Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/bJUkf7Cjp-uBKzzu1ULqRmU7gEQ.roa
File: bJUkf7Cjp-uBKzzu1ULqRmU7gEQ.roa (raw, json)
Hash identifier: 9pi8/JRfEIiaiCxwJjN0rdZ8rp1sQFiMFbDGxvFna0s=
Subject key identifier: 6C:95:24:7F:B0:A3:A7:EB:81:2B:3C:EE:D5:42:EA:46:65:3B:80:44
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0187DC9277D724390A3BA1C55E15B1D7A418
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/bJUkf7Cjp-uBKzzu1ULqRmU7gEQ.roa
Signing time: Tue 02 May 2023 13:06:39 +0000
ROA not before: Tue 02 May 2023 13:06:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205413
IP address blocks: 2a0f:5707:ca00::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 13:44:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:92:77:d7:24:39:0a:3b:a1:c5:5e:15:b1:d7:a4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: May 2 13:06:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c95247fb0a3a7eb812b3ceed542ea46653b8044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:78:14:55:87:ea:c5:3f:b8:25:5c:87:fd:98:
26:da:41:f8:50:6f:54:d8:36:a3:65:ca:c5:c8:d1:
be:d7:4b:4c:f3:44:56:bd:6e:96:62:50:ab:e2:dc:
44:2b:ef:c4:45:52:32:d8:ca:7f:c5:6f:1e:07:50:
51:75:4a:f7:a1:af:1b:8b:f8:70:ff:da:f5:64:0e:
f1:df:9a:fa:b9:5b:a4:d3:5c:9c:eb:8a:a0:fb:75:
da:f0:8b:ec:b1:36:66:59:1c:31:a6:92:43:e2:21:
0b:2c:23:13:c5:15:f5:1b:e7:b3:5d:76:80:8c:0e:
42:a7:07:bf:0c:3d:4d:29:7c:7c:75:f8:6d:7b:70:
2a:b0:b4:00:50:c2:65:7c:4c:c2:f7:12:e0:c2:cc:
8d:f5:a6:7d:b2:f9:11:c5:48:aa:42:5e:22:9b:c0:
cf:b6:fb:59:11:c9:22:03:18:2d:52:b5:4d:02:66:
43:16:fb:54:39:7b:6b:a0:dc:d0:56:1c:a9:7b:2b:
f6:aa:67:54:fa:d2:d7:8b:47:b2:81:2a:2e:43:b8:
0c:7e:80:6f:19:33:42:21:5a:f3:96:fc:f0:1c:85:
b7:47:4f:43:58:d0:31:2d:8e:03:6c:b8:b1:5e:55:
dd:ad:3f:f7:5c:c1:11:85:e5:58:ed:ec:1f:c2:ba:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:95:24:7F:B0:A3:A7:EB:81:2B:3C:EE:D5:42:EA:46:65:3B:80:44
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/bJUkf7Cjp-uBKzzu1ULqRmU7gEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ca00::/44
Signature Algorithm: sha256WithRSAEncryption
ad:48:a8:8c:8d:1f:3b:b9:1a:ee:78:1d:45:1d:73:6e:8e:45:
43:27:8b:08:77:2a:1a:e5:18:3f:39:40:98:dd:1d:62:7b:2b:
5f:68:ee:49:d3:ae:ea:23:07:96:b8:73:17:0f:a0:9f:11:35:
3d:8f:d5:77:19:69:69:91:67:a7:82:17:4f:d4:20:ce:8f:ad:
ae:68:ea:b3:7a:16:30:9f:ab:12:47:d5:c6:4e:5c:f5:37:a3:
86:07:93:24:22:38:a4:f7:10:36:d4:66:53:37:33:89:ad:b3:
55:53:97:cc:f9:55:31:69:e2:a1:a0:ef:15:79:3f:b9:63:16:
bb:d8:5d:1c:90:6f:52:b8:5e:94:2f:ea:30:47:c8:c0:24:11:
5a:a0:b4:55:ab:9a:30:49:4d:1a:b0:95:de:86:f6:54:ca:0f:
60:af:c8:d3:fc:f2:2c:e3:5d:e2:7b:9d:ec:bf:a4:9f:d6:7a:
b0:59:9a:a2:c3:66:71:0d:72:58:45:58:99:59:34:0c:0a:1b:
86:97:68:1e:12:e0:01:2b:9d:21:e4:24:27:72:f8:cb:24:38:
ea:b3:22:68:6a:99:95:61:20:50:ca:60:57:cd:b1:a6:58:ac:
3b:52:82:b2:24:54:6f:a5:36:3b:0c:e7:5c:a7:98:94:c7:33:
e3:ce:0e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:59 2024 by rpki-client on console-fra.rpki-client.org