Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/BnnfGZraFZaWHioFs0rwNGFv0CU.roa
File: BnnfGZraFZaWHioFs0rwNGFv0CU.roa (raw, json)
Hash identifier: JgRIx9vaXaZeW0Ar7oSaoxmSDCtFIcMQdHRMBhL9T64=
Subject key identifier: 06:79:DF:19:9A:DA:15:96:96:1E:2A:05:B3:4A:F0:34:61:6F:D0:25
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 0191E6EB58054C2B89B87022F3DE1179D930
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/BnnfGZraFZaWHioFs0rwNGFv0CU.roa
Signing time: Thu 12 Sep 2024 15:47:48 +0000
ROA not before: Thu 12 Sep 2024 15:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215567
IP address blocks: 2a01:f900:102::/48 maxlen: 48
2a01:f900:103::/48 maxlen: 48
2a01:f900:104::/48 maxlen: 48
2a01:f900:105::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 05 Oct 2024 01:22:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e6:eb:58:05:4c:2b:89:b8:70:22:f3:de:11:79:d9:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Sep 12 15:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0679df199ada1596961e2a05b34af034616fd025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:dd:61:50:a5:b2:ac:79:e2:3a:e1:03:33:
f8:6c:a6:3d:17:87:67:58:d6:e4:44:31:9b:ee:c0:
d3:9c:3d:76:87:d9:56:27:cb:61:c9:74:de:50:2c:
7a:e7:3c:d9:8e:63:97:dd:20:62:49:5e:a1:73:f4:
3c:66:98:f8:2a:d9:d8:70:89:99:c3:56:8b:7f:0c:
13:20:08:cf:87:4b:6e:b5:d6:f0:c1:ae:73:aa:3d:
b1:da:36:0c:7c:be:e6:19:98:7e:46:dc:02:74:f0:
9a:89:d1:1a:2c:59:23:3c:80:48:cb:7c:01:5e:74:
a2:48:bf:4e:fa:6b:47:c6:20:cd:08:2a:b6:da:5b:
69:30:ad:23:81:59:72:a3:25:61:e8:b0:98:c8:30:
01:e6:61:17:fa:3f:ca:b0:68:d6:33:66:5d:9f:7a:
5e:85:a8:d7:65:1b:7b:f1:fa:12:d4:45:f4:26:2a:
bd:40:3a:8b:d5:17:21:5e:95:1d:4f:eb:8d:93:1d:
7f:6b:e4:2e:f9:a0:28:24:18:0f:ee:09:1e:49:bd:
3b:27:3f:28:38:a9:43:af:d9:aa:dd:1c:cb:b6:cb:
6e:9e:51:5b:8b:b0:cd:cb:6b:12:6d:18:d0:e1:22:
68:64:c7:ae:47:0f:19:3f:aa:4d:81:2d:6c:23:fb:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:DF:19:9A:DA:15:96:96:1E:2A:05:B3:4A:F0:34:61:6F:D0:25
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/BnnfGZraFZaWHioFs0rwNGFv0CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f900:102::-2a01:f900:105:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0c:f0:fe:8f:31:e3:de:1e:eb:75:c6:fe:69:8d:f7:3c:37:2e:
f2:9a:02:78:20:20:a1:23:0a:6c:b4:bf:c1:eb:6a:c3:c5:15:
de:3c:ac:03:82:14:b0:1c:08:73:ae:78:fa:5c:19:f6:2d:61:
6b:7b:1b:96:0c:8e:63:b7:89:6b:e9:6b:13:01:51:7b:91:12:
6c:23:05:d6:fd:0e:ee:44:85:3b:8c:e7:25:c8:fc:2e:e7:71:
c6:93:ff:90:26:7c:c1:10:b3:c4:85:9a:ec:3c:d8:29:2e:4b:
b2:c1:bb:d1:2d:6b:a5:ea:39:a4:75:f4:de:8f:62:01:81:f8:
65:23:4a:c5:b6:5e:63:2c:4b:a0:8d:65:13:83:d4:f9:3e:5c:
41:7f:7b:a2:ba:c7:4f:4c:39:d0:0b:b6:77:c3:61:90:3a:3a:
2c:f1:cb:28:f7:a2:1a:10:be:11:f6:5c:e3:21:cb:aa:47:f8:
62:dc:22:ba:21:e0:62:f7:8a:24:52:5e:9f:6e:e8:76:2c:ff:
7f:74:1b:c0:91:6b:f3:8d:f0:36:41:69:47:de:2c:3f:fd:59:
cc:ff:f2:42:0a:77:e7:b5:a0:37:dc:48:f2:93:3f:c6:74:6a:
b1:99:10:3b:c7:57:ca:16:d2:f3:51:be:fc:d4:f0:9e:c7:18:
4f:02:67:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Oct 5 06:34:39 2024 by rpki-client on console-fra.rpki-client.org