Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BRdF0agUPwY3SvO61bZ_Mpfhc_U.roa
File: BRdF0agUPwY3SvO61bZ_Mpfhc_U.roa (raw, json)
Hash identifier: XCNkF6ykyj8ZOlGKGCGK6M2l59c4RAQBey4bRAF/NzA=
Subject key identifier: 05:17:45:D1:A8:14:3F:06:37:4A:F3:BA:D5:B6:7F:32:97:E1:73:F5
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018DA2F46472885FBDBD13C9CBA0B539275D
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BRdF0agUPwY3SvO61bZ_Mpfhc_U.roa
Signing time: Tue 13 Feb 2024 14:52:21 +0000
ROA not before: Tue 13 Feb 2024 14:52:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
2a07:3502:11c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 06:05:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:f4:64:72:88:5f:bd:bd:13:c9:cb:a0:b5:39:27:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 13 14:52:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=051745d1a8143f06374af3bad5b67f3297e173f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:ba:e7:5d:60:b9:93:38:1c:17:76:7e:dd:
50:98:74:7b:6b:27:06:6c:ec:91:18:39:3c:36:f5:
d4:12:a3:cf:84:57:3c:54:04:68:f2:b9:96:52:95:
70:54:b9:04:17:2a:40:94:75:54:af:c1:65:34:97:
56:ee:35:76:97:ca:29:f4:5d:17:eb:e1:89:52:80:
f1:44:32:b7:57:37:5f:99:37:75:6a:05:1f:02:69:
62:ed:ba:9d:5d:2f:0e:26:6b:00:70:18:4e:07:8b:
61:85:bb:e9:c2:2c:eb:bf:56:82:11:c4:d9:d3:a1:
0c:48:d9:6c:1b:61:8c:2a:d2:22:dd:dd:2f:c4:c7:
d8:7d:45:c8:1f:cd:dd:58:f6:c0:6d:66:86:8b:1b:
43:80:3d:62:11:09:d8:b3:f2:04:53:48:da:d9:27:
a3:78:b1:f4:dd:fe:cd:9a:fd:46:66:e5:8b:ad:50:
d5:4d:54:d7:ae:ef:27:9c:d2:de:6d:8a:52:d6:5e:
78:68:cd:fa:99:8d:bc:6d:2e:7f:c2:d8:17:d8:6c:
61:fb:9c:c8:89:91:0b:10:04:93:84:2a:63:d7:ca:
b1:f6:51:7d:c6:a5:3a:fd:17:b3:4f:5b:cb:d2:3b:
5c:a6:01:48:09:b4:e4:00:25:a5:e3:9e:be:54:ef:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:17:45:D1:A8:14:3F:06:37:4A:F3:BA:D5:B6:7F:32:97:E1:73:F5
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/BRdF0agUPwY3SvO61bZ_Mpfhc_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1060::/48
2a07:3502:11c0::/48
Signature Algorithm: sha256WithRSAEncryption
8e:03:cc:74:72:77:db:62:94:9f:7c:ba:63:2e:94:90:59:5f:
bd:0d:77:28:60:d6:de:a5:5c:ec:19:77:b0:fa:9a:c4:98:15:
73:30:3c:1a:3c:48:91:23:e7:b5:ea:bb:49:d4:b8:e9:da:46:
f1:6f:9b:f5:4d:47:a3:bc:e6:68:87:ab:32:45:97:41:0e:e6:
63:25:51:95:96:a3:03:91:88:8a:07:12:4b:70:f6:0c:38:bd:
cf:f8:08:68:12:30:6e:f0:6e:cb:80:5a:81:6b:f7:c5:bf:5f:
b3:23:bf:03:1c:22:de:4a:59:83:be:f6:e6:78:2e:7d:d2:44:
90:c8:a7:eb:c1:6e:f1:a9:89:82:80:55:0b:47:24:c3:df:92:
9b:9a:14:f4:2c:3b:f8:23:6c:68:b0:6c:8f:00:21:4a:f4:48:
fe:11:bc:fe:ce:ea:1b:a2:e0:89:5b:ad:d8:a6:83:1b:9e:43:
a3:14:0c:82:69:cb:75:92:b5:50:83:11:10:cd:47:3f:92:4e:
71:fc:ff:d7:8b:1a:8c:2e:0c:96:c6:3d:27:a5:1f:41:b4:19:
f9:8a:bd:cc:06:a6:f3:31:e9:c0:80:73:2f:d3:d2:a4:95:d3:
f8:d5:56:fc:9c:4b:b1:d0:56:02:0c:08:97:ec:a6:3a:5b:93:
95:29:85:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org