Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BYVCMcLrK2RC1m25QgV8RkvmiTI.roa
File: BYVCMcLrK2RC1m25QgV8RkvmiTI.roa (raw, json)
Hash identifier: YN0bHESr5Fsx3MCnH350lHoCY1MlDRBNb2/Rv/syK9Y=
Subject key identifier: 05:85:42:31:C2:EB:2B:64:42:D6:6D:B9:42:05:7C:46:4B:E6:89:32
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018AD60A32AEC4E5A1483633C20E3542802D
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BYVCMcLrK2RC1m25QgV8RkvmiTI.roa
Signing time: Wed 27 Sep 2023 09:48:27 +0000
ROA not before: Wed 27 Sep 2023 09:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216243
IP address blocks: 2a13:a5c7:1500::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 14 Oct 2023 16:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:0a:32:ae:c4:e5:a1:48:36:33:c2:0e:35:42:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Sep 27 09:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05854231c2eb2b6442d66db942057c464be68932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:1c:de:39:a0:62:b5:78:57:c7:e9:e5:33:
51:b4:ab:3f:45:c5:75:11:85:33:6f:20:fa:b6:50:
66:d7:bb:27:7b:b3:38:0e:60:68:45:ea:64:92:da:
17:98:51:6d:83:ec:99:cf:d3:75:d4:c8:b7:e5:aa:
75:1c:75:39:85:73:0f:e3:33:97:6b:e3:f7:ab:26:
24:f8:c3:e4:4e:04:63:ee:50:17:83:c8:0d:28:bb:
b7:55:84:d7:d3:06:68:1e:6b:60:60:10:7a:78:a2:
20:10:20:38:14:85:e4:e4:54:80:23:5a:c5:01:be:
bd:c9:a5:ce:96:64:4f:05:36:4b:5f:a6:19:33:1c:
c8:a1:13:1c:7b:07:d9:3e:3e:10:7e:de:c5:c6:69:
10:0c:02:bf:38:8c:98:77:38:1b:96:e4:b5:d9:b5:
7b:1d:8f:76:ac:ca:7e:d0:a7:5f:68:31:69:4e:91:
b5:3b:2e:ed:00:7c:51:88:2b:55:96:20:95:a3:38:
65:a7:41:5a:1f:94:62:50:7b:3e:50:5f:88:19:8e:
38:e2:d2:15:44:2b:9a:a3:fc:4c:e2:ed:7f:78:a3:
be:e1:8d:f3:a9:53:93:54:2e:45:b2:b1:a4:0c:ec:
c2:8b:48:f2:55:eb:3d:02:42:2e:18:ae:4a:4d:a4:
9d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:85:42:31:C2:EB:2B:64:42:D6:6D:B9:42:05:7C:46:4B:E6:89:32
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/BYVCMcLrK2RC1m25QgV8RkvmiTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c7:1500::/40
Signature Algorithm: sha256WithRSAEncryption
aa:da:83:50:bf:82:00:45:0c:b6:b6:bf:e7:d2:ec:43:70:4a:
a5:38:ec:c6:25:aa:b7:9c:14:fb:c9:66:4f:df:4f:6f:38:18:
5c:fd:df:d8:f4:3d:dc:0f:ad:37:69:aa:7f:aa:c3:e3:03:e2:
96:ac:9e:cd:e5:76:94:76:5d:85:1f:f0:ba:6e:a9:cc:ef:43:
ea:2b:62:a1:9b:29:f0:81:19:3d:1a:3b:77:13:02:03:cb:c6:
63:6c:41:7b:7e:35:08:93:51:ee:de:b5:03:c8:4c:e1:f0:d0:
70:08:2a:1b:a1:cf:49:b2:b3:20:12:91:c7:90:67:a5:8b:40:
ed:54:7c:6d:fe:6a:e6:0d:3e:be:99:b2:3d:69:a0:be:a1:27:
ec:c8:b1:0b:e1:c7:bc:33:5f:9c:8e:06:16:e9:1d:fc:fe:61:
34:5d:54:ec:02:30:43:34:e3:1c:81:74:89:5f:77:e6:d3:ce:
97:ff:2d:e3:f4:e3:60:2d:0a:9f:b9:60:2f:68:0b:76:de:db:
e8:9d:99:d4:a2:09:18:85:e9:7c:4e:91:4c:6f:c7:bf:2b:7f:
dc:a9:21:f0:9b:eb:36:ab:6e:c4:39:ae:71:66:9a:a9:d7:57:
b2:79:67:e2:86:4a:6b:8e:ca:d9:1b:61:60:25:61:79:a1:c5:
88:c9:4f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:52 2024 by rpki-client on console-ams.rpki-client.org