Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vrb0BQUvaQTg7MtgugLB3nJv_Zo.roa
File: vrb0BQUvaQTg7MtgugLB3nJv_Zo.roa (raw, json)
Hash identifier: glbeip7Wx+FSHSLJ/YJlyzY+DhRQNw4WOX9HIcHQuiU=
Subject key identifier: BE:B6:F4:05:05:2F:69:04:E0:EC:CB:60:BA:02:C1:DE:72:6F:FD:9A
Certificate issuer: /CN=b05d28d16626bc5dcabf2e915435782b96e14071
Certificate serial: 018650170B3BF7BB8E0D10373DA582BAA23E
Authority key identifier: B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vrb0BQUvaQTg7MtgugLB3nJv_Zo.roa
Signing time: Tue 14 Feb 2023 13:22:12 +0000
ROA not before: Tue 14 Feb 2023 13:22:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39686
IP address blocks: 2a07:3500:11e0::/48 maxlen: 48
2a07:3501:1060::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:17:0b:3b:f7:bb:8e:0d:10:37:3d:a5:82:ba:a2:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05d28d16626bc5dcabf2e915435782b96e14071
Validity
Not Before: Feb 14 13:22:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=beb6f405052f6904e0eccb60ba02c1de726ffd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:a6:2e:cf:ba:14:95:87:e6:02:51:26:f5:
c4:21:f5:f9:df:ce:30:b7:76:48:95:d5:be:a2:16:
a4:f5:01:ad:b0:d4:19:bf:77:79:69:60:d5:ba:d9:
2d:1a:cd:db:87:b0:25:e6:dd:28:a2:d2:e3:eb:48:
f7:53:c3:0f:24:ab:7e:72:0d:11:2a:87:aa:ae:eb:
9c:b3:64:c2:34:d0:2b:ef:92:6c:81:bb:01:f6:50:
1f:e7:82:31:09:fc:98:9c:44:4b:c3:86:16:ec:ee:
93:75:08:26:e6:ef:aa:00:b9:b4:04:37:83:ed:cc:
ce:71:06:aa:0a:21:42:a8:6d:97:ad:76:82:15:a3:
79:15:f9:c3:96:35:f3:df:b0:a2:a8:3b:96:38:a4:
64:90:b4:c5:68:6d:f7:85:e7:e9:63:a9:28:23:24:
61:b1:e3:14:30:9d:7f:86:1c:2e:1f:be:01:cd:2c:
25:2d:7f:88:33:1a:fb:bd:a3:ab:c0:50:92:57:ef:
70:15:e1:73:b1:7d:95:bb:b7:3a:96:a3:52:47:a1:
c2:35:c9:8a:64:58:da:33:a4:58:7d:c8:49:25:a6:
4e:57:92:24:76:12:e8:c7:64:4e:e1:08:e5:34:68:
1b:00:c2:19:8c:5b:3e:fa:4f:b3:2e:04:48:7f:e9:
32:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B6:F4:05:05:2F:69:04:E0:EC:CB:60:BA:02:C1:DE:72:6F:FD:9A
X509v3 Authority Key Identifier:
keyid:B0:5D:28:D1:66:26:BC:5D:CA:BF:2E:91:54:35:78:2B:96:E1:40:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/vrb0BQUvaQTg7MtgugLB3nJv_Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bba973-7c9f-4b11-b611-ad575522b365/1/sF0o0WYmvF3Kvy6RVDV4K5bhQHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:3500:11e0::/48
2a07:3501:1060::/48
Signature Algorithm: sha256WithRSAEncryption
ae:67:df:33:e7:00:c0:58:f8:7d:c6:a8:fc:89:aa:ae:a7:c3:
ec:a4:51:ce:7a:53:4e:bd:63:6c:bd:bb:2f:11:7d:60:4b:c5:
49:ee:a2:91:d8:ec:50:e1:18:d0:29:3d:26:98:72:12:26:3a:
64:1b:6f:4a:5a:db:01:8a:17:76:09:a1:49:9d:cd:c7:af:50:
f6:a1:b6:a9:82:4d:62:36:87:5c:cf:8a:79:44:3d:89:59:7d:
42:b7:81:55:2b:15:c1:db:c7:06:19:15:ce:0f:b0:ba:2d:2b:
56:33:35:9b:85:c5:65:59:62:11:99:df:52:48:ba:af:69:69:
97:bc:55:ef:e7:d5:bf:3a:8f:e3:13:b7:91:a6:7d:ea:5b:30:
b6:b3:65:98:b4:ba:dc:6e:94:37:22:e8:8e:e5:0e:10:f8:80:
d1:02:67:74:f5:b0:51:6a:19:2e:bd:6a:0f:57:25:33:53:f4:
8b:8e:a9:86:78:c2:3a:16:fc:1c:b5:15:ce:52:bc:e8:43:61:
8c:f8:b4:f5:1f:de:bd:e1:f5:40:00:a2:43:2f:64:ae:7e:1f:
1b:74:2d:11:33:1f:4a:4b:21:04:36:28:ef:d7:bf:2a:d6:a6:
5c:f7:85:ce:f5:95:a0:37:7d:a5:84:a6:bc:55:29:67:f4:46:
e4:50:0e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:49 2024 by rpki-client on console-ams.rpki-client.org