Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BT4p3PbezEq5aSFHFoe70gyvWHI.roa
File: BT4p3PbezEq5aSFHFoe70gyvWHI.roa (raw, json)
Hash identifier: bUPQMvZtPuizZIoJbkDZnKt/DAKJQMrG+uqX8C4T4r8=
Subject key identifier: 05:3E:29:DC:F6:DE:CC:4A:B9:69:21:47:16:87:BB:D2:0C:AF:58:72
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018571BA34664818FF86F00698C53B1A0A11
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BT4p3PbezEq5aSFHFoe70gyvWHI.roa
Signing time: Mon 02 Jan 2023 09:05:06 +0000
ROA not before: Mon 02 Jan 2023 09:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209209
IP address blocks: 2a11:2307::/37 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:34:66:48:18:ff:86:f0:06:98:c5:3b:1a:0a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 2 09:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=053e29dcf6decc4ab96921471687bbd20caf5872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9a:95:21:ac:08:f3:c4:da:5f:e1:48:62:19:
77:77:60:75:8b:de:bd:0c:52:f2:6c:3c:ee:68:ce:
f0:a2:2c:e9:1c:a4:e4:cc:9f:5e:f4:cf:ce:fb:3f:
92:e8:0f:0a:82:c9:01:7c:88:b3:ba:f9:0b:9d:19:
e4:88:70:1c:a9:35:03:74:b5:35:d4:dc:75:2a:42:
a6:ae:44:32:0b:f5:cb:6a:06:9c:29:b9:13:b2:f0:
4b:d9:9a:1f:1b:cc:7f:18:e3:6a:20:9a:86:c3:ae:
9b:ad:ad:71:c3:97:06:b2:e7:e3:98:37:c0:67:46:
96:cc:6e:40:90:6b:8b:73:c2:61:91:6c:93:5a:24:
98:38:50:c5:bf:0c:ef:d8:05:bd:a5:c3:44:ce:3e:
43:e5:0c:0d:5b:f0:02:31:6a:78:50:13:38:7d:05:
7d:e0:07:b2:12:00:e3:82:81:8c:b6:e8:b2:90:bc:
9f:71:8a:64:6c:b5:5d:7e:e2:b6:51:78:cd:8c:97:
ae:03:99:98:ad:3c:92:33:f3:96:03:4e:e4:9c:a8:
5f:1d:f4:57:88:06:40:33:e0:4f:ba:19:bd:04:db:
2c:aa:5b:c7:d5:dd:f7:5d:e0:62:a3:0c:e6:d1:97:
86:80:ae:0b:f6:a0:73:7b:40:72:6c:56:61:8f:bd:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:29:DC:F6:DE:CC:4A:B9:69:21:47:16:87:BB:D2:0C:AF:58:72
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/BT4p3PbezEq5aSFHFoe70gyvWHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:2307::/37
Signature Algorithm: sha256WithRSAEncryption
61:5b:fd:09:76:21:d2:53:bd:d6:43:45:3f:1a:c9:13:26:78:
3a:c7:db:b5:4e:90:47:fe:2a:f5:10:0a:88:72:d6:fd:3b:09:
c2:f0:26:4c:23:6e:2a:e0:03:d3:77:9d:95:a7:39:96:67:2b:
33:36:08:ff:52:f0:25:83:f3:3e:26:6e:4f:41:cf:82:5a:85:
a2:3b:c6:30:e6:c7:76:d4:75:69:63:22:e0:f6:82:00:3f:99:
71:f9:5c:9c:c0:3a:7e:bf:64:50:97:ea:e2:d4:92:7b:33:2a:
a4:be:28:e5:b1:26:33:f3:ab:96:ce:35:31:f6:8a:57:cc:2d:
47:25:08:6f:6c:dd:8d:3c:79:e2:4a:0a:4a:aa:53:14:c2:62:
c9:28:9d:91:f5:eb:eb:96:56:dc:4c:19:fa:1a:66:56:fe:94:
76:e4:09:16:ff:0c:93:37:b6:4d:76:7e:10:63:cf:78:0c:2d:
18:b6:9e:3d:4f:da:40:58:e8:06:4b:95:e5:ca:fe:9b:b4:c1:
d7:32:11:e5:bf:5e:49:52:46:68:b7:5c:68:f3:27:a0:7e:05:
93:23:68:24:7e:fa:e5:94:d4:15:5b:21:e4:e0:16:d3:02:e1:
61:83:67:c4:2a:04:b6:a0:96:c0:50:bd:ea:3e:dc:4b:d5:3c:
a1:67:ee:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:47 2024 by rpki-client on console-fra.rpki-client.org