Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/bvw9g1zYeAPjWEE4zVl3ZuWDagQ.roa
File: bvw9g1zYeAPjWEE4zVl3ZuWDagQ.roa (raw, json)
Hash identifier: fcDZrSgFk2DG/qpDrDX3rbcCpxE8rZRShSJGtZT7YFI=
Subject key identifier: 6E:FC:3D:83:5C:D8:78:03:E3:58:41:38:CD:59:77:66:E5:83:6A:04
Certificate issuer: /CN=20aa60cb0024332a2db68993f3357158af60c8de
Certificate serial: 018572835CA6522A581484BB072EEF3AF1F9
Authority key identifier: 20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/bvw9g1zYeAPjWEE4zVl3ZuWDagQ.roa
Signing time: Mon 02 Jan 2023 12:44:49 +0000
ROA not before: Mon 02 Jan 2023 12:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a02:3040:43:ff00::/56 maxlen: 56
Validation: Failed, certificate revoked on Wed 03 May 2023 13:36:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:5c:a6:52:2a:58:14:84:bb:07:2e:ef:3a:f1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20aa60cb0024332a2db68993f3357158af60c8de
Validity
Not Before: Jan 2 12:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6efc3d835cd87803e3584138cd597766e5836a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:14:39:42:6a:23:99:4a:17:f2:1b:d1:61:eb:
e5:3a:5c:74:00:ac:2c:5d:40:14:61:3a:0c:c5:df:
ea:6c:55:e1:ac:6a:83:d0:f8:85:f7:c1:25:59:57:
16:59:17:19:a0:f8:ba:af:43:f5:f7:d0:14:37:e6:
6a:ec:8e:dc:f3:26:5d:6f:78:39:16:5d:6e:f0:80:
6f:73:92:54:bb:55:ef:25:88:e6:1a:fa:cf:bf:d8:
bf:ce:13:e5:de:9c:04:d5:af:9e:16:95:19:87:31:
ad:93:84:b9:05:85:7a:27:1e:65:74:a8:53:1e:50:
b8:4e:85:ab:1c:d3:7f:b6:cb:11:10:68:ef:c6:71:
5e:e9:c0:83:1d:5c:32:e0:70:02:70:e2:76:80:3a:
c2:fb:48:50:99:da:99:b5:55:5b:df:0c:42:6a:e8:
f9:8c:dd:de:f4:6b:17:fc:25:b7:79:37:5b:d9:3a:
5f:18:f5:cd:91:0b:94:bd:ee:6e:66:81:4d:db:23:
a3:70:dd:6a:92:d2:e7:02:8a:bf:d7:cf:82:3a:9d:
8a:d8:57:b6:bc:be:91:b8:9f:76:5e:c8:36:5e:a9:
85:f7:32:09:c6:86:4c:c2:4c:3a:fe:d2:c8:a4:f4:
28:f8:42:84:a2:bd:12:9f:d9:00:b0:94:df:95:94:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FC:3D:83:5C:D8:78:03:E3:58:41:38:CD:59:77:66:E5:83:6A:04
X509v3 Authority Key Identifier:
keyid:20:AA:60:CB:00:24:33:2A:2D:B6:89:93:F3:35:71:58:AF:60:C8:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKpgywAkMyottomT8zVxWK9gyN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/bvw9g1zYeAPjWEE4zVl3ZuWDagQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/352431-e694-4412-a766-73f7d110b82a/1/IKpgywAkMyottomT8zVxWK9gyN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:3040:43:ff00::/56
Signature Algorithm: sha256WithRSAEncryption
17:81:ed:3e:53:52:c2:d7:93:4c:23:fe:09:30:e5:84:7a:34:
80:95:e5:7d:db:0e:f4:8e:c5:3e:7e:6c:20:57:98:c4:ad:7d:
87:82:c4:ee:91:54:2e:3e:2a:b7:1c:8c:39:27:8c:29:fe:f7:
bc:d1:16:fd:40:3e:8f:82:91:af:cd:45:86:bf:00:c7:e5:ef:
bd:0c:99:44:7d:a2:8a:07:d9:f9:f7:48:fc:40:d2:fa:9b:76:
fb:b2:c0:7b:89:b8:a1:fe:06:5a:ea:9e:57:ff:80:40:1d:49:
3f:de:11:c3:ba:1c:65:b5:30:1f:05:b8:ca:60:9d:0f:99:f8:
20:f1:37:0c:1e:e9:09:55:2e:6b:aa:89:75:07:5d:c5:7c:f6:
e6:03:7b:ef:43:00:6b:7f:4e:07:ea:49:4c:3b:2d:6d:90:9b:
c0:0f:dd:b8:2f:5c:1a:af:31:e8:20:1d:18:42:eb:3e:de:92:
71:5a:82:05:23:9b:7d:48:1e:11:12:a8:03:89:fd:77:da:ff:
36:b6:55:c1:11:7d:78:d7:49:53:4b:a9:64:34:e7:46:6f:b4:
95:eb:e4:14:3e:29:57:d3:22:38:ad:d2:0c:6e:88:b1:73:fd:
5d:ad:27:3c:97:17:22:a5:9d:f1:30:eb:ba:34:23:67:2a:6f:
36:95:4d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org