Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bUGBBGj8x5lZ8F_XEPx090dbXnM.roa
File: bUGBBGj8x5lZ8F_XEPx090dbXnM.roa (raw, json)
Hash identifier: 8hC/JFJdtaIz6YW9qsfdPb/c5y7pD13MIDJycfn0kz8=
Subject key identifier: 6D:41:81:04:68:FC:C7:99:59:F0:5F:D7:10:FC:74:F7:47:5B:5E:73
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018B4645E03BA8A17EC243B3E0FAFF046C1B
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bUGBBGj8x5lZ8F_XEPx090dbXnM.roa
Signing time: Thu 19 Oct 2023 04:51:06 +0000
ROA not before: Thu 19 Oct 2023 04:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208958
IP address blocks: 2a06:e881:650a::/48 maxlen: 48
2a06:e881:6500::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:46:45:e0:3b:a8:a1:7e:c2:43:b3:e0:fa:ff:04:6c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Oct 19 04:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d41810468fcc79959f05fd710fc74f7475b5e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:24:05:5c:e0:b0:28:30:b7:f9:44:93:30:14:
1c:2c:13:42:9f:6b:dd:0f:e7:73:a7:c2:2d:90:44:
a6:ae:79:2f:69:1a:62:a1:55:41:90:20:10:5e:a4:
79:b0:21:f9:6b:ff:1f:6d:7c:c3:1d:62:9b:53:03:
73:76:33:3b:aa:bb:3a:57:ce:cf:ec:44:51:ae:c9:
47:cb:b6:48:c2:a9:d8:51:4b:0f:38:d2:41:6e:a7:
2c:ae:e5:b6:d1:3e:c0:0f:2d:df:78:d0:a1:43:a9:
ed:0d:62:c9:c6:18:bd:9f:cd:f2:2c:33:c1:81:1e:
e7:00:96:44:ac:1c:f5:14:0b:a1:0a:52:27:aa:6f:
47:92:7b:f6:5f:2d:3e:34:ea:c8:98:7c:07:ca:85:
f9:26:dd:e3:36:2b:60:e4:c2:d4:d5:81:1d:3c:a9:
c8:4b:e6:7e:97:88:1c:f6:a0:e6:01:c5:87:56:94:
71:7e:21:5c:79:2c:78:8e:e2:3d:2b:79:6c:1d:17:
c0:f0:aa:23:9e:ad:cb:c6:68:58:54:67:01:b1:a6:
5c:25:07:e6:2a:cf:46:53:62:31:08:bf:79:f2:5b:
00:33:cf:93:61:0e:f6:1d:03:81:41:c5:e5:73:d2:
d8:b8:55:42:6a:eb:e2:ac:a4:44:22:dc:96:a6:8d:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:41:81:04:68:FC:C7:99:59:F0:5F:D7:10:FC:74:F7:47:5B:5E:73
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bUGBBGj8x5lZ8F_XEPx090dbXnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:6500::/44
Signature Algorithm: sha256WithRSAEncryption
b0:2b:78:46:b7:af:83:c3:a4:d0:40:75:ce:30:d8:4a:5e:1c:
f2:ea:dd:7a:53:d7:76:5f:d3:50:8c:1a:bf:f7:aa:08:44:44:
69:ba:b6:b8:25:83:1b:bf:98:68:eb:65:fc:06:93:8f:8b:d1:
1a:a5:5e:7f:7a:96:96:a5:30:18:b5:e1:66:f0:2f:a3:be:e7:
d2:39:ec:45:92:c2:5f:c8:b7:86:e5:3c:31:30:1c:e2:c8:e4:
82:dd:d4:02:be:d9:2f:53:8c:28:28:f6:56:2f:90:25:2c:f5:
29:9c:7c:d8:9a:ce:fb:5d:bc:66:9c:64:13:b5:b1:32:25:15:
d1:59:70:51:07:45:44:be:85:fd:e7:fa:c6:aa:ac:aa:8c:7e:
78:35:f2:26:e1:86:8c:54:ad:cf:08:90:58:c9:d8:09:bf:90:
34:b2:11:cb:c8:61:ac:1d:ce:b1:21:d7:22:55:2e:58:a3:b9:
bf:e1:f1:56:d2:0e:cc:f5:01:23:61:7e:36:bf:b2:ab:e5:7b:
8b:b5:e4:cf:2d:9d:75:a8:61:c7:47:ba:c5:0f:b3:c6:ab:19:
d8:12:6a:e3:e3:a2:c8:97:47:92:12:c1:57:00:c3:f2:93:8b:
84:f6:f8:12:a8:c7:25:1e:8b:b7:66:0c:a5:95:28:2a:35:93:
09:e5:57:c6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYtGReA7qKF+wkOz4Pr/BGwbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl
ZDc5NTQwHhcNMjMxMDE5MDQ1MTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDQxODEwNDY4ZmNjNzk5NTlmMDVmZDcxMGZjNzRmNzQ3NWI1ZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSQFXOCwKDC3+USTMBQcLBNCn2vd
D+dzp8ItkESmrnkvaRpioVVBkCAQXqR5sCH5a/8fbXzDHWKbUwNzdjM7qrs6V87P
7ERRrslHy7ZIwqnYUUsPONJBbqcsruW20T7ADy3feNChQ6ntDWLJxhi9n83yLDPB
gR7nAJZErBz1FAuhClInqm9Hknv2Xy0+NOrImHwHyoX5Jt3jNitg5MLU1YEdPKnI
S+Z+l4gc9qDmAcWHVpRxfiFceSx4juI9K3lsHRfA8Kojnq3LxmhYVGcBsaZcJQfm
Ks9GU2IxCL958lsAM8+TYQ72HQOBQcXlc9LYuFVCauvirKREItyWpo3AlQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG1BgQRo/MeZWfBf1xD8dPdHW15zMB8GA1UdIwQY
MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt
M2Q5MWVkZTViMmIxLzEvYlVHQkJHajh4NWxaOEZfWEVQeDA5MGRiWG5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx
LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogWUA
MA0GCSqGSIb3DQEBCwUAA4IBAQCwK3hGt6+Dw6TQQHXOMNhKXhzy6t16U9d2X9NQ
jBq/96oIRERpura4JYMbv5ho62X8BpOPi9EapV5/epaWpTAYteFm8C+jvufSOexF
ksJfyLeG5TwxMBziyOSC3dQCvtkvU4woKPZWL5AlLPUpnHzYms77XbxmnGQTtbEy
JRXRWXBRB0VEvoX95/rGqqyqjH54NfIm4YaMVK3PCJBYydgJv5A0shHLyGGsHc6x
IdciVS5Yo7m/4fFW0g7M9QEjYX42v7Kr5XuLteTPLZ11qGHHR7rFD7PGqxnYEmrj
46LIl0eSEsFXAMPyk4uE9vgSqMclHou3ZgyllSgqNZMJ5VfG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:40 2024 by rpki-client on console-ams.rpki-client.org