Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/7aaPKNCH7_-kNrTNbDcpri_xYyk.roa
File: 7aaPKNCH7_-kNrTNbDcpri_xYyk.roa (raw, json)
Hash identifier: IgpsG2+ATIGISWEMshopK8PTJzLZhPrts1VhKOPOW1k=
Subject key identifier: ED:A6:8F:28:D0:87:EF:FF:A4:36:B4:CD:6C:37:29:AE:2F:F1:63:29
Certificate issuer: /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial: 0185724C76FA2CF72F302DCE43F9CD3D5F30
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/7aaPKNCH7_-kNrTNbDcpri_xYyk.roa
Signing time: Mon 02 Jan 2023 11:44:51 +0000
ROA not before: Mon 02 Jan 2023 11:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a01:bb22::/33 maxlen: 33
2a01:bb22:8000::/33 maxlen: 33
2a01:bb23:8000::/33 maxlen: 33
2a01:bb23::/33 maxlen: 33
2a01:bb24::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 08:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:76:fa:2c:f7:2f:30:2d:ce:43:f9:cd:3d:5f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Validity
Not Before: Jan 2 11:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda68f28d087efffa436b4cd6c3729ae2ff16329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:44:07:8a:ef:88:8c:3b:b5:dc:f0:f5:66:00:
71:97:62:2d:85:1a:e2:2e:ff:07:cb:7b:9e:08:ef:
26:91:98:76:a7:38:54:9d:f8:1d:17:46:21:89:e0:
34:3b:24:40:27:09:7e:da:49:d7:c1:92:7c:6b:88:
f5:3e:70:bd:77:2b:c3:94:48:93:79:0a:82:d6:cf:
b3:64:2a:f8:90:3a:5b:f8:fc:4a:d1:bc:48:f1:ef:
2a:2b:de:f1:3f:3e:07:5f:88:ec:4f:e9:3f:50:19:
b0:c3:2e:bb:fd:39:86:ed:e7:26:3a:ac:a2:6d:6e:
03:98:89:58:3e:b6:ed:91:81:61:b8:82:d9:5f:26:
43:1a:3a:e4:65:23:f0:c1:d3:4e:a7:61:93:4d:c0:
72:f7:cf:b0:64:7f:2d:56:6b:b9:f0:b0:83:90:50:
06:57:82:da:c5:91:4b:40:bd:cc:de:39:f7:eb:28:
97:15:2b:d5:69:a6:4e:9d:85:e4:37:13:51:76:08:
af:3a:fd:f7:3a:2f:3d:f6:ed:48:14:b9:e8:48:12:
75:7c:da:b0:5f:07:4d:71:08:5b:d5:e1:cf:48:96:
15:92:89:f5:fc:66:4d:bd:12:a7:b4:98:9e:15:31:
f0:57:01:8a:f1:34:43:86:9e:32:a0:0b:e4:aa:ca:
39:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A6:8F:28:D0:87:EF:FF:A4:36:B4:CD:6C:37:29:AE:2F:F1:63:29
X509v3 Authority Key Identifier:
keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/7aaPKNCH7_-kNrTNbDcpri_xYyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:bb22::-2a01:bb24:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
57:88:3c:b7:2f:c6:0d:ba:b8:ad:df:8b:cf:af:9b:99:8d:69:
5f:30:7d:5c:f6:a8:69:ae:84:27:57:5d:4b:2d:b2:af:cc:8d:
b0:f0:e2:55:39:70:cb:2f:87:97:f1:de:e0:a5:37:a2:12:22:
ee:b8:8a:c4:f0:77:19:23:9d:f5:8b:1e:df:73:a6:95:50:28:
c3:9e:aa:8d:67:92:a3:37:67:98:9f:80:09:15:86:48:75:a4:
0f:fb:21:6c:e4:7c:36:af:5b:6e:84:9c:f5:a8:fc:41:50:03:
1e:aa:3d:ae:54:4b:77:65:0e:a5:c2:b0:d4:5b:ec:42:77:1d:
52:23:bd:1e:88:10:a8:af:16:ab:d3:7d:01:c0:a8:ad:ac:b8:
6e:28:2e:72:b4:ee:19:09:b7:e8:e4:8a:ec:ce:19:01:ca:48:
90:1f:cd:81:b9:44:10:cc:88:46:59:26:c6:3e:ff:8c:83:c2:
b3:5e:64:a6:d3:ab:a0:4f:72:8e:a2:2c:b0:b9:78:dc:a3:77:
86:dc:70:ae:b2:59:aa:39:f2:fe:2e:5c:01:5f:f7:4d:97:49:
81:eb:2f:f7:d2:98:f5:e4:9e:76:e0:20:21:c2:39:47:8a:18:
32:86:86:fe:26:b7:a1:de:64:f9:1e:b9:5a:43:e7:67:64:db:
c2:f9:c7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:32 2024 by rpki-client on console-ams.rpki-client.org