Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BtNWZ3oQyRV_M8cvXSEiycxN8Kg.roa
File: BtNWZ3oQyRV_M8cvXSEiycxN8Kg.roa (raw, json)
Hash identifier: 57q+kQzaPmo4HtkjF7zgmIWF1iB87IYInRujUFrZ2jE=
Subject key identifier: 06:D3:56:67:7A:10:C9:15:7F:33:C7:2F:5D:21:22:C9:CC:4D:F0:A8
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018A92C2BB62F1C95C3348CABDC73E352F19
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BtNWZ3oQyRV_M8cvXSEiycxN8Kg.roa
Signing time: Thu 14 Sep 2023 08:15:50 +0000
ROA not before: Thu 14 Sep 2023 08:15:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205227
IP address blocks: 2a03:b2c0::/29 maxlen: 29
2a0d:df40::/29 maxlen: 29
2a0e:be00::/29 maxlen: 29
2a07:6080::/29 maxlen: 29
2a09:7240::/29 maxlen: 29
2a09:9c0::/29 maxlen: 29
2a09:a780::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:92:c2:bb:62:f1:c9:5c:33:48:ca:bd:c7:3e:35:2f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Sep 14 08:15:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06d356677a10c9157f33c72f5d2122c9cc4df0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0e:89:3b:b4:58:e9:ba:cf:b0:c4:9a:01:f4:
ab:b5:8a:24:b3:6e:7f:12:ab:37:00:30:df:3c:89:
0a:69:f5:e1:27:53:6c:8c:c4:cf:c5:62:16:42:ef:
d9:52:e9:8f:b8:f1:48:39:82:6b:da:0f:96:1c:a7:
b7:e5:03:be:c3:eb:00:8e:83:7f:17:de:ee:5c:02:
91:72:71:15:01:3e:81:4d:88:84:0c:c5:a2:29:16:
0e:e9:ce:63:00:ea:8a:9a:e8:87:2d:f5:c0:b7:40:
25:80:7b:50:9f:e6:66:0d:19:a3:49:88:e6:7d:32:
57:f1:b0:5f:cb:ca:94:cb:cf:a8:84:54:e3:b1:3d:
0d:96:98:39:8a:ee:c1:ed:f0:42:e9:50:b4:26:22:
72:c4:e7:2f:cd:48:19:0f:19:6e:55:02:1d:59:8f:
33:bb:de:8e:5c:6e:ef:cb:50:9c:f0:5f:fb:e8:cd:
9c:62:5d:0d:01:9c:a3:ce:76:8e:99:b0:60:e1:15:
c4:74:a4:9f:96:82:d1:85:36:03:7d:aa:44:09:b4:
65:d0:72:50:12:4d:c5:37:b9:9d:c7:68:e9:c3:85:
9c:ce:a5:4f:48:05:d6:74:45:0b:6c:eb:75:41:d4:
9d:38:a2:dc:08:12:bd:20:db:6b:d4:a8:4e:7c:40:
ed:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:56:67:7A:10:C9:15:7F:33:C7:2F:5D:21:22:C9:CC:4D:F0:A8
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BtNWZ3oQyRV_M8cvXSEiycxN8Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:b2c0::/29
2a07:6080::/29
2a09:9c0::/29
2a09:7240::/29
2a09:a780::/29
2a0d:df40::/29
2a0e:be00::/29
Signature Algorithm: sha256WithRSAEncryption
4c:ee:4a:e7:25:60:5b:ee:75:42:56:9e:83:37:75:d9:eb:f1:
76:9e:fe:48:cd:19:3a:a2:b4:9b:33:c9:2c:53:28:9b:71:12:
55:be:3a:f1:bd:03:20:9d:08:29:37:23:e9:cd:e4:de:f2:fd:
3d:50:49:43:5d:61:6c:ad:42:18:a1:bf:10:57:5b:c6:5b:e7:
18:b1:f4:dc:b3:bf:d7:ce:57:63:eb:51:b1:02:3e:24:b5:18:
0d:b0:97:f4:d3:e6:01:b3:83:3f:0c:e0:0a:a4:68:5e:3f:12:
4d:4c:7d:73:6d:5d:d7:78:33:9f:31:7d:94:bd:a5:38:a2:9a:
45:d2:ea:db:fa:02:97:0e:1d:0a:0c:ca:0b:94:0f:9a:09:de:
1c:57:72:d8:00:95:d5:4b:4c:7c:dc:3a:e6:69:c4:9d:8d:bf:
37:45:f5:e8:83:51:95:b5:7b:23:09:2b:48:f6:83:cf:fd:d1:
f9:66:29:20:4d:d8:28:71:a2:8c:16:5e:f9:8f:b4:90:5e:6a:
d0:7c:17:d1:a1:60:22:63:d2:b0:85:35:dd:5f:e3:ae:1a:7c:
24:2d:31:68:ef:6e:df:a6:0a:cd:fd:9c:f4:6d:30:14:3d:a5:
a5:c3:30:90:56:6f:58:1a:f4:f6:02:7e:cb:ad:f2:d9:a9:b2:
5c:5f:58:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 17 14:00:00 2023 by rpki-client on console-fra.rpki-client.org