Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/X6FLW-IFz1r2EixdDU0NAGsLrDg.roa
File: X6FLW-IFz1r2EixdDU0NAGsLrDg.roa (raw, json)
Hash identifier: r0QKDNaxoKzNgAwoxDnCP+RKwRRRq/nJ9FNiZOcSC88=
Subject key identifier: 5F:A1:4B:5B:E2:05:CF:5A:F6:12:2C:5D:0D:4D:0D:00:6B:0B:AC:38
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 01904BA1D115E07DC7607FE016185F295362
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/X6FLW-IFz1r2EixdDU0NAGsLrDg.roa
Signing time: Mon 24 Jun 2024 19:03:34 +0000
ROA not before: Mon 24 Jun 2024 19:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a12:24c0::/29 maxlen: 29
2a12:35c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 16 Aug 2024 14:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4b:a1:d1:15:e0:7d:c7:60:7f:e0:16:18:5f:29:53:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jun 24 19:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fa14b5be205cf5af6122c5d0d4d0d006b0bac38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:e7:f0:89:f1:21:34:86:d0:ad:09:51:bb:
36:76:e7:c5:5e:90:92:a9:3b:d6:ad:a6:8c:73:5b:
f7:5c:af:e7:53:ad:49:d3:d7:b8:b8:18:86:3b:67:
75:d6:24:4b:34:19:df:3b:66:cf:b8:35:49:18:45:
ef:61:e8:64:f9:f5:62:f4:81:8b:2f:6b:56:60:47:
ac:4a:04:0f:27:fa:f0:2c:55:e8:84:c8:75:70:51:
fd:64:e9:31:5f:63:da:dc:88:f0:c1:b4:f2:31:66:
a1:35:aa:35:5a:10:bd:bc:c5:8b:b8:02:c3:e7:d8:
c2:0e:4c:56:79:23:18:a7:ac:c0:c5:d7:2a:94:0b:
f6:88:c9:4b:b0:cd:6a:5e:d2:68:6d:0c:4a:55:47:
e7:c8:1e:80:be:ad:c0:ba:32:36:3e:94:30:99:95:
e6:45:ea:4f:62:45:55:2d:18:8f:b7:b5:0d:36:1e:
1d:d5:2e:7a:6d:0d:8a:9b:f7:24:c8:7a:5d:22:e1:
11:a3:ff:65:4b:fe:94:fb:e0:72:19:ea:88:ba:6f:
f5:d3:93:dd:38:e7:c9:8c:9f:f0:bc:fb:8b:3d:5d:
96:d7:f9:81:16:ad:c9:e9:2b:18:8e:82:02:6e:c4:
f5:4f:20:0a:b8:05:be:b2:43:ea:21:a6:c5:bb:e7:
1d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A1:4B:5B:E2:05:CF:5A:F6:12:2C:5D:0D:4D:0D:00:6B:0B:AC:38
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/X6FLW-IFz1r2EixdDU0NAGsLrDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:24c0::/29
2a12:35c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:86:da:d3:60:5c:d1:2e:72:e1:43:44:96:4a:ea:66:86:10:
84:30:58:b8:03:98:44:d6:78:f4:96:3b:77:10:d3:64:5d:a0:
42:b6:2c:46:59:5d:0c:32:fb:cd:b1:a1:0a:2c:0f:ff:9f:fb:
b6:b6:07:cc:0b:2c:01:cc:36:69:09:a7:24:26:3a:63:65:7e:
0d:a6:90:87:c4:18:64:a7:7d:ec:30:fe:95:0b:e9:b5:12:ad:
fd:11:8b:98:a2:db:f5:92:9b:a9:82:37:84:03:4f:04:c8:a7:
ec:54:07:c3:5a:be:04:3a:f3:51:8c:d1:b0:e5:b6:0a:6f:3a:
10:eb:bc:0e:8f:82:ca:2a:80:4a:e6:69:5b:8c:f7:e8:43:ef:
fc:e7:b4:11:77:e1:41:41:a0:40:16:a3:44:fc:b1:82:97:72:
ff:79:a4:a6:b0:65:3d:65:c4:3d:6a:a1:59:43:a0:a9:6d:91:
11:db:41:8a:c3:1b:02:55:12:a8:fd:6d:d4:29:77:b2:7d:a2:
55:47:22:40:45:4f:4f:9a:1c:05:7f:0f:a1:27:1f:1a:ba:9a:
1a:3e:b2:81:f4:4b:12:58:a6:08:2d:d4:2c:0b:f0:b5:e3:8e:
b0:24:bd:ec:bb:8a:4d:c9:54:84:79:c2:5a:21:da:e6:59:9e:
d0:6b:15:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 16 18:39:58 2024 by rpki-client on console-fra.rpki-client.org