Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/BSUQOgpaS38KlKu3OkHzkYjJjSo.roa
File: BSUQOgpaS38KlKu3OkHzkYjJjSo.roa (raw, json)
Hash identifier: 6U9i21Z/C80yEUqoWbr+YEyWd7NipvCqt98N2ouM4gI=
Subject key identifier: 05:25:10:3A:0A:5A:4B:7F:0A:94:AB:B7:3A:41:F3:91:88:C9:8D:2A
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 0188B1B0F1E6A0CD0AFD2A814CD4D56A158A
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/BSUQOgpaS38KlKu3OkHzkYjJjSo.roa
Signing time: Mon 12 Jun 2023 22:19:03 +0000
ROA not before: Mon 12 Jun 2023 22:19:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203729
IP address blocks: 2a0b:6b81:210::/48 maxlen: 48
2a0b:6b81:208::/48 maxlen: 48
2a0b:6b81:1::/48 maxlen: 48
2a0b:6b81:205::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b1:b0:f1:e6:a0:cd:0a:fd:2a:81:4c:d4:d5:6a:15:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jun 12 22:19:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0525103a0a5a4b7f0a94abb73a41f39188c98d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:75:c2:12:56:58:c6:c3:21:e6:36:83:92:8d:
05:b4:a6:94:a4:b4:65:e5:64:27:51:aa:9b:16:a3:
bc:a7:79:0e:94:85:29:a0:87:2e:03:a9:86:39:2e:
5c:5d:05:45:fd:d2:5a:35:6b:dc:ff:90:6b:d2:0c:
e7:2b:74:76:2c:a0:95:48:d4:d6:a4:65:17:7b:2b:
b8:6e:7b:8d:26:ee:11:d6:db:c5:0d:63:82:60:53:
b6:8d:27:c3:30:15:53:e7:50:ff:91:d3:8b:79:dd:
4a:a8:a8:87:64:9f:19:1f:c4:16:da:2d:75:09:81:
e3:3d:5e:e5:35:30:7b:44:68:e3:8e:07:fa:b8:a7:
b3:90:78:de:02:6c:64:aa:6c:0d:9a:d2:ac:0c:53:
ee:c0:b0:36:74:b9:e7:f1:85:6d:ab:77:7c:c1:b5:
c3:9f:6e:9e:b0:34:9d:89:3a:9e:9e:9e:a0:02:cc:
5c:a1:bb:4a:0d:d4:fa:6e:e5:1d:78:52:96:d2:d7:
f7:6e:bd:8c:11:24:48:d8:2f:6e:04:9f:6f:2f:08:
6f:f0:20:46:0d:50:53:92:d9:9d:f8:4a:28:d4:b2:
6b:21:28:3c:01:e7:bb:30:91:b3:11:87:eb:ef:c5:
dc:a0:69:fa:21:d4:27:90:39:f2:a4:19:cb:eb:6a:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:10:3A:0A:5A:4B:7F:0A:94:AB:B7:3A:41:F3:91:88:C9:8D:2A
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/BSUQOgpaS38KlKu3OkHzkYjJjSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b81:1::/48
2a0b:6b81:205::/48
2a0b:6b81:208::/48
2a0b:6b81:210::/48
Signature Algorithm: sha256WithRSAEncryption
64:91:f5:d0:12:7b:c8:cf:27:93:d3:b7:3f:af:7a:a4:2c:0e:
cd:ff:1d:cb:a5:4a:c2:fb:be:c3:b1:5a:c1:41:d9:35:7f:23:
68:fc:1c:67:88:48:4a:00:3d:e3:d3:85:32:1a:16:bd:8a:4c:
f9:91:ab:89:b7:3b:07:9f:21:d7:20:b5:64:42:06:c2:dd:af:
96:3d:81:4d:56:df:38:8d:c1:98:91:7f:f3:6e:b5:a0:ff:ac:
3e:eb:41:93:d1:97:bb:bd:dc:68:59:e5:2c:11:d0:f7:fc:6b:
51:af:fe:86:de:54:62:9a:c0:b5:69:b1:45:59:35:4d:4c:77:
57:bc:73:ef:1e:7f:5a:11:fe:30:50:b2:df:bb:e0:7f:bb:fb:
d2:0c:36:19:ae:04:cc:1b:e5:a0:22:0a:80:99:82:50:9d:e4:
8b:e9:85:48:d0:41:ee:45:e2:38:78:72:36:ca:20:f4:62:18:
14:69:b4:19:98:4c:f6:e6:2e:35:c3:5b:77:5f:96:20:e7:62:
d1:b0:c1:7a:68:1f:58:0b:aa:62:08:be:cf:5e:82:f9:73:c2:
5a:96:5f:e8:6e:ee:25:3b:b7:2d:6b:8e:09:81:7c:17:18:72:
e8:8b:66:7e:86:a2:9a:9c:30:4f:67:aa:38:19:11:5e:c4:42:
fe:65:8d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:02 2024 by rpki-client on console-ams.rpki-client.org