Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Bh97exXB7zCCCRpUS5c26DMY92M.roa
File: Bh97exXB7zCCCRpUS5c26DMY92M.roa (raw, json)
Hash identifier: 8IJdKKzeHJqLiQSxqk7BPjukvAvTcD6Y9VCFMZcncpE=
Subject key identifier: 06:1F:7B:7B:15:C1:EF:30:82:09:1A:54:4B:97:36:E8:33:18:F7:63
Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Certificate serial: 01856F5DF3363370B900044C3BF779C4D178
Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Bh97exXB7zCCCRpUS5c26DMY92M.roa
Signing time: Sun 01 Jan 2023 22:05:06 +0000
ROA not before: Sun 01 Jan 2023 22:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44511
IP address blocks: 2a02:20c8:1241::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:f3:36:33:70:b9:00:04:4c:3b:f7:79:c4:d1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7
Validity
Not Before: Jan 1 22:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=061f7b7b15c1ef3082091a544b9736e83318f763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:5e:b5:41:a5:0c:e0:42:47:41:b5:c5:02:
51:4e:55:89:07:67:62:4d:dd:49:c0:5e:18:e5:b1:
de:e9:02:e7:d2:db:af:78:00:85:ee:77:d4:33:a2:
3a:b4:8c:b4:31:6a:1b:8e:b6:20:30:97:60:a6:20:
82:55:02:db:2c:b0:ea:5a:55:3e:6b:d0:54:e6:a5:
96:c9:0a:77:d0:ff:73:12:21:5c:80:d8:06:12:0f:
93:ac:4b:bf:d0:fa:c4:b4:ac:4c:67:22:9c:b7:90:
a4:08:22:2b:5b:f1:92:70:32:45:c4:b3:24:71:e0:
d9:34:f5:25:5d:ed:8c:aa:fa:a9:47:dc:42:11:8d:
e3:a7:47:28:42:e8:e2:de:fe:02:9a:21:5b:66:ca:
e1:79:7a:c2:e2:b5:da:da:eb:7b:75:9b:9f:af:3e:
b3:8c:a4:8e:ae:60:43:12:95:c1:b7:2e:c5:02:8e:
f2:ff:bc:ca:bd:83:11:8f:81:17:e2:6f:be:8b:35:
cd:46:d5:be:eb:e4:ed:50:76:57:07:4d:ef:84:b7:
e5:19:6a:5f:07:6e:00:d2:b5:6f:32:78:19:6d:60:
b1:aa:19:b0:3a:b2:e2:f9:4a:d1:a5:6f:77:0d:9f:
af:fd:0f:8b:f9:ad:a6:d6:98:8f:d4:db:c2:5a:fc:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:1F:7B:7B:15:C1:EF:30:82:09:1A:54:4B:97:36:E8:33:18:F7:63
X509v3 Authority Key Identifier:
keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Bh97exXB7zCCCRpUS5c26DMY92M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:20c8:1241::/48
Signature Algorithm: sha256WithRSAEncryption
23:10:87:f4:ad:4e:5c:f0:1e:88:5b:64:cc:45:3f:f6:4c:1a:
9b:a3:8f:20:c9:ba:e4:85:9c:b3:6d:41:02:16:0f:5b:eb:85:
e6:19:84:db:79:ad:2e:27:5e:25:65:4a:1c:77:1e:1a:df:f3:
3f:66:36:87:71:9b:cf:e2:99:e7:1d:47:49:27:64:85:85:f0:
9e:ea:47:cf:80:86:0b:8a:71:1d:41:7a:81:82:6b:fd:f3:82:
3b:7d:63:f6:8d:fc:ba:d8:c8:a0:6c:f1:eb:39:24:2f:04:ec:
12:a9:88:76:f7:28:d1:4d:f1:69:ea:59:ab:d3:30:e7:2f:93:
ff:2b:fd:bd:65:d5:f9:49:3c:e7:87:fd:f7:6d:13:24:68:d7:
9b:03:fb:70:49:cd:47:14:43:32:38:93:38:65:14:2e:32:a7:
cd:e8:ad:25:ee:10:fc:22:65:18:6c:7a:75:a8:94:6c:32:73:
73:f2:c9:4c:db:c3:31:53:f3:ed:f1:01:44:6c:53:b3:60:6c:
fa:9c:4c:39:4f:50:a1:cc:18:53:16:10:c1:f5:f2:87:5d:ed:
88:67:37:cb:94:a5:ac:ba:2f:f3:1c:c8:7d:7c:3d:3d:21:78:
1f:e4:11:95:2e:b4:d2:b1:c5:cc:1b:05:e4:da:bb:59:42:58:
5b:11:bf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:19 2024 by rpki-client on console-ams.rpki-client.org