49:d9:52:b2:
c8:e8:68:0c:de:2e:d9:33:18:c1:a5:2f:bd:3b:56:
1c:f0:e2:d9:17:d0:c3:1b:a7:9e:1e:df:71:43:9a:
09:b2:85:3f:2d:5b:fe:aa:9a:e5:f9:3e:14:8e:54:
a8:74:47:2d:5d:31:0c:10:13:ce:6d:03:50:6e:6a:
ef:b1:80:19:0e:ac:9d:47:5b:00:b5:5b:0e:b2:76:
07:18:fa:63:d2:62:94:d0:77:29:b9:0a:51:e8:58:
e3:cf:ce:66:85:60:e9:f5:c1:87:71:be:14:8f:fe:
6a:d0:b3:64:fe:b0:72:64:ef:64:a2:e4:93:b0:f6:
4b:a5:a8:8e:2b:43:90:31:07:dc:9e:92:ef:14:ee:
a8:42:69:2c:40:9a:2d:c3:aa:47:0c:69:38:c5:ad:
9b:91:e2:93:6c:1e:43:4d:17:c4:b8:52:e3:11:af:
29:45:6c:8a:2e:15:01:aa:eb:9e:b1:c9:8a:8f:e4:
22:0c:b1:4a:33:49:5c:1e:5c:61:5e:f6:13:86:3a:
ed:a7:15:60:3e:2c:4c:a9:d5:87:22:a0:fe:3d:4c:
a4:6e:58:b2:6b:a8:df:2d:7c:28:c9:47:be:0a:e3:
36:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:AF:3F:04:64:D3:F0:8E:6B:9B:D3:6E:77:39:6B:9F:47:E5:EF:FA
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ca8_BGTT8I5rm9Nudzlrn0fl7_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:150::/44
Signature Algorithm: sha256WithRSAEncryption
27:32:63:b9:33:51:10:a7:c1:0f:e0:f8:29:9b:9b:26:fc:07:
65:3c:e9:90:b0:31:34:dc:82:d0:f4:aa:3b:a7:bf:99:e7:1e:
ae:c3:6f:72:61:ad:d6:48:c7:52:21:fe:2b:1a:38:dd:8e:62:
ec:fb:b3:42:c9:a0:a8:81:7b:ce:5d:b6:e9:82:b1:0a:91:85:
5d:42:28:91:bf:96:cc:f1:05:46:9e:d3:db:37:8c:0c:4d:7e:
65:60:14:c7:5b:34:18:cf:60:44:e3:99:74:cb:6a:2b:24:a0:
d9:0e:ff:cc:b6:bd:65:c8:52:13:38:8b:15:ec:74:56:b7:5c:
e0:49:d6:68:e9:9c:d5:37:33:f8:25:2a:40:61:93:ec:38:43:
72:fa:f1:c2:6f:83:c3:c0:62:d6:ac:6c:37:7e:20:96:7a:f0:
ef:32:e2:c3:db:4d:ae:b5:54:0d:1d:aa:fd:f4:74:fd:aa:7c:
eb:85:40:03:fe:4a:8a:d2:91:0c:ab:a2:2d:cc:ad:46:e3:c1:
60:53:f3:cc:be:05:4b:83:cc:1e:aa:4c:b0:ca:78:46:95:73:
6f:78:97:a0:2e:ae:ca:39:d1:f8:e3:43:37:a3:ef:ef:03:32:
84:06:ce:8b:05:4b:d9:b6:b5:1d:e7:29:68:fc:ea:64:c5:11:
a0:16:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org