Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa
File: tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa (raw, json)
Hash identifier: Z1cuxuFDEVZFWU5JkCHCv88C6yIqCffQQ2BMojQjQ0s=
Subject key identifier: B5:84:14:64:7A:B3:3B:D7:F5:93:21:5F:04:7A:9D:29:28:99:7E:98
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E4C536C27E4A5C073E7D59C97CD92
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa
Signing time: Mon 02 Jan 2023 06:14:49 +0000
ROA not before: Mon 02 Jan 2023 06:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200293
IP address blocks: 2a0c:b641:8e0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Apr 2023 10:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:4c:53:6c:27:e4:a5:c0:73:e7:d5:9c:97:cd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b58414647ab33bd7f593215f047a9d2928997e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:fc:6d:a6:91:39:cd:5e:f6:ee:d6:ef:ec:
cf:98:14:dd:3f:92:71:a6:52:49:6c:c2:0a:76:a0:
3f:85:28:b5:2f:a8:06:a7:63:8a:2d:bd:0c:e2:86:
c2:76:7b:79:99:87:88:51:bc:8f:68:ca:52:d7:a7:
17:ed:1a:9d:09:1c:60:ef:53:2d:b5:2c:73:9b:98:
91:7e:13:f0:36:98:25:23:b7:4c:c5:d3:7f:25:c4:
4d:30:75:dd:3b:66:b2:1a:08:ee:2d:3f:4e:fb:d7:
7b:eb:c0:3d:6c:87:c6:ef:59:1b:ed:66:22:a6:ec:
68:f4:72:89:36:3b:01:89:75:11:4b:86:cd:b0:d5:
ac:4e:5a:d0:2d:c5:c6:d9:5e:d0:1b:aa:38:1b:72:
f8:20:50:f8:22:d1:ce:81:fd:a9:df:fe:8b:b1:65:
83:6b:bc:d4:14:4c:6e:60:6d:d4:77:ce:06:f2:5d:
8e:1e:f0:1d:0d:1b:2e:d7:c2:e0:62:94:55:7e:2d:
32:a5:7f:3d:1d:6c:7b:31:f1:3b:68:84:30:38:31:
6c:80:4d:f6:c9:2c:1b:cb:ab:11:a3:19:3b:75:11:
32:13:cb:7a:5a:22:93:4e:6a:80:aa:c3:d1:ed:9d:
9a:ca:0d:e7:08:47:41:4a:28:6c:cb:30:cc:60:f9:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:84:14:64:7A:B3:3B:D7:F5:93:21:5F:04:7A:9D:29:28:99:7E:98
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/tYQUZHqzO9f1kyFfBHqdKSiZfpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:8e0::/44
Signature Algorithm: sha256WithRSAEncryption
64:7d:44:19:d3:54:93:b3:33:dc:8a:07:09:62:3f:dc:3f:7b:
65:20:31:78:c1:80:fa:90:ee:b1:13:d4:c5:a1:dc:74:78:99:
e2:09:48:8a:6d:8e:96:53:93:96:c1:87:bf:e9:c3:33:a3:c1:
2d:77:83:4a:f3:0f:a5:1d:6e:48:24:55:f2:16:91:9e:43:53:
1a:26:79:63:2b:56:45:2b:a4:46:8b:70:dd:56:d4:93:7b:ce:
9e:f3:77:5c:e4:8f:ee:7c:3f:c2:ad:2a:59:c6:f5:b0:cf:cf:
76:dd:83:f8:20:aa:60:35:a1:e9:3e:93:89:c5:4a:65:03:e0:
e8:d3:f3:0c:23:5a:c8:a6:91:f5:e6:87:f7:39:d9:e0:80:0e:
3d:9a:93:99:75:78:39:54:fd:b3:96:3b:37:0b:e6:f9:10:1b:
d1:60:05:ab:11:e1:b8:63:b3:5f:31:c7:0a:73:0b:26:be:31:
98:aa:f8:66:14:22:f5:e7:e3:c0:e8:24:53:ae:6e:6d:93:09:
ee:5e:38:8b:b1:53:a2:8b:27:d5:b4:aa:45:80:d3:e1:7a:72:
07:c9:d1:44:5f:5c:04:7e:d8:b6:f8:ba:1b:76:db:54:bb:c4:
4f:6a:96:0e:5d:9b:09:5a:b1:2f:d1:2d:48:48:77:53:2b:53:
21:58:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org