Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x5C8KjuccLtK4Dmiou89Wmwt84Q.roa
File: x5C8KjuccLtK4Dmiou89Wmwt84Q.roa (raw, json)
Hash identifier: E/qumLcxTclFfwe9XY+aQozoMW0/PDfeLzeTFxTbiBM=
Subject key identifier: C7:90:BC:2A:3B:9C:70:BB:4A:E0:39:A2:A2:EF:3D:5A:6C:2D:F3:84
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E92460E076B09916E3F9EE0C8E044
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x5C8KjuccLtK4Dmiou89Wmwt84Q.roa
Signing time: Mon 02 Jan 2023 06:15:06 +0000
ROA not before: Mon 02 Jan 2023 06:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212963
IP address blocks: 2a0c:b641:650::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:92:46:0e:07:6b:09:91:6e:3f:9e:e0:c8:e0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c790bc2a3b9c70bb4ae039a2a2ef3d5a6c2df384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c0:d7:22:9f:ed:b6:6b:07:49:5f:d1:43:3d:
60:51:15:4e:0f:35:aa:ec:93:d0:ff:61:6b:50:c3:
3a:eb:4f:01:fb:04:d9:93:5c:ed:0d:56:91:4d:6e:
20:79:65:fe:2b:ca:ee:fe:7e:a2:d4:e2:95:8e:a1:
1c:86:11:35:31:d3:62:e1:a6:7f:b0:d2:d8:5f:ec:
a7:7b:6d:10:39:75:e2:40:75:a9:a0:62:83:96:d5:
be:e0:89:57:cb:20:01:71:07:59:ef:66:28:c0:71:
9d:47:c6:d9:7e:7b:32:3c:dd:1a:bf:df:16:d7:91:
75:a7:3b:81:f2:0b:17:ba:6b:3d:12:0c:e1:87:c0:
af:d2:b2:f7:5c:dc:dc:c0:31:13:8a:23:90:0f:e2:
42:3b:c8:e5:82:1c:7a:ac:00:c2:2e:3d:2a:5b:5f:
e7:51:07:7b:91:cf:39:06:0c:52:c1:ed:e7:d1:d9:
89:c9:ae:7a:83:b3:8f:5f:44:79:91:73:83:dd:e2:
d6:ab:da:70:a8:36:43:30:db:0d:76:c7:c5:fa:b1:
04:f7:a6:94:8e:e4:cc:4b:b1:a3:ba:d4:4f:cb:1a:
5e:83:06:1e:89:e7:39:77:63:b5:cc:b6:21:21:5f:
e6:1b:d7:a2:68:08:f0:94:d4:3e:6f:b8:0b:9f:28:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:90:BC:2A:3B:9C:70:BB:4A:E0:39:A2:A2:EF:3D:5A:6C:2D:F3:84
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/x5C8KjuccLtK4Dmiou89Wmwt84Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:650::/44
Signature Algorithm: sha256WithRSAEncryption
03:19:a1:2b:1d:c9:cd:0d:bb:ae:3b:80:72:89:18:56:6b:0c:
ce:d0:52:6c:d0:32:56:61:16:5a:35:d0:68:0e:1b:e2:48:3e:
63:52:8d:b5:26:24:8c:40:08:08:31:b4:4f:34:80:fe:6f:4b:
0b:dd:49:ea:84:95:ac:d0:19:48:86:a2:49:0b:b9:bd:a4:0c:
7b:21:c5:01:7d:74:a5:e1:6a:36:b2:ac:5b:ef:55:ba:8a:be:
78:f4:cd:3a:51:6d:74:c7:63:99:e8:6a:96:48:fb:ee:83:4e:
b2:68:71:b2:92:ba:b1:b1:bf:fc:ab:d6:df:79:31:86:43:c3:
83:79:17:2b:c6:40:6d:af:67:2d:88:ee:6c:bc:d0:56:b4:9a:
c3:0b:1b:37:eb:24:30:96:21:c9:e7:71:48:cb:cb:44:10:13:
80:0c:19:8b:85:47:15:58:c0:74:84:be:02:b7:84:90:44:8a:
01:c5:2b:90:a4:36:20:e1:8b:da:c6:9b:2b:72:fd:91:98:fc:
56:a9:06:23:ae:04:65:cc:27:c5:40:80:18:79:e3:80:11:fb:
07:cc:7b:f8:db:71:e4:1a:63:fe:76:90:11:83:d8:b6:8a:52:
fa:ff:08:39:4f:b7:52:d9:97:06:c0:8d:e1:33:bc:de:70:30:
7a:46:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:16 2024 by rpki-client on console-fra.rpki-client.org