Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/B_XCIvRDsOhW7hNNzSEThl2BVcc.roa
File: B_XCIvRDsOhW7hNNzSEThl2BVcc.roa (raw, json)
Hash identifier: ckc1+QUFpUt0mpC4GLl0LCHzL1d3/bVOJcjYGnBCMWs=
Subject key identifier: 07:F5:C2:22:F4:43:B0:E8:56:EE:13:4D:CD:21:13:86:5D:81:55:C7
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018570B0613AD99D8B12F294111A697C0EDB
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/B_XCIvRDsOhW7hNNzSEThl2BVcc.roa
Signing time: Mon 02 Jan 2023 04:14:45 +0000
ROA not before: Mon 02 Jan 2023 04:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 2a05:b0c6:5c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:61:3a:d9:9d:8b:12:f2:94:11:1a:69:7c:0e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 04:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07f5c222f443b0e856ee134dcd2113865d8155c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:c7:7e:a3:de:68:ed:52:1e:41:0e:0f:c9:
37:05:00:5f:76:f7:54:2b:af:81:9c:2b:5d:45:81:
02:87:0e:a4:fb:f5:15:0c:a0:fa:a7:d9:78:64:e0:
87:13:42:58:cc:96:48:99:57:2f:84:a1:e0:d5:b7:
d8:fe:4a:79:cf:a5:de:ab:0e:d8:57:f9:90:56:e7:
4b:77:c8:65:25:44:5c:a4:b5:a0:dc:0b:6b:45:91:
e1:03:44:dc:e2:b4:dc:59:b9:ab:b8:e8:2e:7a:a3:
11:c1:aa:cb:a2:87:95:46:30:bc:ff:1e:0b:f5:84:
40:3c:c7:dc:67:5e:bf:76:2e:20:38:fb:29:0a:42:
e5:49:5a:7b:c1:3c:95:3a:18:c4:cd:6f:68:c7:30:
5b:da:4d:58:4e:d6:dc:7e:6f:bf:4a:06:f6:cd:bf:
76:01:71:1b:33:1b:b3:72:bc:c4:5d:67:20:33:9b:
72:ae:7e:8a:1c:ce:a4:16:6f:87:d4:42:c3:eb:ed:
39:76:a9:a7:92:0a:5e:75:c1:8c:a2:cb:b2:db:87:
e0:1d:12:20:67:84:74:c6:0e:d3:de:58:ad:2e:18:
42:81:3b:41:47:24:3f:63:78:bd:e5:2c:5e:12:92:
8e:f8:f3:57:46:0d:97:37:e7:18:b5:a8:97:17:c8:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:C2:22:F4:43:B0:E8:56:EE:13:4D:CD:21:13:86:5D:81:55:C7
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/B_XCIvRDsOhW7hNNzSEThl2BVcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:5c1::/48
Signature Algorithm: sha256WithRSAEncryption
59:5d:a9:67:82:47:c5:11:5b:9a:52:54:7c:62:23:bc:dd:31:
b8:44:44:d4:a8:25:2c:e5:cc:66:00:86:8e:c2:65:80:b3:ba:
5a:e3:92:c4:dd:95:3c:23:fd:c7:ce:be:79:ba:0d:b0:e2:2f:
6a:ab:23:39:d2:56:ea:0b:0a:87:df:38:42:f9:cc:09:4d:50:
bc:5b:20:6b:1c:aa:8c:66:8a:7b:55:fa:08:8e:ea:a0:7d:cf:
38:02:7f:7b:ad:0b:d6:4b:f7:86:7e:6c:8b:f4:3c:02:d9:01:
43:0a:43:14:8e:20:97:a2:c3:b6:91:68:2c:8e:24:f8:85:0f:
c1:07:c4:e0:5a:90:bc:4f:ec:dd:bb:b0:f2:0f:f6:6a:a6:71:
b6:dc:98:b9:2c:40:2f:01:67:30:8f:fc:56:e7:cb:fe:2b:de:
26:63:55:29:b0:b7:de:8f:7e:3a:4d:0c:de:e9:4b:a8:2a:a4:
af:a6:ab:8a:35:85:33:61:6b:37:a2:97:e4:02:8a:b2:ff:23:
59:22:3d:f6:22:f0:9f:06:1a:a1:3f:fa:4c:da:33:1e:50:7b:
fc:83:e8:df:c8:c5:86:e0:4a:dc:11:1b:62:aa:41:94:30:39:
e2:05:3d:85:4f:2c:86:92:a7:0f:f0:1e:6f:e1:d3:e5:3c:90:
f0:b3:c7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org