Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/8ZycA_CgnwNgSEmQKJDFDDZX1NU.roa
File: 8ZycA_CgnwNgSEmQKJDFDDZX1NU.roa (raw, json)
Hash identifier: mV/zAEgZ5lWgb9paEdt30lgPXTV3uUn5xDqWCGlRUOU=
Subject key identifier: F1:9C:9C:03:F0:A0:9F:03:60:48:49:90:28:90:C5:0C:36:57:D4:D5
Certificate issuer: /CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Certificate serial: 018A51F94233F5FF98D793A1636923A45040
Authority key identifier: 2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/8ZycA_CgnwNgSEmQKJDFDDZX1NU.roa
Signing time: Fri 01 Sep 2023 18:20:04 +0000
ROA not before: Fri 01 Sep 2023 18:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197789
IP address blocks: 2a12:9ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:51:f9:42:33:f5:ff:98:d7:93:a1:63:69:23:a4:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9979ea38b9dbddca74b7bfa73768b57bffc12f
Validity
Not Before: Sep 1 18:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f19c9c03f0a09f03604849902890c50c3657d4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9c:a7:76:85:d0:2b:27:8d:c6:50:36:6a:48:
fe:f9:2a:8f:a6:0b:76:51:5d:66:6a:81:62:38:c9:
ae:05:e8:f7:f8:99:72:bf:13:6b:91:32:34:1b:0f:
74:07:a7:65:e3:97:48:07:9d:f2:22:2c:e2:71:a8:
4a:76:ea:3e:5d:0d:17:69:60:47:f0:81:96:02:da:
ad:13:d6:c0:57:e5:e0:ed:d9:65:80:d5:dc:7f:c8:
71:f7:e4:bb:d9:5e:6e:3b:21:0f:cc:0d:a5:3e:3d:
c1:55:ac:0a:46:47:55:11:72:95:9b:60:d5:48:16:
d0:81:9f:da:02:f9:c9:dd:49:e8:af:cd:08:32:f3:
b0:bc:a4:a5:4a:c3:c5:3b:a5:2b:fe:cb:fc:46:c4:
7e:47:81:72:42:b9:c2:cd:5c:35:72:68:cf:6e:3d:
48:d3:d9:61:6d:4b:cf:aa:a1:74:3f:20:8f:2a:c1:
11:93:0d:93:ce:10:c8:4b:a6:ee:9c:08:cb:f0:39:
37:db:08:cd:cd:2c:42:a6:32:c6:ec:91:fd:25:9e:
1c:bc:26:09:c3:c3:a0:b7:67:44:a7:bd:7b:61:9a:
d2:17:79:b1:c1:75:34:c8:ba:2e:a5:aa:9d:94:28:
5d:bd:97:33:84:2b:a8:b9:16:8e:93:7e:77:3b:3b:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9C:9C:03:F0:A0:9F:03:60:48:49:90:28:90:C5:0C:36:57:D4:D5
X509v3 Authority Key Identifier:
keyid:2C:99:79:EA:38:B9:DB:DD:CA:74:B7:BF:A7:37:68:B5:7B:FF:C1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJl56ji5293KdLe_pzdotXv_wS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/8ZycA_CgnwNgSEmQKJDFDDZX1NU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6155f0-4dcb-48ce-a4ed-ac332f8d8c48/1/LJl56ji5293KdLe_pzdotXv_wS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:b2:6d:b8:a9:20:a7:e4:cc:39:5e:60:bf:b0:82:c3:80:c8:
8c:78:bf:8b:14:16:06:2d:c0:79:f6:6d:a3:85:ca:27:35:76:
ca:3a:1b:c8:69:9b:91:73:33:17:d3:6b:e3:ac:cc:4f:58:3b:
e4:8f:60:65:c6:00:1c:50:35:4a:36:17:2a:bb:a4:2c:01:4e:
a8:ed:c9:2b:60:62:77:f7:24:38:29:4c:a8:c0:a4:96:19:0e:
c9:f0:6f:a8:4f:21:0f:df:9b:87:15:23:92:d3:89:0c:31:f2:
e1:14:51:24:2d:e1:94:97:06:20:1f:f4:26:6e:3a:b9:c6:b8:
f1:66:44:e8:2b:62:02:e5:6d:7d:2d:fd:86:38:54:34:7c:0a:
8d:77:03:88:c2:8a:b0:cf:a0:ac:3b:ea:50:c4:ec:68:60:c6:
30:9a:ca:b0:0a:57:2e:4e:89:da:8a:6c:d8:1d:c1:2b:5b:f1:
e0:15:61:f6:6b:8d:5e:e5:2c:c6:b8:e0:cb:b9:d4:7b:41:b8:
66:db:3f:cb:d2:33:47:df:ff:11:fc:25:ea:47:b6:5c:ec:55:
1b:a0:03:15:23:d4:bc:62:7f:e4:6a:36:e8:a8:c0:71:02:97:
0f:ea:d7:06:bb:cf:a4:de:41:d3:2f:4d:81:c4:05:aa:41:36:
6e:89:97:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:26 2024 by rpki-client on console-fra.rpki-client.org