Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BcD_E7_Rrisv7vykXx--KSg9jFo.roa
File: BcD_E7_Rrisv7vykXx--KSg9jFo.roa (raw, json)
Hash identifier: Nr803cu1JLRwZxoSiynyh1OJcbVTFLI9Vul7xW7ZSHg=
Subject key identifier: 05:C0:FF:13:BF:D1:AE:2B:2F:EE:FC:A4:5F:1F:BE:29:28:3D:8C:5A
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018571C3248B4EF252A3948C0780AF25ADDB
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BcD_E7_Rrisv7vykXx--KSg9jFo.roa
Signing time: Mon 02 Jan 2023 09:14:52 +0000
ROA not before: Mon 02 Jan 2023 09:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208872
IP address blocks: 2a06:e881:6600::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:24:8b:4e:f2:52:a3:94:8c:07:80:af:25:ad:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 09:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05c0ff13bfd1ae2b2feefca45f1fbe29283d8c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0c:82:94:c1:05:34:79:57:fa:d0:15:90:29:
e8:e8:94:a2:5b:c7:c0:24:79:4b:88:33:ca:25:3d:
f3:3c:0c:37:94:de:2f:7f:db:cf:fe:c4:fc:0f:40:
48:4f:c1:1a:ac:8a:8c:64:6d:f9:62:c8:7b:e3:6e:
bf:91:12:66:af:0e:82:f2:fe:c4:3a:d2:72:b2:16:
96:47:5a:fe:30:0e:bd:52:d2:70:02:be:d8:d1:0c:
e2:6a:dc:ff:21:5a:cc:53:dc:35:0c:c8:38:f8:75:
f8:71:c7:2a:db:51:af:94:c8:8c:e8:36:a6:db:b3:
f3:ae:e8:88:cf:0d:4c:41:40:e0:19:61:30:a2:5b:
1b:55:37:9a:9c:10:32:aa:19:5e:8e:40:7c:87:5e:
9c:57:5d:02:69:44:3f:fb:a9:bc:af:70:bb:f8:10:
c7:33:f1:4b:d8:f0:88:d0:85:9d:d6:ff:97:d9:6d:
6b:33:c3:30:30:65:ba:26:ba:39:5d:cd:e4:e5:02:
9c:11:4b:4d:f6:37:7e:a1:e1:d1:25:91:1f:48:e5:
40:65:bd:60:af:86:e5:ec:6e:55:87:8f:8a:81:df:
c4:a5:08:09:e4:53:a0:76:64:19:16:8e:67:d9:37:
73:2e:05:05:4a:81:18:6e:38:55:dd:a7:7f:7b:86:
bd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C0:FF:13:BF:D1:AE:2B:2F:EE:FC:A4:5F:1F:BE:29:28:3D:8C:5A
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/BcD_E7_Rrisv7vykXx--KSg9jFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6600::/44
Signature Algorithm: sha256WithRSAEncryption
49:98:55:17:b6:15:11:35:fc:5e:c1:75:82:3d:92:4d:73:10:
0f:e1:d8:5d:ab:10:fa:5e:47:80:03:e5:76:cd:bf:fc:c1:0b:
3c:69:e9:5e:5e:e2:72:e6:e7:2f:79:ea:64:cd:ba:76:66:1f:
7d:52:d2:7c:04:cc:60:da:53:7f:ac:98:e9:bf:20:5d:71:5e:
5b:b4:30:27:2e:47:f4:12:1d:63:c5:c2:d0:da:95:68:86:d1:
94:9e:83:c6:64:07:2f:7f:fb:eb:89:d4:b4:18:f6:5f:9f:9b:
27:e2:2a:01:ec:fd:70:10:43:5d:f9:f8:bf:9d:9b:98:6c:39:
0e:af:23:04:c2:d3:60:1c:06:37:b8:2d:f1:5b:46:28:56:7e:
fa:e6:38:03:5a:c2:aa:f5:ed:29:69:11:87:ff:12:13:14:49:
d2:f7:bc:ef:c5:57:96:23:58:74:27:fc:2a:9d:49:e5:38:ca:
af:c3:9d:b6:02:9c:26:0d:b9:59:02:0d:d4:a1:38:15:0d:c9:
89:16:0d:10:22:aa:ab:3c:4f:8d:72:8f:2e:38:c3:1b:28:bb:
8d:bf:09:22:ee:f9:d8:d6:ad:fb:2c:66:3a:19:b0:69:09:18:
e7:a8:2b:4d:fa:e5:57:bb:3a:bc:81:14:4f:09:8a:88:66:61:
d1:a5:cd:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:38 2024 by rpki-client on console-fra.rpki-client.org