Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bJNzG7AHCrcEbkqxpqqTBgk5sww.roa
File: bJNzG7AHCrcEbkqxpqqTBgk5sww.roa (raw, json)
Hash identifier: xGSqSBNgfIVATaQNeTi6YAsBxzX74OaSdGC5bKiUNas=
Subject key identifier: 6C:93:73:1B:B0:07:0A:B7:04:6E:4A:B1:A6:AA:93:06:09:39:B3:0C
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01856ED4D471A37E15CAF63664406CE7E600
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bJNzG7AHCrcEbkqxpqqTBgk5sww.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207613
IP address blocks: 2a09:11c0:200::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d4:71:a3:7e:15:ca:f6:36:64:40:6c:e7:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c93731bb0070ab7046e4ab1a6aa93060939b30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:77:57:8a:01:a2:a0:81:2f:1a:b4:cf:f9:
9f:c1:dc:89:46:17:04:24:b0:46:5f:27:6d:a1:a7:
71:cb:3e:fb:0a:1d:c9:31:d9:9b:b9:e2:3d:b9:16:
b1:7d:1b:79:45:62:ea:d1:11:75:aa:ec:fd:8c:6e:
36:6a:d5:94:72:ac:29:9c:f5:85:fc:3c:a2:8a:28:
6e:02:17:96:f9:da:eb:1f:26:fa:e3:bc:aa:95:76:
9d:56:7a:7f:f8:8f:ba:10:d7:c2:73:a8:c8:e0:68:
19:70:e5:92:46:6e:78:6c:82:b0:81:8f:ff:2e:ec:
54:d5:8e:ea:6e:5c:bd:99:cf:69:b1:c7:eb:d2:de:
e6:56:73:cb:42:5b:a9:2a:89:3c:62:fc:31:40:e3:
3e:3d:a3:53:1c:0c:0c:49:12:01:e3:6f:30:95:2f:
e2:4f:3e:1a:eb:a7:20:1e:75:99:9e:7b:f1:83:a4:
9b:c0:74:cd:51:55:78:10:6c:cc:0e:0e:ca:3c:95:
29:56:28:d3:02:75:7b:ed:98:d1:fc:03:41:67:1b:
e8:fe:36:ab:78:6f:90:2a:b3:5b:b0:b5:93:bf:83:
d2:68:7f:71:86:26:35:0e:a7:9c:e3:58:d7:f9:44:
1a:0d:4a:31:ea:a2:68:a7:7c:99:ef:38:06:b6:f5:
e0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:93:73:1B:B0:07:0A:B7:04:6E:4A:B1:A6:AA:93:06:09:39:B3:0C
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/bJNzG7AHCrcEbkqxpqqTBgk5sww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:11c0:200::/44
Signature Algorithm: sha256WithRSAEncryption
64:09:25:24:00:8b:dc:d1:5b:d0:a5:31:66:05:8e:73:6d:82:
44:2e:a5:9c:0d:91:82:32:af:26:61:89:70:b0:f3:bf:bc:c1:
ba:17:1f:94:8a:3d:cc:ef:7f:48:2e:9e:e6:c2:90:6c:da:34:
0e:e6:25:eb:30:9a:85:61:21:36:9b:bd:4f:bd:0f:59:4b:ab:
07:63:9e:ed:89:a1:3e:bc:17:85:1d:15:6d:8d:af:50:58:81:
bd:88:a0:62:c5:09:fd:b0:40:05:4c:4a:59:b2:9a:58:82:6a:
6e:b2:66:62:5b:35:d3:ac:8e:85:23:c2:9c:cf:e2:64:03:d4:
81:31:5a:11:4e:b6:13:d9:c6:c9:2d:3d:82:2d:38:df:77:be:
29:c5:70:d1:df:74:eb:7e:cd:b8:d9:f8:89:42:5f:81:30:8d:
93:6c:4c:9e:74:dc:67:a4:f6:82:0e:d0:ff:33:70:89:7f:03:
5d:66:f7:d4:e3:b1:d5:ee:88:d3:6b:cf:dc:14:d6:88:86:5d:
ee:0c:9e:05:81:25:12:ac:f3:e3:c0:04:b2:22:2a:98:fe:10:
b9:25:d6:21:6c:75:49:02:c4:eb:fc:a6:29:d1:d6:8f:8a:11:
4e:b7:cf:b0:18:b0:30:1a:12:0c:cf:c8:02:45:0d:0a:9b:4b:
86:6f:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:47 2024 by rpki-client on console-fra.rpki-client.org