Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/B2C5L_mywUkS4jnsgn4XYuq-ARA.roa
File: B2C5L_mywUkS4jnsgn4XYuq-ARA.roa (raw, json)
Hash identifier: VOQ/B1yAo9niWyVnsSecGHAB06uMuoCU3K5KdVo4PAU=
Subject key identifier: 07:60:B9:2F:F9:B2:C1:49:12:E2:39:EC:82:7E:17:62:EA:BE:01:10
Certificate issuer: /CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Certificate serial: 01856F2FF0725ADABA741077792470DD5439
Authority key identifier: 67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/B2C5L_mywUkS4jnsgn4XYuq-ARA.roa
Signing time: Sun 01 Jan 2023 21:14:50 +0000
ROA not before: Sun 01 Jan 2023 21:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 196904
IP address blocks: 2a03:dc40:ffff::/48 maxlen: 48
2a03:dc40:ffdf::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:f0:72:5a:da:ba:74:10:77:79:24:70:dd:54:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b62dbaecd359a4a2a8912cf2e6693b2f48c9ef
Validity
Not Before: Jan 1 21:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0760b92ff9b2c14912e239ec827e1762eabe0110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cb:fd:e7:ef:4d:39:17:b7:eb:ff:89:2f:a9:
ba:af:3d:70:b0:c9:bc:1e:48:d6:e1:36:96:fd:5a:
7a:e2:9a:1e:64:b7:97:48:72:dc:7b:5a:bb:51:92:
a9:7a:44:82:ca:3e:3a:16:64:8b:9f:6e:14:b6:cd:
ae:1a:78:7d:49:dd:21:60:5d:eb:14:a3:4d:3e:dd:
57:52:02:c8:01:da:30:b1:20:a3:e8:eb:22:20:d0:
13:f8:cb:f1:6f:82:97:0b:20:25:27:9b:24:64:1d:
b8:cd:4d:05:ea:1c:dc:92:eb:b3:77:71:a8:b5:49:
0d:42:0b:ca:5a:c6:16:d7:9c:b3:2a:1e:b8:f7:4c:
78:ed:f0:a8:b2:5e:56:60:a4:7a:f9:82:71:b6:0d:
87:2a:c4:d0:5e:ac:da:ac:e5:fb:a7:f5:82:a1:c1:
f5:92:72:65:16:32:a9:ae:d6:25:3b:81:3f:10:5b:
e9:48:56:3b:26:41:eb:6d:dc:b2:78:3d:38:76:48:
a3:90:57:2d:66:cc:5b:76:43:f5:ba:58:7c:3c:40:
a3:bd:ce:7a:ae:1c:ac:00:77:bb:65:c9:bf:32:ef:
1c:70:c3:f9:09:be:f8:ab:b5:a6:5c:51:fe:5a:18:
e6:f7:df:16:f0:c0:3b:da:ec:7a:3a:7b:27:e6:cd:
b6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:60:B9:2F:F9:B2:C1:49:12:E2:39:EC:82:7E:17:62:EA:BE:01:10
X509v3 Authority Key Identifier:
keyid:67:B6:2D:BA:EC:D3:59:A4:A2:A8:91:2C:F2:E6:69:3B:2F:48:C9:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/B2C5L_mywUkS4jnsgn4XYuq-ARA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90b9d6-a6ad-44a6-91a2-281eee31b747/1/Z7YtuuzTWaSiqJEs8uZpOy9Iye8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:dc40:ffdf::/48
2a03:dc40:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
9c:d6:74:0c:23:96:d1:65:76:ab:3e:6e:b0:c9:09:f0:25:80:
cc:bb:b0:6c:1d:84:b2:cf:78:cc:70:c4:3a:31:da:8f:60:81:
95:46:75:80:fc:04:13:90:15:fc:22:b6:24:bc:83:bb:7a:f3:
78:4a:3e:35:83:da:36:4b:01:fc:8b:ea:e3:45:4f:5d:59:79:
58:de:44:41:fd:84:7b:48:01:ab:a6:5b:d2:b0:4f:cc:2e:ed:
a8:99:7b:ae:2d:1c:28:95:4b:8c:b1:3c:ed:62:bb:c3:03:71:
52:3e:99:7e:ac:88:aa:fd:51:ae:15:2e:1b:b9:39:5e:1e:6e:
6e:2c:91:3b:26:1e:b1:2e:2c:9f:2c:1d:26:82:29:70:fe:b2:
3e:7c:99:74:9c:da:8f:18:d0:f4:78:65:22:b1:e5:0a:03:f4:
dc:63:01:cd:8d:a3:87:22:d4:db:64:38:9e:f5:40:38:54:31:
12:40:f8:f4:01:45:a6:78:2a:e8:2d:ce:ab:22:7e:d3:29:5d:
fd:a5:f5:7d:3d:ca:1f:22:95:60:a0:3a:d5:ed:66:fe:28:62:
07:9c:a6:1b:e6:7b:7b:45:51:c5:34:e7:9b:47:20:9c:84:51:
fe:2a:96:91:4e:a9:7b:15:53:2e:2f:a4:53:19:00:8a:fa:b5:
ac:43:71:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:39 2024 by rpki-client on console-fra.rpki-client.org