Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/5-bgAMG74V0Xql63mv5z9xT4WZQ.roa
File: 5-bgAMG74V0Xql63mv5z9xT4WZQ.roa (raw, json)
Hash identifier: m28ZKA1Ogx84Pe1MgutT7FJqq89Hc52QwhJ+kcntV+w=
Subject key identifier: E7:E6:E0:00:C1:BB:E1:5D:17:AA:5E:B7:9A:FE:73:F7:14:F8:59:94
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 01856CEF39EE11D9E6972611F47F4A65A14C
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/5-bgAMG74V0Xql63mv5z9xT4WZQ.roa
Signing time: Sun 01 Jan 2023 10:44:55 +0000
ROA not before: Sun 01 Jan 2023 10:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 150296
IP address blocks: 2a0f:7880:202::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ef:39:ee:11:d9:e6:97:26:11:f4:7f:4a:65:a1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 10:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7e6e000c1bbe15d17aa5eb79afe73f714f85994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d8:a0:ae:ba:d3:90:ad:6b:4b:2c:04:1c:2d:
13:ef:ad:26:54:24:8c:fe:0a:e4:5f:67:ec:66:c1:
93:86:18:79:eb:69:18:2b:ae:dc:a3:ba:d0:54:d1:
1c:44:10:1d:8a:d8:40:65:b0:d5:b8:66:63:73:72:
19:75:aa:2f:66:65:2f:07:2d:32:7e:bb:04:5a:ed:
b7:db:d1:2e:cb:68:03:20:50:c6:45:da:e9:22:8a:
a1:24:4d:cb:0a:e4:79:18:f3:58:ec:31:5c:02:41:
ad:29:61:b6:b6:5a:4a:bf:4b:ec:ee:94:8a:c8:60:
0d:da:72:42:56:35:01:8c:cc:9e:de:a1:a8:45:66:
f6:e0:0c:b7:38:1b:13:d8:02:95:73:9c:24:23:89:
e5:33:31:18:a5:78:79:75:58:06:b5:1b:96:b3:ec:
f0:7d:ac:67:f6:24:67:11:22:26:9d:53:a0:5a:83:
ab:90:f5:09:8c:ea:b2:94:fd:69:28:8d:58:a2:6d:
00:a9:10:db:6b:9f:1a:18:36:94:82:8c:5e:17:34:
86:fe:81:ea:7f:fd:98:de:57:60:bf:48:cd:f7:e6:
36:f0:aa:5e:2c:4b:43:0f:af:78:a8:dc:aa:58:60:
1d:57:a2:47:4b:98:a7:01:d8:28:fd:27:5a:ff:3b:
c5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E6:E0:00:C1:BB:E1:5D:17:AA:5E:B7:9A:FE:73:F7:14:F8:59:94
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/5-bgAMG74V0Xql63mv5z9xT4WZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7880:202::/48
Signature Algorithm: sha256WithRSAEncryption
3f:2f:3d:44:7c:e0:ed:5e:96:3d:71:27:40:d6:94:f7:dc:55:
4f:f8:fe:e1:47:e9:c9:ad:5f:d1:1d:cb:f3:23:90:28:58:8d:
78:f2:ac:66:48:c6:7d:f7:d8:99:be:4f:a4:79:43:6d:93:5d:
6c:dc:34:88:d5:51:3c:83:ce:60:69:2f:e7:6f:46:8f:cf:fa:
34:d9:1c:8b:54:a5:2a:14:ec:4f:4a:ca:1d:a3:3c:f3:a5:e9:
8c:b7:a5:c1:93:e8:10:ee:b8:f4:c1:e6:df:6b:d6:e5:0f:02:
68:bb:c0:63:c2:3b:3d:ed:b9:86:c0:bb:22:66:f0:94:2f:c4:
4c:a1:27:4b:b7:5e:87:53:a7:d3:a9:92:74:3d:53:94:a2:4e:
a5:0e:51:f2:90:01:b3:eb:c2:a0:28:5e:8c:8a:ff:0c:70:2c:
8c:7a:40:cf:a7:0d:15:1a:59:22:48:91:4e:95:2b:31:42:55:
c8:f1:9f:b1:30:8a:8a:56:e5:20:b2:a9:d3:c9:23:98:fc:53:
56:7e:98:79:25:a3:ff:4f:59:86:13:de:79:39:07:16:15:b5:
a3:2d:3a:4a:09:1e:a2:3e:5d:05:4c:fb:40:f6:7b:7d:64:29:
a8:47:be:cd:d2:32:66:00:d7:65:f3:f2:86:0f:3d:3b:06:71:
1d:1f:4e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:56 2024 by rpki-client on console-fra.rpki-client.org