Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ebc6wpj1bZmNoXSQ4RrAQM-lA-s.roa
File: ebc6wpj1bZmNoXSQ4RrAQM-lA-s.roa (raw, json)
Hash identifier: M3OWfdttzWc8bOKeL6dRWVbWavk09bO1266REHnnx8k=
Subject key identifier: 79:B7:3A:C2:98:F5:6D:99:8D:A1:74:90:E1:1A:C0:40:CF:A5:03:EB
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018FA5550174A00C26B010AFF07D15BBD8E2
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ebc6wpj1bZmNoXSQ4RrAQM-lA-s.roa
Signing time: Thu 23 May 2024 12:02:42 +0000
ROA not before: Thu 23 May 2024 12:02:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a12:24c0::/29 maxlen: 29
2a12:35c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 24 May 2024 12:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:55:01:74:a0:0c:26:b0:10:af:f0:7d:15:bb:d8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: May 23 12:02:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79b73ac298f56d998da17490e11ac040cfa503eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:01:21:f0:81:d6:78:7d:7c:f3:76:1e:d5:c7:
3d:23:da:fa:33:3e:25:7a:bb:b9:e4:64:d6:a6:6d:
89:7c:ae:cf:39:45:ec:9e:7c:5a:e4:45:c1:9b:0b:
5a:0f:d0:b5:9d:67:88:ab:f1:b4:3f:d0:d6:d6:16:
d2:03:5d:df:d1:ce:15:a7:ca:ae:17:39:86:50:13:
7d:53:16:d9:ae:7b:83:17:2e:73:f4:e6:cc:f8:ba:
76:7c:12:70:cb:19:e2:5f:6a:6f:91:f4:57:35:1b:
50:ec:c1:5e:63:e0:7e:1e:e4:fe:f3:1a:64:db:d4:
d1:2a:71:50:d5:51:8a:f6:d1:27:6a:39:6c:78:fc:
1d:96:50:de:99:2d:f0:d3:6f:4f:26:2b:2b:f0:fc:
64:d8:33:0d:17:f5:1b:0a:33:de:cc:2d:7d:64:c7:
a0:1f:65:28:c0:49:7f:0a:e0:82:64:17:57:6e:9d:
41:3a:6b:83:48:20:86:fe:79:c0:3d:2b:98:e4:99:
ff:a4:b4:04:50:4d:bc:59:83:f5:b7:74:19:f6:16:
ab:da:cc:15:99:29:69:1a:70:be:8a:94:97:5e:7f:
fc:55:fc:95:55:73:7d:46:8a:ef:93:b2:61:9d:79:
8a:a1:f4:cf:1e:fa:7b:07:17:9f:21:c8:ee:30:af:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:3A:C2:98:F5:6D:99:8D:A1:74:90:E1:1A:C0:40:CF:A5:03:EB
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/ebc6wpj1bZmNoXSQ4RrAQM-lA-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:24c0::/29
2a12:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
3c:9c:03:b1:91:4e:d0:ca:5c:ff:15:bf:66:14:14:19:b9:97:
36:69:fa:50:a7:f3:7c:83:d2:0d:a0:23:5a:9a:50:38:96:d5:
5d:c7:00:99:b9:d4:d2:67:00:43:ac:23:5c:65:a7:ef:cf:c6:
9c:ed:56:39:3a:c0:6d:d6:dc:f6:27:e0:6d:3c:f9:b0:97:ff:
5f:e8:65:75:89:7a:45:db:e5:5a:a5:10:47:62:82:9c:ff:2c:
4c:be:fd:26:09:ff:7c:a1:61:9a:fd:88:26:ad:1d:bf:d6:e8:
0d:1b:88:df:ba:58:34:a4:fb:d6:0f:cb:f8:e6:62:c3:13:b7:
1b:c2:41:d4:ad:17:8f:69:4c:03:c9:4b:57:b2:ac:bb:c1:d2:
aa:99:8b:4a:57:d0:b7:a1:c6:42:87:77:34:37:3a:ce:2e:35:
18:cd:ab:27:ad:8b:f5:e6:d8:ce:db:fa:b1:16:f6:42:24:98:
f5:73:69:d2:2a:c2:1a:bf:ad:64:97:34:59:20:6b:a8:be:96:
50:4d:9e:f1:cd:a4:7a:67:e7:3e:67:cb:6f:ad:36:da:32:57:
d0:14:03:04:0d:8c:34:b9:d4:56:18:64:70:9b:d5:6a:fe:fa:
8a:e3:59:23:9c:98:87:8a:63:25:0d:1d:6c:27:61:89:e2:04:
0b:db:dd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:42 2024 by rpki-client on console-ams.rpki-client.org