Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/mbycoYsjSc953RekmYuB2KJarDg.roa
File: mbycoYsjSc953RekmYuB2KJarDg.roa (raw, json)
Hash identifier: abd2pXXdzc01211QUbgQg0hrL+/dgc4jVIhNwwmFKd8=
Subject key identifier: 99:BC:9C:A1:8B:23:49:CF:79:DD:17:A4:99:8B:81:D8:A2:5A:AC:38
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E60488B2062C37B93FA06E8E03165
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/mbycoYsjSc953RekmYuB2KJarDg.roa
Signing time: Mon 02 Jan 2023 06:14:54 +0000
ROA not before: Mon 02 Jan 2023 06:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207338
IP address blocks: 2a0c:b641:730::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:60:48:8b:20:62:c3:7b:93:fa:06:e8:e0:31:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=99bc9ca18b2349cf79dd17a4998b81d8a25aac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:66:b2:02:0c:e4:39:84:93:f1:21:96:d7:
3a:62:71:00:97:54:6d:48:5b:6d:13:3e:63:3d:b0:
d5:d8:ae:6c:78:19:51:52:05:e3:ff:71:a1:0d:89:
38:b5:76:f3:65:0e:54:f2:c3:30:2e:58:55:1e:60:
48:a0:cb:0c:49:c1:bc:e1:d7:1d:2d:f0:20:85:be:
41:72:42:b5:b8:cf:2c:6b:98:a9:b5:92:1e:30:0c:
07:50:f1:87:df:50:e1:1a:11:ec:27:4c:a0:f5:e1:
fe:97:e3:f4:48:1b:63:f4:c5:35:8f:95:c5:8e:05:
ad:0c:3e:9f:cf:d1:6e:f9:b2:4e:5e:96:c8:10:a4:
21:c7:42:36:80:6c:7e:05:b7:44:d3:82:0d:4c:c8:
60:41:b2:01:e3:d0:0b:31:c3:e4:43:aa:32:f8:88:
7c:54:14:63:fd:b4:1b:a2:13:1f:75:ac:41:16:ea:
83:b5:3c:98:ce:40:fc:67:34:22:d3:cd:1e:a2:0f:
30:e0:6a:58:9e:2f:5e:1e:e3:45:23:76:9a:19:9a:
85:d7:95:ed:97:12:b8:8a:d4:00:70:cc:4b:8d:db:
f8:22:e8:8c:86:4e:85:fd:99:82:22:2e:1b:e3:4b:
d5:7b:56:3a:13:58:34:a5:f9:9b:03:45:0c:8f:d2:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BC:9C:A1:8B:23:49:CF:79:DD:17:A4:99:8B:81:D8:A2:5A:AC:38
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/mbycoYsjSc953RekmYuB2KJarDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:730::/44
Signature Algorithm: sha256WithRSAEncryption
2d:e6:2b:6b:0f:ea:0f:1a:62:1f:39:7f:84:d5:2f:c9:ce:42:
29:f6:45:0a:55:2a:7e:b1:47:e8:3c:ff:50:82:c3:fb:25:9a:
27:08:f1:5b:2d:97:b6:db:e3:c9:5d:ea:12:17:81:46:e0:3d:
eb:df:3d:1b:63:f8:a1:e3:95:19:b2:ba:a6:ff:0e:0b:f8:5e:
de:a6:b6:4f:ca:7b:47:ed:6a:65:e2:21:43:65:35:e4:52:b6:
6a:27:e6:fc:00:4e:91:99:5f:8b:18:c6:30:96:7f:6b:29:72:
d1:d0:38:78:d0:fd:e0:94:b5:8b:27:4d:6e:a0:05:cb:c3:80:
d9:74:d7:c4:36:f6:e2:77:a0:9b:28:d9:d9:d6:a3:4c:6a:37:
ca:e9:a6:15:01:67:fb:39:7a:53:69:76:72:3d:34:bb:59:93:
a3:80:cd:94:ef:fe:14:e6:6d:66:9b:00:28:1b:90:e0:60:91:
a6:ca:af:5e:02:bc:b3:68:ab:43:33:bb:84:6f:09:50:e7:37:
a8:9b:53:b3:a2:8c:24:5a:4c:e0:85:d0:a4:29:b9:b5:5e:6b:
59:b9:85:5d:3a:81:24:a1:fd:c6:5c:ce:11:00:15:fd:07:ac:
42:8c:66:ac:82:0e:ab:28:2e:6f:cb:cb:31:c2:35:23:ee:91:
e1:ca:6d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:02 2024 by rpki-client on console-ams.rpki-client.org