Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BuZJXrjYh2tRMsMIzAkCW6FRyM0.roa
File: BuZJXrjYh2tRMsMIzAkCW6FRyM0.roa (raw, json)
Hash identifier: IYHu14g5nvUgus/+1XLdTonWi8R8m1F8G7do51V4nD4=
Subject key identifier: 06:E6:49:5E:B8:D8:87:6B:51:32:C3:08:CC:09:02:5B:A1:51:C8:CD
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D1FA214B3F5E42B3082693D0C9ADBCA3C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BuZJXrjYh2tRMsMIzAkCW6FRyM0.roa
Signing time: Fri 19 Jan 2024 02:52:12 +0000
ROA not before: Fri 19 Jan 2024 02:52:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215734
IP address blocks: 2a06:de00:de10::/48 maxlen: 48
2a06:de00:de11::/48 maxlen: 48
2a06:de00:de12::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 Feb 2024 20:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1f:a2:14:b3:f5:e4:2b:30:82:69:3d:0c:9a:db:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 19 02:52:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06e6495eb8d8876b5132c308cc09025ba151c8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:13:d3:1a:18:7b:6b:2a:49:8d:66:5d:5b:f0:
b0:08:1c:d7:c9:30:4b:4d:12:2a:46:cf:16:27:58:
58:d8:3d:9a:10:91:da:6b:4c:a5:f2:66:a0:ce:66:
0c:11:12:a7:e4:bd:fa:63:31:0a:54:09:ea:68:cd:
15:25:3d:26:2b:cc:00:7e:5b:43:2c:9e:ff:94:f0:
09:32:92:d3:4b:8a:53:be:c4:4a:b3:c2:b5:74:d9:
16:ef:ce:b6:6f:83:1c:48:1a:98:48:8b:0e:bb:36:
c8:89:23:b9:f8:2a:b3:59:e8:a8:ca:ec:ec:b9:93:
76:d0:58:3d:e3:ab:e1:6a:9a:a7:ed:3e:a6:5d:53:
73:11:52:76:78:07:68:b5:6d:c3:96:90:b4:82:46:
9f:78:d4:69:c9:07:46:c6:53:e9:86:45:67:d1:c7:
8f:7e:20:89:c2:d4:a0:e1:9d:25:ae:cb:3e:b9:af:
dc:73:31:f4:2b:2e:cb:41:0f:ba:15:f6:36:cf:73:
65:ac:30:63:02:2d:e4:b4:f8:5b:d6:4e:7f:39:c0:
47:88:ba:f3:ba:44:ed:bb:89:d5:4e:f7:26:6d:e7:
7c:3e:2d:1f:36:cd:c6:7d:56:d8:dd:8d:0a:49:95:
1b:99:eb:34:dd:c0:65:b3:b1:41:c8:ed:d7:d2:57:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:49:5E:B8:D8:87:6B:51:32:C3:08:CC:09:02:5B:A1:51:C8:CD
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BuZJXrjYh2tRMsMIzAkCW6FRyM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de10::-2a06:de00:de12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:81:7d:2d:6d:5e:15:09:91:4f:50:0e:30:40:8f:a6:5a:23:
53:4d:f5:53:05:b5:e1:10:72:6e:ac:08:e7:be:50:96:40:93:
b8:f1:67:85:ee:12:41:17:5d:9e:1c:cb:26:aa:e0:16:f7:e1:
82:3e:fd:a6:f3:dc:75:02:dd:fd:d5:0d:4f:26:ee:69:c8:9b:
26:6f:1b:32:95:32:8f:e1:0c:69:51:db:a1:c8:06:9d:e0:a9:
01:8c:44:8e:84:65:61:1a:8c:8f:d2:db:79:60:81:b3:0a:a8:
4f:c5:a2:24:ef:6f:82:96:54:20:1a:3a:78:5f:38:d3:cd:76:
af:68:4c:d3:15:a3:ea:68:27:66:70:42:00:55:24:f1:0f:4c:
d3:5b:d6:cf:19:c8:9a:46:b1:8a:aa:6c:51:b4:44:cc:63:86:
69:ff:3e:25:39:93:0f:33:17:f5:04:dd:f9:93:fc:c6:3f:3d:
57:7f:16:87:f3:95:c9:b9:5c:cd:0b:61:59:c9:fd:a2:41:c2:
10:6f:a7:d6:49:97:9a:d4:b2:08:18:6a:b4:91:30:df:57:cc:
49:7d:aa:bb:98:50:06:8e:7d:df:29:fd:96:88:7b:f4:64:dd:
f5:52:c4:64:b0:81:f3:7f:61:e6:31:71:b9:b0:50:c7:20:c8:
16:da:8f:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Feb 13 23:17:21 2024 by rpki-client on console-fra.rpki-client.org