Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/BLCWV-VtZLN0OasAxx60cncq_C0.roa
File: BLCWV-VtZLN0OasAxx60cncq_C0.roa (raw, json)
Hash identifier: NtppsDQ3+H7uvHFHHsYFLmwuL5cYXlWHmr9Xh9szprc=
Subject key identifier: 04:B0:96:57:E5:6D:64:B3:74:39:AB:00:C7:1E:B4:72:77:2A:FC:2D
Certificate issuer: /CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Certificate serial: 0185721E8A80AF562F81F0E64779224868D4
Authority key identifier: 9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/BLCWV-VtZLN0OasAxx60cncq_C0.roa
Signing time: Mon 02 Jan 2023 10:54:42 +0000
ROA not before: Mon 02 Jan 2023 10:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211927
IP address blocks: 2001:67c:2920::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:1e:8a:80:af:56:2f:81:f0:e6:47:79:22:48:68:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbdb5b73a8330d225f3410c81b638d283c40d1f
Validity
Not Before: Jan 2 10:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=04b09657e56d64b37439ab00c71eb472772afc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5c:f9:0e:40:15:31:e0:b4:12:7f:7d:22:90:
8a:6a:cd:fe:fc:ce:a5:e0:b2:06:0d:76:78:d1:76:
ef:e4:ca:c8:32:b6:d9:95:d7:9b:16:d5:d5:1d:e3:
25:85:63:13:fb:7b:82:59:77:9a:d3:27:6c:75:04:
8d:ec:94:0a:8c:7f:07:c3:40:a1:28:46:a2:83:13:
be:5d:5f:81:21:21:1c:83:94:e0:c0:5a:a5:c7:73:
28:3a:02:e7:ff:48:64:21:88:5a:b4:41:d0:59:8d:
79:a1:fc:3d:bc:38:76:30:29:8c:b9:51:3b:26:03:
29:87:c1:1f:7e:59:68:65:01:81:bd:4c:aa:f1:d7:
dd:77:60:16:82:da:b5:91:08:83:5b:be:7e:a5:1e:
6d:99:97:0f:d8:d0:d0:b9:81:92:a8:e8:fd:13:a1:
61:ca:0c:6b:23:b8:a3:0a:18:3f:72:67:ad:bd:31:
da:c0:d2:2e:76:8e:8f:86:4a:71:02:8b:3f:b9:cc:
b8:b6:64:3f:5a:71:a7:d5:9d:21:e7:06:d9:0e:86:
7e:3f:62:cf:a2:22:24:ad:70:41:5c:a4:ec:9b:b7:
77:a7:27:1f:05:15:5f:79:b7:8b:a4:37:5b:bf:fc:
9c:49:b8:dd:b1:26:7b:0c:d4:f0:3c:55:3f:e6:43:
3e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B0:96:57:E5:6D:64:B3:74:39:AB:00:C7:1E:B4:72:77:2A:FC:2D
X509v3 Authority Key Identifier:
keyid:9C:BD:B5:B7:3A:83:30:D2:25:F3:41:0C:81:B6:38:D2:83:C4:0D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL21tzqDMNIl80EMgbY40oPEDR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/BLCWV-VtZLN0OasAxx60cncq_C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bc216d-db94-4bb1-9147-010e4219aeda/1/nL21tzqDMNIl80EMgbY40oPEDR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2920::/48
Signature Algorithm: sha256WithRSAEncryption
0b:a4:5c:39:b1:f4:24:d2:45:6d:39:f3:f1:b9:2c:92:08:9d:
f8:cd:76:ba:f7:19:7c:63:07:61:d1:8a:3d:67:39:0d:1b:a3:
a0:bd:4c:eb:03:71:33:ee:1d:4b:19:08:7f:38:74:90:6f:24:
0d:3a:44:a0:cb:60:57:79:19:41:60:a2:3f:67:92:b5:89:a3:
0d:d9:3c:1e:c1:f1:80:bb:27:aa:3c:18:e1:5b:eb:52:00:3b:
e3:dd:e2:b7:a5:cb:f3:df:10:5d:28:01:16:df:3d:a2:f5:c5:
50:a8:fb:6d:32:b1:7a:1f:10:b2:ab:d3:1b:4e:c5:f3:5c:98:
bf:cf:25:2a:d0:37:fc:41:cd:10:3e:5e:f9:bd:0b:3b:50:9f:
a2:a4:d4:87:46:c3:79:7c:47:3a:44:ad:1e:a6:ab:4d:02:cd:
00:93:7e:c9:66:05:b9:21:4e:db:a0:dd:44:81:6c:b0:96:36:
0d:81:28:c2:a9:1a:72:a3:0f:e5:7e:fc:70:7d:67:a0:d3:cc:
bb:bb:f3:8e:82:53:5f:9a:50:7d:d8:d1:e5:57:ed:52:62:60:
60:9a:42:b0:8b:2f:35:5e:42:17:5a:b2:dc:80:1f:14:0e:33:
fd:89:b2:36:8f:ef:e9:60:d8:ce:af:48:14:dc:78:e7:44:20:
ed:fc:e0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:11 2024 by rpki-client on console-fra.rpki-client.org