Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bsd_g2zUp4eZTjoTyFjIBOZWItk.roa
File: bsd_g2zUp4eZTjoTyFjIBOZWItk.roa (raw, json)
Hash identifier: 1is0nXnzFfYWLj6XnnM5GQm88MD0Hq1a1gwlTDUezKE=
Subject key identifier: 6E:C7:7F:83:6C:D4:A7:87:99:4E:3A:13:C8:58:C8:04:E6:56:22:D9
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 01916679F35A193EC6FA040D74B6B35B5B53
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bsd_g2zUp4eZTjoTyFjIBOZWItk.roa
Signing time: Sun 18 Aug 2024 17:12:33 +0000
ROA not before: Sun 18 Aug 2024 17:12:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 18 Aug 2024 18:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:66:79:f3:5a:19:3e:c6:fa:04:0d:74:b6:b3:5b:5b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 18 17:12:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ec77f836cd4a787994e3a13c858c804e65622d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:8e:5d:c9:b8:3a:47:0c:16:09:55:92:11:
32:7c:33:ab:55:bb:d8:d8:b8:74:36:fd:7f:ce:20:
d0:0b:12:9e:2e:51:a4:c0:36:22:f4:ab:e7:aa:35:
d1:0d:0e:f3:5b:05:06:cb:77:05:b4:26:da:3e:58:
dd:d4:bd:97:33:a0:25:9f:28:d8:33:f7:92:1e:22:
7e:b9:ef:0a:dc:d3:b5:c6:90:97:b8:49:67:c5:14:
67:0b:6b:0a:39:61:39:a0:07:d5:65:af:20:8b:6c:
c3:66:e9:d1:7b:fa:ed:46:0c:6e:84:db:a3:d4:ba:
a4:99:1c:08:90:d4:68:02:81:8f:fb:03:0e:a9:a6:
a5:15:b4:d9:a2:c1:ee:ef:54:fd:7c:ab:3f:ac:d5:
67:b8:c3:76:98:91:0d:f8:f8:55:58:9a:74:55:36:
85:d7:4d:ab:bb:52:98:dd:61:c7:75:6a:60:f0:dd:
f1:a0:df:64:94:4c:ab:8b:8d:4e:ca:ce:9d:99:83:
bd:df:1b:a7:53:98:a6:37:a1:e1:6c:8c:15:00:f9:
76:31:c5:f7:d5:a6:57:b1:da:c6:28:f9:e5:32:19:
0a:21:25:d5:8d:4e:19:72:ea:74:98:13:09:99:76:
ab:d6:04:18:5b:3b:2e:1b:ff:d0:7e:54:53:f0:67:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:7F:83:6C:D4:A7:87:99:4E:3A:13:C8:58:C8:04:E6:56:22:D9
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/bsd_g2zUp4eZTjoTyFjIBOZWItk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
38:21:7d:e4:b2:63:de:5b:c3:dc:06:d5:74:cd:d2:4b:36:49:
ae:da:3a:43:3e:3d:7b:dd:d6:c2:bf:1f:3f:b7:39:88:ae:d1:
e5:ff:a3:00:c0:2d:48:0e:b3:4e:3b:3a:c8:2b:1b:f9:cc:c6:
84:04:89:b5:34:55:b3:6c:b8:90:4e:46:36:68:fd:ea:88:43:
83:ff:48:9e:0e:c8:26:fb:b1:85:49:0a:ce:5a:13:56:1d:b2:
7a:e8:d7:ba:ef:53:5c:f3:81:9c:12:e1:8a:c7:51:49:33:63:
bd:f6:2f:18:cd:d4:41:54:20:ef:4e:4d:d9:86:95:58:83:18:
0c:17:73:ec:a1:83:b1:8b:a1:c1:ab:b7:58:7f:80:40:a9:0e:
ce:2e:f8:1a:84:1b:0e:73:80:cc:7f:90:dc:89:3b:b2:08:6b:
6f:e6:1f:b7:a3:10:84:63:e6:5f:55:13:a4:68:1d:c3:c6:ae:
f9:98:3f:ef:48:c4:1c:39:64:71:e1:41:05:95:06:93:46:e0:
2b:d6:1d:06:4e:7b:9e:6f:98:07:2d:6e:db:74:51:97:0e:5b:
a8:f9:90:b1:56:ed:6e:09:42:6a:55:d2:04:7f:07:45:b1:04:
f0:db:a2:f1:5a:b2:24:10:d6:f4:e1:08:d8:2e:78:36:ad:c4:
ce:0c:b8:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:14 2025 by rpki-client