Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/B2LY_ge9FLMhAas2nmE7JKSzBvg.roa
File: B2LY_ge9FLMhAas2nmE7JKSzBvg.roa (raw, json)
Hash identifier: Zhe1XL2WqDCM5Dmvo43ZQjqibtEOc7Kv6DuE7zM3K7M=
Subject key identifier: 07:62:D8:FE:07:BD:14:B3:21:01:AB:36:9E:61:3B:24:A4:B3:06:F8
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01856EA6C27375DA8D6B1D1EBC7EACE73047
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/B2LY_ge9FLMhAas2nmE7JKSzBvg.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59831
IP address blocks: 94.127.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c2:73:75:da:8d:6b:1d:1e:bc:7e:ac:e7:30:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0762d8fe07bd14b32101ab369e613b24a4b306f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:5a:ed:29:31:ba:b9:55:d3:7a:26:2e:29:
e9:f2:a7:bf:2f:c5:a9:95:4f:f1:2d:dc:90:90:03:
de:a2:54:c4:9f:3c:7d:ee:21:69:89:83:99:5f:10:
ac:94:65:57:e8:54:32:9e:02:5e:d0:1b:af:49:3c:
fd:67:0a:8f:20:be:ad:1f:2f:3f:01:99:8a:61:ec:
a9:4e:99:53:18:ba:16:9f:e2:a8:c6:44:be:b1:05:
dc:79:8c:9a:82:ac:03:9c:9e:8e:b3:8b:ba:5a:ec:
e2:15:0e:6e:6c:15:27:cf:73:62:8b:a3:1b:b8:c4:
93:05:28:d5:0a:61:7f:79:e2:1c:8f:13:56:38:07:
9c:d1:8d:0a:10:5d:7d:0f:54:0b:f9:3f:5c:5c:32:
f9:fa:28:00:07:99:5f:65:c1:69:58:8a:7f:19:5f:
c2:85:de:93:46:a4:0c:f0:c8:a4:2c:95:e9:69:c0:
d6:39:ee:82:6e:c6:bc:b7:cd:4e:8e:15:31:0c:e2:
60:59:74:ff:18:4b:b0:dc:e7:6f:dd:92:8e:4b:4d:
f1:65:73:15:7e:35:49:e9:7c:7c:fb:82:f1:32:e3:
94:2a:78:fd:e9:10:f1:e9:e8:40:25:34:fd:e3:16:
f2:0c:0a:a3:0a:2b:fa:e0:6f:87:c0:f8:b2:64:d2:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:D8:FE:07:BD:14:B3:21:01:AB:36:9E:61:3B:24:A4:B3:06:F8
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/B2LY_ge9FLMhAas2nmE7JKSzBvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.95.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f3:6a:c8:1f:6e:f3:7c:f5:d9:c4:59:87:86:a0:9f:67:e9:
34:03:e8:82:47:70:b9:36:35:a4:68:12:92:62:e4:35:4e:7c:
d2:af:80:bd:01:78:9f:96:93:fc:8e:b7:65:00:4c:4f:a0:2f:
f9:e0:d8:fb:e5:c7:1a:78:fc:79:64:c1:55:04:14:6d:4d:df:
54:40:ea:ec:3f:66:d1:af:97:26:8b:c5:64:ff:3b:9c:4a:c9:
b5:3a:c0:10:14:c5:86:58:3c:a2:d2:4e:c1:a8:3b:2e:fc:a1:
7f:24:a3:d0:e0:68:1f:7a:5f:ff:7e:d3:91:e3:41:31:5e:70:
56:af:35:f6:69:00:e6:e6:61:ad:af:24:10:c2:d9:d0:1a:f2:
b8:b4:11:c6:f6:b0:16:0f:f5:63:71:74:a8:99:10:47:6c:e3:
39:37:b8:19:7a:95:e0:bb:ba:23:c7:5c:ce:f3:4c:3a:df:c3:
66:52:1d:70:ce:24:78:d8:12:81:6a:e3:d4:b2:1a:29:43:15:
e0:c3:1f:ca:14:a0:f3:7f:cb:6f:83:71:8f:1f:45:5e:60:42:
1c:c0:50:77:d2:da:a9:5e:e3:7f:21:d6:92:ba:d4:0c:4a:49:
0e:1e:ce:79:a8:6f:5b:eb:1d:e8:b1:d7:1b:c2:7e:88:cf:c1:
7b:af:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:52 2024 by rpki-client on console-ams.rpki-client.org