Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa
File: x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa (raw, json)
Hash identifier: Elfuf3YnR2q+tAGHVb+9/fcDRWToAk8rJUl3fA/9stY=
Subject key identifier: C7:71:E1:EC:01:52:5A:A0:76:16:4D:F4:FB:A6:60:73:C9:E8:61:B2
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018771095038271D14EBD6A27468A1AE813C
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa
Signing time: Tue 11 Apr 2023 15:57:28 +0000
ROA not before: Tue 11 Apr 2023 15:57:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205463
IP address blocks: 2a0c:b641:9f0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:71:09:50:38:27:1d:14:eb:d6:a2:74:68:a1:ae:81:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 11 15:57:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c771e1ec01525aa076164df4fba66073c9e861b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2d:f9:d5:2c:08:95:85:af:e1:b8:12:d5:95:
eb:25:72:71:14:e8:28:ce:3a:4d:60:2a:b7:b6:c3:
75:43:41:63:7d:47:ad:f9:2f:ed:b5:62:b6:39:fd:
4d:7a:87:eb:c6:c2:ec:9a:1f:a9:c1:e5:ea:42:a4:
e1:95:33:20:e0:32:e9:a3:84:8c:2e:29:ca:5c:a9:
3e:91:98:94:0c:70:0d:40:d4:79:79:51:69:8d:7e:
b7:ae:04:c6:1f:66:ec:34:c3:83:49:a9:e3:b7:a3:
04:99:cf:88:77:83:b6:49:a7:bf:6f:a5:e3:a5:73:
bb:43:f0:bb:2a:ab:42:66:56:8d:c4:3e:af:b3:49:
b3:3c:8d:dc:27:56:23:ed:74:8f:13:4e:96:f4:90:
35:73:2e:87:15:27:41:de:58:80:bd:8d:e9:fb:63:
34:fe:3b:f1:94:58:88:41:de:41:32:bf:10:bd:7e:
7c:ea:cf:c0:5b:a2:7f:ae:66:23:71:c3:70:54:99:
28:43:fe:20:85:1d:b1:6c:87:ec:f5:f7:46:36:90:
31:b7:d9:16:77:d8:8e:8b:f4:4b:e8:bc:02:3b:4f:
6e:ed:f5:ba:80:76:f8:df:5c:ec:5b:b4:d1:e8:15:
03:72:1c:e5:4e:d2:6a:6f:49:61:55:73:ed:6c:89:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:E1:EC:01:52:5A:A0:76:16:4D:F4:FB:A6:60:73:C9:E8:61:B2
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x3Hh7AFSWqB2Fk30-6Zgc8noYbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:9f0::/44
Signature Algorithm: sha256WithRSAEncryption
4b:c1:20:65:f8:7b:18:7f:fa:43:ef:81:dc:9f:30:97:df:5a:
84:85:aa:4f:53:05:d1:53:d5:32:5f:35:ce:2c:33:c5:91:5e:
91:7d:7e:92:a3:12:8f:64:00:88:a6:f0:e3:4e:6f:46:14:7f:
ca:3a:14:d0:d6:17:e3:c4:c8:af:25:a2:dd:16:89:61:4d:1f:
b7:96:53:31:bf:a5:c7:00:8c:43:40:d4:66:12:46:f7:99:74:
68:71:07:72:c8:fa:e2:27:e3:34:a6:ee:03:33:9e:da:77:8a:
81:a3:27:19:e0:5c:06:ea:39:31:7a:4e:ba:06:41:10:e8:c1:
8d:d5:f1:f3:88:88:c2:9d:ab:fc:fa:d7:4e:c2:2d:18:ea:fc:
8a:9f:9d:77:f1:1f:ca:df:1f:bb:ee:2a:19:3a:0f:d8:9a:49:
90:01:41:66:ce:1e:0e:8e:91:5e:0e:dc:56:36:2b:26:e6:48:
0f:50:5b:5a:73:a5:65:6a:97:42:de:5a:ed:37:de:e5:82:31:
00:99:e7:24:78:25:f8:b6:f8:31:da:7f:bd:0e:f4:54:eb:b5:
db:3f:9a:74:85:7c:52:55:52:14:4e:46:26:74:35:f5:63:a2:
df:d2:a1:89:53:eb:0c:0f:71:e7:fd:67:37:bc:98:04:3d:6d:
3c:e0:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:16 2024 by rpki-client on console-fra.rpki-client.org