Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BBjsvXOfbpMTXmfKINlRXSTtWI4.roa
File: BBjsvXOfbpMTXmfKINlRXSTtWI4.roa (raw, json)
Hash identifier: wfZzSQbL1fZIgwMc2CEA/aNy4l7583kHsdU0zZjEsYg=
Subject key identifier: 04:18:EC:BD:73:9F:6E:93:13:5E:67:CA:20:D9:51:5D:24:ED:58:8E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCE254C262FBD9C257E3BA977B87BE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BBjsvXOfbpMTXmfKINlRXSTtWI4.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 148971
IP address blocks: 2a0e:b107:1860::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 20:22:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e2:54:c2:62:fb:d9:c2:57:e3:ba:97:7b:87:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0418ecbd739f6e93135e67ca20d9515d24ed588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a3:eb:ed:91:23:b3:05:9c:fc:81:ca:7d:f5:
d9:fb:e0:fc:e3:c0:26:df:a5:8f:6c:ae:eb:ba:d6:
aa:a3:a6:a0:16:8c:f3:b7:ac:7c:aa:88:d8:e0:eb:
9a:d2:a1:df:50:3d:69:d0:05:d7:14:b7:ca:b2:3b:
04:53:cb:42:eb:ce:3f:bb:fc:a8:6e:28:7b:db:72:
31:16:67:15:c9:c5:e0:e4:53:9f:0a:05:f2:7f:8f:
e0:c1:ff:22:e6:85:b5:bc:fc:0c:23:30:5b:61:7d:
70:41:5a:72:a7:ee:b6:7e:55:52:8e:f2:7c:4f:e2:
09:ad:cb:05:29:b8:e6:1d:7d:e1:96:0b:eb:56:4f:
34:f7:6f:b0:2f:bd:74:b8:9f:1b:5e:f4:3f:ae:6b:
5a:65:3e:de:a6:81:01:ec:95:71:b2:28:ac:1c:0a:
ad:8a:d0:81:c0:32:27:1b:3b:f9:ed:9f:4a:77:b9:
bf:85:48:93:1d:32:76:31:70:d5:46:39:30:9f:20:
89:cf:a9:1b:fa:9e:ef:86:c0:fc:08:83:96:08:fa:
d6:58:cf:a4:18:25:27:12:4d:44:6f:88:19:aa:eb:
52:57:67:ad:c5:c6:70:19:28:0c:3b:5e:6d:2a:66:
5c:85:0b:36:15:b7:38:eb:af:97:32:5d:41:35:c9:
f2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:18:EC:BD:73:9F:6E:93:13:5E:67:CA:20:D9:51:5D:24:ED:58:8E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BBjsvXOfbpMTXmfKINlRXSTtWI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1860::/44
Signature Algorithm: sha256WithRSAEncryption
61:55:5c:6f:a0:cd:86:94:0e:cb:f4:39:97:3e:86:41:bb:27:
83:95:5c:ad:84:21:49:5c:cf:0d:d2:7a:78:a2:24:10:9c:ce:
cc:a7:c0:cc:74:5f:1e:fc:58:5c:06:8a:0d:1f:5b:3e:74:c8:
5f:b9:d8:08:35:99:b9:fa:c2:0c:78:8f:6e:e2:b5:ed:56:b1:
f9:8e:7e:87:00:a1:dd:03:a8:5f:87:83:86:f0:1e:95:a0:35:
41:b1:6b:31:26:d8:eb:bc:21:24:35:b1:f6:15:72:02:64:32:
ec:92:2b:b9:7e:bc:26:93:59:aa:9d:3a:d4:a6:77:fd:7b:a2:
11:ae:ec:d5:50:6c:f8:49:2b:f3:b6:b0:2f:7e:10:8d:9c:e5:
14:c3:8e:64:83:70:80:88:d9:a1:3e:41:f4:e7:e5:e1:a9:90:
3b:9f:ab:ab:61:11:50:fc:18:3f:28:ba:cf:61:2a:88:bf:fd:
09:75:0a:ad:13:ed:e8:f7:1d:b1:52:dd:c9:08:a8:56:5a:90:
0c:de:11:b0:d4:e6:43:c1:82:38:6a:52:be:4c:89:4e:f4:42:
45:68:d3:82:36:db:7f:1d:60:d5:e6:9d:46:2f:9c:7f:77:14:
4b:68:cf:1f:01:0b:51:64:5b:6f:93:ce:82:19:32:52:23:36:
49:2a:80:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 01:12:37 2024 by rpki-client on console-ams.rpki-client.org