Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/a4ZxoR896-7ln3hcz2uQvDumIIM.roa
File: a4ZxoR896-7ln3hcz2uQvDumIIM.roa (raw, json)
Hash identifier: e5LdD4NffIB+07zgGEImOoC4Viv3MgSxLCd85W2eLTc=
Subject key identifier: 6B:86:71:A1:1F:3D:EB:EE:E5:9F:78:5C:CF:6B:90:BC:3B:A6:20:83
Certificate issuer: /CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Certificate serial: 01857015343BFA5DA0939A7715E5B978AB92
Authority key identifier: 37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/a4ZxoR896-7ln3hcz2uQvDumIIM.roa
Signing time: Mon 02 Jan 2023 01:25:15 +0000
ROA not before: Mon 02 Jan 2023 01:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209488
IP address blocks: 2a12:61c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:34:3b:fa:5d:a0:93:9a:77:15:e5:b9:78:ab:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373d8f557cae18e235d938bad3cfae17c91b9de6
Validity
Not Before: Jan 2 01:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6b8671a11f3debeee59f785ccf6b90bc3ba62083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4f:a1:8d:48:a0:9f:b9:41:c3:e6:47:fb:4b:
9a:8b:bb:8f:dd:3c:55:ab:ce:ac:e6:87:91:2e:19:
18:71:91:a5:13:fb:35:39:b1:87:a7:5c:7c:23:16:
65:8f:26:20:74:cd:3e:5c:2e:10:7c:0f:b0:c0:93:
c5:14:44:36:9a:79:1b:72:1c:11:c9:7f:a8:e5:e9:
dd:3d:aa:a0:63:b9:93:61:18:2e:97:e6:b8:4b:4b:
eb:ab:dc:77:99:ce:6d:cd:9d:b4:09:8b:ef:54:9d:
08:8f:31:dc:53:c1:49:68:95:4a:a1:2e:26:ca:a4:
76:09:16:f9:da:bd:bc:ea:2d:ca:d5:91:33:be:e6:
7d:89:3c:2d:72:36:be:a8:29:c7:c9:0a:f4:a0:38:
16:0c:fb:24:84:08:a4:11:61:0e:95:fa:25:8e:75:
5c:e3:80:3d:ed:03:bb:0b:37:23:61:98:4f:fa:40:
c7:2f:66:9f:bf:49:e0:cb:0a:90:92:0b:2f:6d:70:
4c:dc:e5:b1:cf:4c:38:57:72:ea:a0:27:30:9d:51:
43:11:bb:06:e6:8d:72:9b:a4:94:44:b2:63:34:0b:
7d:25:78:63:ef:cf:6a:8d:53:6e:13:ad:cb:2e:0a:
1a:8b:15:bf:00:13:c2:eb:64:a5:aa:2e:a0:ed:c3:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:71:A1:1F:3D:EB:EE:E5:9F:78:5C:CF:6B:90:BC:3B:A6:20:83
X509v3 Authority Key Identifier:
keyid:37:3D:8F:55:7C:AE:18:E2:35:D9:38:BA:D3:CF:AE:17:C9:1B:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nz2PVXyuGOI12Ti608-uF8kbneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/a4ZxoR896-7ln3hcz2uQvDumIIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/517411-0c42-4d18-9039-c99dd390a7d6/1/Nz2PVXyuGOI12Ti608-uF8kbneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:61c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:2b:1f:df:23:ca:b4:ea:f6:11:e4:5c:f9:18:11:78:df:b8:
14:26:12:ff:dc:f4:c5:ad:4e:ae:00:e0:66:dc:1c:34:69:54:
12:e7:f3:e9:6e:0e:64:0f:54:d5:d1:29:1e:eb:2c:14:f1:24:
03:03:2f:7e:9e:4f:59:0d:b4:6c:24:09:67:14:2c:48:8e:39:
99:fb:63:3a:fb:7e:2c:c4:8d:c1:fc:5f:7c:36:92:19:ed:f2:
cd:62:80:4d:fc:4b:fa:59:90:61:5f:41:67:af:dd:93:77:64:
b1:ad:8d:a3:11:2e:a9:f6:49:02:63:7b:cc:99:5d:43:bf:e5:
b2:cd:d5:08:72:28:5c:fb:43:60:d5:e6:a2:78:e8:29:a4:da:
ff:b1:7d:9c:83:75:6a:1b:62:fe:15:64:dd:d8:bd:bd:91:cb:
50:53:09:cf:77:d6:fa:36:3a:e6:90:7c:c7:6b:0c:37:72:a7:
e6:e9:4c:d5:3d:cd:26:12:f5:c7:f6:2f:e2:18:96:bd:62:48:
15:0d:83:fa:52:b8:db:ac:15:ab:a5:bd:0a:56:d8:95:82:1a:
e6:c4:1d:ca:95:f1:b9:b9:fa:8f:39:21:75:3e:2e:76:2a:5c:
ca:4e:dc:64:a1:90:a9:54:f3:06:7f:50:5e:ef:fe:1a:5d:b5:
93:ec:40:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:05 2024 by rpki-client on console-fra.rpki-client.org