Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bUC0WdTZ8b2MAZ7k7DatDS8WBTc.roa
File: bUC0WdTZ8b2MAZ7k7DatDS8WBTc.roa (raw, json)
Hash identifier: GoP/wBx2IjsmAcqedJu+6Kbrr7eTKQI2I1Jb3jAf4zQ=
Subject key identifier: 6D:40:B4:59:D4:D9:F1:BD:8C:01:9E:E4:EC:36:AD:0D:2F:16:05:37
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B46A6931CAFC340C39D7860BF7CFF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bUC0WdTZ8b2MAZ7k7DatDS8WBTc.roa
Signing time: Sun 01 Jan 2023 18:14:59 +0000
ROA not before: Sun 01 Jan 2023 18:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44364
IP address blocks: 2a09:cc0::/48 maxlen: 48
2a09:9d40::/48 maxlen: 48
2a09:1240::/48 maxlen: 48
2a09:9dc0::/48 maxlen: 48
2a09:4740::/48 maxlen: 48
2a09:a080::/48 maxlen: 48
2a09:9e40::/48 maxlen: 48
2a09:47c0::/48 maxlen: 48
2a09:9cc0::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:46:a6:93:1c:af:c3:40:c3:9d:78:60:bf:7c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d40b459d4d9f1bd8c019ee4ec36ad0d2f160537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:09:31:39:ab:e0:da:0c:66:68:d9:28:fc:
3b:07:45:fd:ac:17:8d:13:34:19:97:1a:ca:ab:59:
d3:48:41:31:6d:8e:8c:f1:b7:7e:00:32:76:46:d7:
1d:02:90:82:76:33:8f:af:45:a5:84:9a:40:57:d8:
36:d5:30:33:c0:f8:7e:88:4d:62:b9:b6:06:50:3d:
c1:43:2d:c3:9e:fb:d9:16:6c:fb:34:f0:aa:37:7b:
ec:8b:c6:2f:6e:b3:a4:b6:7a:1c:a6:34:ba:30:63:
2e:9b:b2:6b:de:6c:32:5e:4c:f0:5c:f5:06:9a:8a:
60:8c:c1:4f:35:d7:d6:20:4a:59:1f:11:b2:31:11:
cc:55:c4:47:2d:b4:2b:05:2a:e8:42:07:1f:93:31:
23:93:f4:cb:c0:ba:f4:fa:64:dd:ff:a1:66:55:72:
37:a3:e7:85:c2:01:26:bd:db:26:33:e2:aa:23:d8:
3f:08:4b:5e:15:f2:13:82:f1:83:a9:63:79:06:8a:
d9:33:6d:bf:7b:ae:bc:b9:96:b3:4a:fb:31:f5:af:
61:b5:2b:41:0a:2f:51:68:eb:d5:17:4f:ea:32:14:
1e:ce:72:be:3d:6d:74:22:67:d4:6c:96:8e:89:cd:
d0:ad:15:f9:57:a6:7d:c7:68:63:4e:2d:25:ad:cb:
8c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:40:B4:59:D4:D9:F1:BD:8C:01:9E:E4:EC:36:AD:0D:2F:16:05:37
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bUC0WdTZ8b2MAZ7k7DatDS8WBTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:cc0::/48
2a09:1240::/48
2a09:4740::/48
2a09:47c0::/48
2a09:9cc0::/48
2a09:9d40::/48
2a09:9dc0::/48
2a09:9e40::/48
2a09:a080::/48
Signature Algorithm: sha256WithRSAEncryption
7b:93:83:86:30:7b:ac:34:b1:bd:dd:0f:f2:46:0a:03:65:c1:
13:ca:ed:1b:d0:72:0e:60:25:8d:8c:92:79:42:30:64:19:34:
11:75:eb:5c:71:12:53:be:86:0b:26:44:84:1b:45:42:7d:af:
67:e8:23:ff:95:b4:c7:8f:ef:3f:46:f7:8f:20:93:4d:03:e7:
e2:1e:fa:c9:7d:9c:8d:a1:11:6d:96:15:f0:57:d8:83:88:37:
99:2c:1d:3d:88:f4:8e:21:0e:bc:ec:4b:b4:69:44:09:e1:31:
7d:46:89:00:e9:0a:fd:ac:49:d9:8b:e8:90:bf:13:25:8a:dd:
26:49:8e:74:1b:9e:3f:f6:7b:66:3a:0f:5c:31:93:60:a1:ed:
a0:6f:68:58:18:8a:ce:27:20:8e:c0:75:f7:63:ca:38:52:de:
4c:d6:9e:8d:7c:86:9f:33:b8:b2:bd:7a:bf:ab:cc:a8:1c:79:
4c:46:36:68:c1:88:9a:bf:30:77:0f:43:3f:d3:7a:dd:8a:4b:
b7:bb:8b:f5:58:80:6c:b4:76:6f:df:db:8a:1b:28:74:4e:b8:
d9:19:2a:f9:49:3f:7b:8c:36:41:01:97:8a:79:3c:71:e3:18:
34:55:a7:34:79:00:18:ce:57:1c:46:96:9a:9c:40:e9:bc:95:
9e:38:6f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:17 2024 by rpki-client on console-fra.rpki-client.org