Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jLZtrsEZuCq95xTSwwdiJWZH40c.roa
File: jLZtrsEZuCq95xTSwwdiJWZH40c.roa (raw, json)
Hash identifier: N90g20tdQk/fEfm1OLvCpHX2C/HbegfxLErnQ+uHkRc=
Subject key identifier: 8C:B6:6D:AE:C1:19:B8:2A:BD:E7:14:D2:C3:07:62:25:66:47:E3:47
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E4DB810B1FAAB5CAB430DA6D2486A
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jLZtrsEZuCq95xTSwwdiJWZH40c.roa
Signing time: Mon 02 Jan 2023 06:14:49 +0000
ROA not before: Mon 02 Jan 2023 06:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202827
IP address blocks: 2a0c:b641:390::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4d:b8:10:b1:fa:ab:5c:ab:43:0d:a6:d2:48:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cb66daec119b82abde714d2c30762256647e347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:68:a3:62:56:c7:9a:71:81:b3:cf:95:73:
8e:30:f0:fe:ac:67:28:2f:85:cb:1f:90:2e:00:2f:
e1:44:0f:9a:b2:70:8d:c3:fd:67:e8:ce:b1:af:93:
6b:3d:8c:62:2c:3c:b8:5a:55:b7:f3:6f:53:42:18:
06:72:06:1f:de:50:85:9f:96:6e:ce:a2:1a:81:24:
fd:e9:7d:d8:6b:70:6a:9f:fb:92:60:49:87:2a:bd:
49:4e:d7:45:7b:ce:1b:13:6d:34:e0:4f:6a:a5:a4:
b1:b5:3c:1c:dc:bd:8f:c2:ae:f4:82:c8:04:0d:0b:
b2:5d:01:1e:74:32:6d:b1:04:da:b7:00:db:9f:46:
04:cb:e6:d2:06:8f:dc:8b:bc:00:2b:f6:45:91:e5:
aa:2e:79:98:fb:2f:41:39:69:97:d4:73:20:ea:e9:
62:a6:81:41:e7:64:9a:18:4a:a1:7f:66:fd:45:46:
e7:b3:bc:cb:ab:55:c9:3d:f8:79:ee:65:fa:72:35:
cc:52:c7:6f:e7:b7:be:db:71:d0:d8:a7:cc:a0:99:
00:22:4f:4d:40:d1:05:a2:4d:23:74:a0:7a:3a:fa:
32:6a:9e:4e:f2:9d:f2:e6:f3:59:c2:e4:70:6f:5d:
3b:f0:24:c7:87:27:5d:04:39:b0:3a:9e:01:3d:7d:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:B6:6D:AE:C1:19:B8:2A:BD:E7:14:D2:C3:07:62:25:66:47:E3:47
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jLZtrsEZuCq95xTSwwdiJWZH40c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:390::/44
Signature Algorithm: sha256WithRSAEncryption
50:c6:0a:20:a2:09:63:02:81:24:47:2b:9e:6c:b7:16:e2:d6:
4c:33:1d:86:74:30:e9:6a:08:54:56:43:8d:02:c8:32:5c:7c:
c6:f6:79:ee:37:ea:37:66:f5:16:b8:a8:16:5f:c1:e0:af:4b:
c1:df:ae:3c:69:5f:79:b4:a7:02:ef:51:67:b9:8a:09:f8:30:
ab:82:d1:5d:c9:71:e9:4c:be:36:13:c5:3b:cd:6f:e0:d1:9c:
11:a2:69:d0:b3:1a:ba:d0:d2:ec:d9:5e:53:67:16:b7:72:53:
17:82:a1:b1:49:30:87:c4:cc:13:50:5e:2c:63:c4:43:17:df:
fc:8d:7c:6c:78:c9:16:08:fd:92:85:b6:b5:22:6f:4d:ca:b7:
1d:4f:35:0e:54:0e:61:05:80:ad:97:4d:48:ad:0f:77:6c:33:
b8:65:02:06:2c:d1:29:ee:dd:b4:12:dc:70:0e:91:14:f0:59:
7c:ca:9a:f1:ef:a5:13:a0:1e:35:b9:b7:03:a3:b1:0d:b2:69:
33:a8:9b:66:e4:64:16:15:aa:80:95:3d:94:90:3b:a7:3e:8d:
e2:80:6a:56:44:fd:68:a8:d6:5c:e6:df:3e:31:a8:21:5b:b2:
97:71:58:20:ea:f5:e1:84:81:30:bd:4a:17:ed:c8:76:38:9c:
f1:b3:77:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org