Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/ccbuLuNHon_BWrlSMLdNpc1v77s.roa
File: ccbuLuNHon_BWrlSMLdNpc1v77s.roa (raw, json)
Hash identifier: H5Zg7Ytmexgd+QflPYHeobJsWCVBQ1+2XQFI3varbNs=
Subject key identifier: 71:C6:EE:2E:E3:47:A2:7F:C1:5A:B9:52:30:B7:4D:A5:CD:6F:EF:BB
Certificate issuer: /CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Certificate serial: 0185701531211CB4B9265064113F8EE6E031
Authority key identifier: B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/ccbuLuNHon_BWrlSMLdNpc1v77s.roa
Signing time: Mon 02 Jan 2023 01:25:14 +0000
ROA not before: Mon 02 Jan 2023 01:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29551
IP address blocks: 2001:678:4a8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:31:21:1c:b4:b9:26:50:64:11:3f:8e:e6:e0:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b81bb21b5c1889030d365a549f21d5b426f9dda8
Validity
Not Before: Jan 2 01:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71c6ee2ee347a27fc15ab95230b74da5cd6fefbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:98:db:dc:93:71:1b:ad:ac:36:3a:12:8c:46:
1f:9f:c1:8a:1a:39:f5:f9:bd:78:a1:89:00:95:f7:
4d:3c:0b:39:67:6a:5d:4f:ef:9f:a0:4e:83:44:4f:
85:42:df:51:37:10:00:d0:dc:89:8d:59:54:08:9a:
dd:36:d9:bf:c7:06:99:89:96:92:7d:84:9e:c0:d5:
b9:6b:49:dd:c1:ed:3d:0b:6c:af:38:cd:0b:75:ca:
d6:b7:99:b5:64:f3:ee:a3:65:d8:87:71:b7:ae:cb:
0a:85:53:8a:ae:62:09:fa:58:d3:3c:f1:3c:c7:5e:
1c:af:d6:99:f2:fe:3b:94:75:9e:e2:f6:a4:c0:74:
aa:6c:49:e6:a6:0a:0e:b5:ab:fa:10:d0:29:65:6e:
0e:d5:b3:41:91:44:74:b9:27:91:d7:11:c9:15:4e:
06:42:2e:ca:40:0d:44:25:47:b3:50:be:d9:3e:a8:
4f:52:64:b6:0e:0d:95:7e:05:83:a7:35:4b:58:fc:
65:86:82:e5:54:c0:ea:70:27:ed:a1:cf:c2:c0:f3:
e2:82:8e:8e:7b:7b:35:77:49:4e:0a:1b:77:c2:50:
b8:ff:bf:61:95:5f:4b:1d:a7:fc:90:97:6b:d7:81:
28:00:19:a8:44:75:58:94:3f:74:42:8b:90:05:30:
db:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:C6:EE:2E:E3:47:A2:7F:C1:5A:B9:52:30:B7:4D:A5:CD:6F:EF:BB
X509v3 Authority Key Identifier:
keyid:B8:1B:B2:1B:5C:18:89:03:0D:36:5A:54:9F:21:D5:B4:26:F9:DD:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBuyG1wYiQMNNlpUnyHVtCb53ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/ccbuLuNHon_BWrlSMLdNpc1v77s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/0a96c9-18ea-4753-a2c5-ac9acd352842/1/uBuyG1wYiQMNNlpUnyHVtCb53ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4a8::/48
Signature Algorithm: sha256WithRSAEncryption
b7:e8:57:b0:3c:db:51:49:ff:6c:70:9a:d7:28:69:48:73:82:
95:be:19:5e:77:00:5c:d2:81:b4:7b:83:6d:f5:d4:d9:97:02:
2f:c5:21:35:ed:a9:7c:7b:ed:7a:20:52:f2:95:f7:7b:aa:4b:
57:4b:d8:b1:99:31:1e:a4:91:e0:68:74:a4:dd:61:b8:bc:d0:
d0:ac:07:94:46:10:44:66:24:13:84:57:ba:a5:41:eb:19:dd:
a0:56:1f:11:84:60:1d:35:db:77:e6:ea:c6:02:7a:c9:59:c2:
8f:8d:a7:1f:42:71:80:a6:47:f4:9e:3f:6b:0f:91:3f:1e:c3:
c4:8a:fc:f2:ab:af:8e:df:5c:1d:a8:ba:e7:0c:41:c9:09:37:
fb:5d:6e:19:9d:6a:aa:14:7d:d8:d4:5f:f6:19:9b:ed:db:e2:
da:6a:ea:5c:fb:90:3a:fe:bf:0e:97:7e:23:ff:fe:0e:20:fc:
98:2a:e7:7e:71:3e:b2:d3:96:03:ec:a1:bf:ce:dd:02:27:09:
c5:a3:c4:d6:b7:52:53:1c:a2:0e:b3:3b:45:04:a7:fb:07:c5:
04:7b:fa:72:2d:ab:06:bb:9e:48:38:be:ef:c3:ad:ce:be:16:
39:d8:45:9d:81:44:cc:1f:eb:07:52:d0:59:fa:c8:9a:5d:70:
35:00:38:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:39 2024 by rpki-client on console-fra.rpki-client.org