Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/7Ef6vULCCNlVz4QeqiyTLRV8C48.roa
File: 7Ef6vULCCNlVz4QeqiyTLRV8C48.roa (raw, json)
Hash identifier: mJVuHfMfDPVMHLo0afJ99uYHYIEtzX1FHtg6T8+izg8=
Subject key identifier: EC:47:FA:BD:42:C2:08:D9:55:CF:84:1E:AA:2C:93:2D:15:7C:0B:8F
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 018AFBB994A4AF918432B5D9B1E01F7B8CA5
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/7Ef6vULCCNlVz4QeqiyTLRV8C48.roa
Signing time: Wed 04 Oct 2023 17:25:57 +0000
ROA not before: Wed 04 Oct 2023 17:25:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212786
IP address blocks: 2a12:f9c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fb:b9:94:a4:af:91:84:32:b5:d9:b1:e0:1f:7b:8c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Oct 4 17:25:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec47fabd42c208d955cf841eaa2c932d157c0b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:66:61:33:78:f3:bc:2a:85:ad:27:85:9e:53:
10:e6:a3:4a:d7:4f:89:33:2f:2d:91:e1:c9:dc:e6:
9d:af:99:ca:06:2f:70:8b:e0:f4:6a:eb:cb:d3:d8:
74:25:07:42:80:26:67:03:1b:9d:39:f2:c0:99:d1:
3e:33:da:e8:b0:86:e6:87:ae:1f:41:58:d3:6c:49:
a5:05:4c:48:9c:a1:a6:d2:ed:8d:dd:f2:70:a6:33:
19:95:1a:b6:f3:28:56:f8:b6:bc:9c:16:39:1b:33:
3a:ec:ee:4c:91:be:61:53:7b:14:cd:5d:11:70:ed:
15:41:84:6f:be:54:d0:b9:27:6e:4b:d5:f5:2a:83:
e2:06:1e:20:93:e9:7d:77:7d:5a:2e:b8:12:cf:e5:
13:c7:a1:76:36:91:06:22:63:db:31:a3:02:f1:eb:
e1:e4:93:32:06:07:bb:ed:b4:c2:71:c5:c0:18:32:
0d:20:bb:0a:a5:8d:9f:0e:95:15:ea:b9:be:6c:0a:
60:c1:61:e9:78:d1:0c:b9:a4:5c:be:a3:c6:5a:07:
3b:67:20:38:d4:98:3d:8e:be:6a:ca:9c:32:c7:a8:
ce:46:54:71:9f:76:8f:ef:f4:58:34:99:76:c2:51:
3c:4f:7b:fe:be:ba:48:94:1d:9a:5a:f6:79:46:d2:
f9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:47:FA:BD:42:C2:08:D9:55:CF:84:1E:AA:2C:93:2D:15:7C:0B:8F
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/7Ef6vULCCNlVz4QeqiyTLRV8C48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f9c0::/29
Signature Algorithm: sha256WithRSAEncryption
87:1f:de:36:cf:9c:08:45:d5:89:e9:6d:15:06:c2:6d:fe:35:
65:13:22:1f:20:c9:02:6f:aa:6f:cf:a7:24:9e:fd:f1:b1:c2:
39:b0:64:e1:81:a0:42:b7:1b:ea:28:03:5e:82:56:23:2e:ed:
76:14:15:9c:16:a5:f6:5d:2f:65:ee:29:67:20:3d:e0:59:d7:
67:f1:3d:75:c5:5e:57:79:d3:d9:6a:31:ea:c3:60:11:84:84:
01:60:05:3a:57:09:a5:32:61:9c:4b:bd:12:6a:35:a1:58:65:
51:6e:99:5c:61:d1:13:d4:70:83:82:cd:53:f9:ec:92:b1:ce:
2f:32:6a:95:bf:63:7e:d9:9e:16:1f:1e:d6:27:6c:63:a5:2f:
71:af:87:ee:18:94:ce:3c:fd:db:9a:e9:27:11:18:2d:3e:89:
bd:12:e5:4e:95:6c:75:5f:15:dc:63:90:b3:40:68:fe:71:76:
12:1e:89:ec:ee:be:44:7c:35:56:ae:c2:d5:21:79:ca:51:48:
f4:b7:51:66:15:15:65:86:cb:29:c7:a1:76:38:b6:36:e3:76:
92:76:af:31:01:a0:8b:50:2e:5f:c1:35:17:3f:c7:e1:8e:47:
a8:3d:a7:c1:54:0a:c2:ae:a4:6f:0f:6a:77:7f:cd:65:15:09:
84:76:7c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:35 2024 by rpki-client on console-fra.rpki-client.org