Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/wkAC9IQMhyLfI7DTQKXs8Z2x0Ac.roa
File: wkAC9IQMhyLfI7DTQKXs8Z2x0Ac.roa (raw, json)
Hash identifier: 1mWL5bf66P3uTVTifDDLBreFGjnGAs/IM0xCMeUhFkQ=
Subject key identifier: C2:40:02:F4:84:0C:87:22:DF:23:B0:D3:40:A5:EC:F1:9D:B1:D0:07
Certificate issuer: /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial: 01888657F7A4BD41CECA78ADFD4E6A2FEE3E
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/wkAC9IQMhyLfI7DTQKXs8Z2x0Ac.roa
Signing time: Sun 04 Jun 2023 12:18:11 +0000
ROA not before: Sun 04 Jun 2023 12:18:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203647
IP address blocks: 2a12:e340::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:86:57:f7:a4:bd:41:ce:ca:78:ad:fd:4e:6a:2f:ee:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Validity
Not Before: Jun 4 12:18:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c24002f4840c8722df23b0d340a5ecf19db1d007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:11:33:50:66:55:b0:2b:95:ad:b8:48:d2:94:
03:f5:2b:cc:e4:04:dd:31:36:0c:e8:4b:3e:16:44:
fb:12:96:d2:7a:f7:6a:0b:86:49:18:f9:ec:00:fb:
32:55:af:4c:44:90:a8:91:46:03:ff:64:fd:ae:0c:
83:75:41:7f:53:d4:39:2e:17:db:fc:04:5c:5e:be:
db:4c:96:62:0f:63:1a:3d:46:f0:02:1f:2d:88:40:
b8:cd:15:e6:d8:c1:c6:ab:0d:3b:6d:1d:a0:1a:9f:
6c:30:8c:ab:26:68:9f:89:14:bf:1d:51:d0:75:7e:
1f:1c:71:8a:42:ac:fd:dd:21:ea:5d:81:a8:88:0e:
cb:5c:a6:e4:20:2a:10:51:ba:a1:e7:eb:a3:ec:84:
a8:57:e3:6f:da:7a:aa:52:f6:00:1c:68:40:ef:23:
99:05:6d:ec:5c:5e:80:22:4b:e3:0b:6a:fa:4f:90:
b2:26:af:b0:11:d6:07:70:4e:25:cb:c3:6e:62:56:
9d:d5:86:3c:48:45:5b:08:d7:82:2b:57:6d:dc:b8:
f0:ed:41:bc:46:de:5d:2d:a1:4e:08:0d:c2:de:7e:
d7:95:11:a9:58:77:b8:f0:53:31:e4:8c:c1:b8:c5:
d9:40:bd:d7:02:b0:a6:35:c2:33:cb:c8:03:03:81:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:02:F4:84:0C:87:22:DF:23:B0:D3:40:A5:EC:F1:9D:B1:D0:07
X509v3 Authority Key Identifier:
keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/wkAC9IQMhyLfI7DTQKXs8Z2x0Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e340::/32
Signature Algorithm: sha256WithRSAEncryption
c6:6d:41:e0:35:25:8c:89:2a:37:75:f0:b2:e3:d5:9b:85:b8:
83:f7:f8:89:79:93:3e:89:39:01:3a:7f:b0:a2:06:e8:41:06:
5a:4f:fb:14:90:34:fd:a0:f0:db:91:e5:95:cf:09:e6:88:73:
20:0a:97:e5:f6:bb:28:f3:bf:e9:af:56:f6:d6:8f:11:cc:d5:
87:14:12:65:81:13:83:d0:e0:24:67:10:74:6e:df:5f:99:49:
37:41:5f:6c:33:39:03:4d:a2:3f:66:57:4e:d3:64:d0:99:aa:
43:d1:26:21:c7:99:85:c3:a0:40:1b:82:03:e5:a5:de:3b:32:
61:98:ac:dc:5b:2d:c7:86:88:fb:72:39:58:26:c6:a2:7a:ea:
8a:23:ff:fe:dd:22:b0:89:ee:dd:9a:39:86:d6:90:70:e8:8d:
88:4e:48:a0:5b:fb:61:08:c7:0c:b5:e2:1a:9b:4e:53:f2:38:
e8:3f:64:52:b4:16:b7:94:58:74:8d:04:af:63:b4:39:69:b8:
13:92:54:eb:30:b3:4b:ca:3d:17:b1:66:42:1f:3e:44:e8:fd:
9a:37:be:e0:9f:fc:52:21:5b:47:62:41:c0:2e:d7:87:d3:91:
06:3d:ff:bd:b1:ea:3c:3b:53:49:a0:d2:cd:bc:b8:af:33:76:
bd:8a:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:07 2024 by rpki-client on console-ams.rpki-client.org