Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v3Kq9IgAK5weOtjJs6FjRzjxI1A.roa
File: v3Kq9IgAK5weOtjJs6FjRzjxI1A.roa (raw, json)
Hash identifier: GZAh8Sm35roOWwIjzw6jY4DdND9BCBYO2aAWNMkxf8E=
Subject key identifier: BF:72:AA:F4:88:00:2B:9C:1E:3A:D8:C9:B3:A1:63:47:38:F1:23:50
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01860931039CD59EA58DB173FF7B7534F845
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v3Kq9IgAK5weOtjJs6FjRzjxI1A.roa
Signing time: Tue 31 Jan 2023 18:57:32 +0000
ROA not before: Tue 31 Jan 2023 18:57:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198127
IP address blocks: 2a0c:b641:300::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:09:31:03:9c:d5:9e:a5:8d:b1:73:ff:7b:75:34:f8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 31 18:57:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf72aaf488002b9c1e3ad8c9b3a1634738f12350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:be:79:4d:9a:da:05:85:e1:b4:56:1e:6a:fc:
ab:b6:ae:e9:a0:cb:05:87:8c:8c:59:fb:d7:97:b4:
d5:19:ed:bd:b9:5d:dc:9d:06:41:44:ad:fb:f0:98:
62:1a:e0:e5:58:f9:df:3a:a0:63:15:f5:1a:59:05:
4e:e0:e9:f0:8e:5e:9d:a6:6c:4e:29:d5:68:3c:20:
2d:f4:9f:2c:e0:64:1f:fd:f5:9c:aa:25:7d:4f:eb:
e9:50:4f:6c:4e:64:df:01:e9:fe:99:57:85:3b:f9:
0c:7f:3a:54:d4:69:d6:da:ff:d0:1f:e2:3f:40:65:
a6:a3:04:30:d4:4f:fb:0b:1b:03:20:94:43:93:e2:
a9:5e:16:94:39:51:d8:8c:8a:88:cc:83:c7:4f:eb:
62:42:2a:45:d1:5e:4f:69:46:c1:ec:4d:7c:af:a6:
40:1b:fe:53:b9:63:31:32:b5:fe:c2:d0:25:3d:e5:
e3:cc:de:22:4f:e8:1c:34:db:62:a2:17:4b:3c:1b:
fe:b5:68:65:bb:76:50:64:35:07:4a:bd:76:94:e8:
d2:3c:15:e4:42:0e:a9:c9:f7:9d:36:5f:aa:42:0f:
bc:e1:fb:05:18:cc:12:4a:aa:e9:37:1b:c8:aa:23:
b8:0d:58:0c:48:b1:24:8a:0a:de:1e:d3:9f:4c:63:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:AA:F4:88:00:2B:9C:1E:3A:D8:C9:B3:A1:63:47:38:F1:23:50
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/v3Kq9IgAK5weOtjJs6FjRzjxI1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:300::/44
Signature Algorithm: sha256WithRSAEncryption
35:fc:6c:e2:15:32:f0:12:f5:f9:44:89:75:c8:ae:e9:d5:b2:
46:74:68:38:28:b2:9a:4f:99:da:ea:ba:1d:ff:7e:2c:49:68:
36:53:1e:8c:b1:b5:7d:b1:d2:bb:77:31:ad:52:bb:bb:d9:59:
c4:80:25:c1:3d:fd:a6:f5:e9:9b:9f:fc:3d:e9:b6:37:55:3e:
a7:87:24:04:6f:93:01:75:e2:2d:2b:9b:51:21:01:50:c5:ed:
d4:d7:b6:f7:96:db:92:04:a2:d0:3a:19:06:e1:26:28:04:cd:
b7:c2:de:57:2c:38:21:5b:18:f5:55:46:9b:35:70:d7:29:33:
b6:99:00:0e:85:a8:31:30:79:9d:8a:ed:0e:5c:44:c9:41:fc:
0d:ab:be:4f:6d:e0:23:b1:f0:a8:29:ea:9c:f2:0a:d1:cf:c3:
0c:9d:cd:fa:65:9e:04:f5:a8:13:55:6d:d3:5b:d2:80:ea:d7:
9d:bf:04:e7:3c:29:a2:03:b5:df:9a:fc:b4:25:f8:7b:22:b5:
8e:ff:ce:86:97:90:db:2a:56:1a:3a:f1:89:11:e6:5b:87:5e:
7c:72:58:cc:54:0b:77:79:5c:32:b1:ce:bc:f1:9f:e0:f9:42:
94:ec:b7:13:07:c2:f6:8f:33:8c:07:84:78:fa:34:48:ae:67:
e6:b9:3f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org