Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BQT6I7RrSE54ZgzbQzHweMym2e4.roa
File: BQT6I7RrSE54ZgzbQzHweMym2e4.roa (raw, json)
Hash identifier: dnFX1Vsmylx2Ngl7sriCPg25++/Jwk734udpvfUYt8o=
Subject key identifier: 05:04:FA:23:B4:6B:48:4E:78:66:0C:DB:43:31:F0:78:CC:A6:D9:EE
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018A1D1DDE83FAFFFB8FD6A3B2F20EAB376C
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BQT6I7RrSE54ZgzbQzHweMym2e4.roa
Signing time: Tue 22 Aug 2023 12:00:11 +0000
ROA not before: Tue 22 Aug 2023 12:00:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216422
IP address blocks: 2a13:a5c7:1300::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:1d:de:83:fa:ff:fb:8f:d6:a3:b2:f2:0e:ab:37:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Aug 22 12:00:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0504fa23b46b484e78660cdb4331f078cca6d9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:f3:a3:25:96:65:13:24:5e:5e:57:13:1b:
4f:c3:ea:11:3d:9a:70:c3:cf:09:64:cf:aa:57:8e:
71:cc:4b:b1:93:34:46:aa:44:33:e2:34:0d:8b:01:
54:a6:25:33:dc:79:06:92:4f:39:b5:0d:9c:c1:e3:
fe:ef:71:95:01:8d:55:33:e3:70:fb:28:53:8c:87:
b7:74:2c:c0:d1:ad:a1:e7:c4:7b:41:68:f2:57:0e:
bf:1e:57:53:ac:04:86:1b:b5:8a:4b:1f:58:1e:34:
1d:f8:ea:1e:85:1f:e9:2e:ef:66:d1:21:bf:63:07:
d8:26:d0:20:5f:96:c5:61:52:19:34:55:43:80:13:
21:84:20:99:e6:e5:2d:40:13:9d:70:5b:de:f5:45:
eb:38:66:fe:c9:90:fc:08:95:b1:44:69:1e:fc:14:
f2:20:cc:22:fe:8d:12:09:68:2c:96:ce:fb:5f:d7:
92:2e:4a:44:d1:34:4a:de:12:1b:c6:a7:65:7b:20:
96:58:37:dc:43:f1:2c:82:45:f9:22:bd:31:6e:14:
af:a6:8a:ca:0d:31:97:da:f5:dc:29:f3:46:b1:fe:
21:d2:bb:4c:e7:53:51:bf:8a:01:36:ec:67:92:fd:
bb:31:b3:ae:1e:94:45:3e:81:81:66:9b:3d:80:4b:
a1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:04:FA:23:B4:6B:48:4E:78:66:0C:DB:43:31:F0:78:CC:A6:D9:EE
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BQT6I7RrSE54ZgzbQzHweMym2e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1300::/40
Signature Algorithm: sha256WithRSAEncryption
85:dc:12:bc:94:65:33:6e:2a:b8:2d:0d:dc:fc:04:44:e5:db:
21:55:60:2f:66:2a:bd:79:0c:9f:ce:f0:21:da:8c:88:87:43:
2b:fc:6d:d3:17:58:04:6e:fc:46:03:13:72:3f:8d:8e:b4:fb:
6d:84:82:15:74:b4:b3:0e:d7:10:ef:7c:01:e4:b3:a1:3a:53:
59:e2:c9:18:45:8a:dc:b6:1e:87:97:c5:a6:df:9b:00:7d:62:
c0:0d:4f:ad:16:fd:a3:87:2a:1a:20:9d:62:3b:a2:bc:f7:4b:
f5:b2:26:c8:3e:c2:9a:49:30:d2:59:2c:71:45:99:03:69:3b:
e7:4d:41:ce:2e:31:57:d4:d7:e9:f0:12:6f:17:49:ec:01:bb:
86:f0:84:47:2c:5e:50:24:45:8e:27:2e:e9:58:9f:b1:99:de:
a6:4e:24:aa:ad:8e:98:7f:ae:0f:ea:42:1a:75:99:40:73:f2:
c8:60:4f:83:77:ee:2c:34:ad:a2:a0:3f:fe:7a:b4:ad:b2:18:
b1:54:b1:71:96:7b:84:4a:6c:05:16:55:fa:43:a9:3c:a3:9b:
95:0b:5d:60:85:1d:fe:79:a4:bf:71:c8:f6:68:f9:18:30:54:
0f:34:a7:bb:2a:ea:6a:ab:5d:d2:d2:ab:fe:b5:50:cd:df:1b:
b9:64:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:00 2024 by rpki-client on console-fra.rpki-client.org