Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BltA1jRag16V_i3tnAigFHSNCGE.roa
File: BltA1jRag16V_i3tnAigFHSNCGE.roa (raw, json)
Hash identifier: jpoSbC9WOBMmt7eqJaOxnRszp1J1RaJG+ovyAWHfork=
Subject key identifier: 06:5B:40:D6:34:5A:83:5E:95:FE:2D:ED:9C:08:A0:14:74:8D:08:61
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 01861005AAFC9E1A3016B8B105D67944C595
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BltA1jRag16V_i3tnAigFHSNCGE.roa
Signing time: Thu 02 Feb 2023 02:47:32 +0000
ROA not before: Thu 02 Feb 2023 02:47:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200078
IP address blocks: 2a0e:aa07:e050::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 11 Feb 2023 08:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:05:aa:fc:9e:1a:30:16:b8:b1:05:d6:79:44:c5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Feb 2 02:47:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=065b40d6345a835e95fe2ded9c08a014748d0861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f6:0d:e9:c0:28:f7:df:29:1e:2f:cf:2b:20:
22:33:f2:16:06:7b:ef:2f:83:03:a9:f2:f1:8a:e9:
88:e1:4d:48:de:c1:0a:1f:d1:2a:65:88:da:45:69:
4e:af:f9:06:c4:23:18:48:0e:53:ca:67:8d:38:3b:
2a:55:4f:c2:a0:e8:2c:bc:c0:51:db:0a:74:48:f4:
3e:d4:a3:58:b4:1e:c9:4c:21:e3:c8:0a:e1:da:e2:
1f:02:00:e8:85:f4:32:64:2d:3e:0a:8d:13:1c:af:
72:d5:88:a6:17:c9:ee:af:71:b3:25:77:dd:ad:01:
33:1f:05:0f:7c:8a:5c:e0:4f:e0:01:03:ab:6b:3c:
21:7d:81:05:22:19:be:7b:3e:f4:81:3e:64:5b:71:
f8:b1:9d:ab:6a:bb:09:03:62:79:af:61:92:a4:8e:
af:85:51:99:1b:25:74:14:c2:88:f0:2f:ac:b3:fe:
6f:42:69:72:55:01:dc:9c:07:c5:c5:3f:8c:72:65:
1c:0b:70:59:e5:62:21:c4:26:b6:c7:12:1d:07:28:
3d:75:1a:60:3f:84:ff:8c:9e:08:7d:fc:ab:67:61:
65:7d:ec:c4:d7:45:d3:e6:84:b8:bb:f5:45:a3:bc:
c7:86:a2:6b:0c:44:65:ac:16:df:56:e7:68:bb:a0:
70:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5B:40:D6:34:5A:83:5E:95:FE:2D:ED:9C:08:A0:14:74:8D:08:61
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/BltA1jRag16V_i3tnAigFHSNCGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e050::/48
Signature Algorithm: sha256WithRSAEncryption
be:be:84:68:46:46:73:3e:65:37:8c:7f:a0:cf:9d:73:4a:70:
ff:2a:37:d0:ee:7d:3e:1b:c3:b9:88:33:00:bc:90:7b:54:99:
f0:41:c5:ba:79:9d:cf:8e:a6:e3:54:43:58:dc:9c:64:74:f1:
e7:6d:0a:60:dd:6a:b5:d2:97:5e:01:af:ea:8a:0a:09:5b:97:
b0:0a:a8:3d:30:8f:21:20:c8:52:6b:7e:b7:78:84:a1:9d:38:
7a:6c:f2:c9:3a:85:dc:44:c4:38:ee:35:b6:f2:df:a6:0e:7b:
dc:38:f1:7b:65:ab:ca:7c:aa:aa:d6:63:0f:04:08:35:38:52:
e1:43:92:4f:b5:12:d7:80:ea:8c:46:ec:9d:70:7c:96:b1:66:
7f:1f:54:09:57:b5:9f:16:1e:b0:3a:43:2f:4a:17:40:0d:63:
55:24:15:f5:d7:ab:b9:4f:9a:1f:88:6e:b7:b1:81:52:28:e0:
16:27:75:6a:74:98:51:cb:3d:53:4e:b2:21:4f:9d:e5:d1:24:
97:70:22:74:28:d0:8d:aa:5f:64:f8:35:c8:f0:7f:02:a7:a5:
95:6d:64:a0:01:ee:02:0e:fd:17:87:28:fd:0d:dd:7a:3c:97:
0a:56:b6:c5:81:a3:dc:6d:9c:98:ec:3c:73:95:c0:ba:9a:27:
23:af:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:37 2024 by rpki-client on console-fra.rpki-client.org