Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/94tks4Tb7ktNahm9nxHNYlTuAC0.roa
File: 94tks4Tb7ktNahm9nxHNYlTuAC0.roa (raw, json)
Hash identifier: fbybeiYFCUApFeKLcOYezytDend9Krbp5aM8qh8d2FE=
Subject key identifier: F7:8B:64:B3:84:DB:EE:4B:4D:6A:19:BD:9F:11:CD:62:54:EE:00:2D
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 0185730CA8C22A1C88C9193276F6570D1AF3
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/94tks4Tb7ktNahm9nxHNYlTuAC0.roa
Signing time: Mon 02 Jan 2023 15:14:47 +0000
ROA not before: Mon 02 Jan 2023 15:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64445
IP address blocks: 2a12:e6c0::/32 maxlen: 64
Validation: Failed, certificate revoked on Wed 31 May 2023 10:37:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:a8:c2:2a:1c:88:c9:19:32:76:f6:57:0d:1a:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Jan 2 15:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f78b64b384dbee4b4d6a19bd9f11cd6254ee002d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:90:05:4b:09:a4:48:da:a1:f3:e2:2d:4c:aa:
f2:d8:30:4b:41:57:5e:ac:54:1c:d7:a8:ed:66:98:
b1:e1:47:93:04:10:9b:95:10:ff:2f:fc:63:37:ff:
29:1d:32:3d:4e:85:33:8a:b2:eb:40:c2:2f:59:68:
23:82:67:e2:d6:5f:54:ec:56:ef:ff:e5:fd:07:9b:
f2:b4:ed:8f:33:c7:33:3c:29:0c:75:1c:c6:ae:39:
19:47:fb:cb:5e:8b:4e:0d:05:6c:58:26:f8:7d:1c:
f0:6c:a4:0d:31:ef:92:ce:43:3e:81:b4:42:70:94:
dd:25:17:af:8c:a3:75:32:0e:cd:0e:b2:ee:2b:7f:
60:e5:eb:8e:62:d3:9f:aa:9b:cf:3e:51:cc:cb:03:
41:b7:8f:01:1e:66:40:48:4d:0a:d0:30:f0:7b:d1:
dc:c6:09:ea:96:e7:d0:29:fc:cb:a5:f2:1a:6e:79:
d2:b1:39:ec:50:60:ca:0a:69:66:d8:39:77:76:fc:
a6:b3:e6:ad:9e:e2:3a:67:ed:31:a4:eb:10:ad:df:
e6:f3:4f:f8:6b:46:88:46:a2:5f:45:a5:b2:68:fb:
89:49:db:c1:21:99:99:0e:33:e0:50:74:ad:0f:6a:
b0:6a:6d:ac:e4:00:0d:9a:6f:80:fe:ea:49:8f:84:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:64:B3:84:DB:EE:4B:4D:6A:19:BD:9F:11:CD:62:54:EE:00:2D
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/94tks4Tb7ktNahm9nxHNYlTuAC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:e6c0::/32
Signature Algorithm: sha256WithRSAEncryption
19:17:2c:2e:76:5b:92:9d:c4:52:e7:ba:26:cf:06:b9:6a:8b:
3a:d5:5a:4f:4d:f9:11:cc:c4:0e:c8:71:09:2c:50:9a:28:e3:
c0:e2:86:7d:be:8c:08:38:06:b1:89:d0:65:f1:82:5b:e6:3d:
7a:e5:1d:f0:69:fc:08:64:03:b5:43:3b:4c:3c:29:52:38:12:
ea:49:f9:3e:9c:09:a8:f8:59:fc:dc:2b:fe:4d:aa:10:28:a9:
3c:47:f5:5e:3c:be:52:60:e4:00:47:64:2d:d4:b1:86:7d:0b:
a5:0f:6e:62:a8:66:4f:db:37:26:8c:b5:13:cb:20:04:c3:df:
c0:61:2e:68:f1:87:22:e2:30:73:4c:cb:2e:09:90:e8:28:5f:
92:3b:44:94:05:03:ef:c3:13:04:36:df:9b:c6:f0:ad:bc:73:
6f:ec:c1:61:b2:7d:7c:ce:eb:51:bf:4b:7f:36:29:bc:85:92:
a2:83:7a:a3:9e:7c:e3:a0:79:9d:d5:aa:95:75:b4:e7:fe:f4:
c9:67:40:b3:a3:fd:d5:ea:53:12:38:0a:47:fc:d5:2c:c0:93:
e1:1d:52:c8:72:6a:21:82:74:fd:40:df:2d:8c:8d:54:0f:db:
41:53:ae:aa:ce:a0:73:78:85:6b:ac:d1:c5:be:32:4b:60:ee:
67:ae:3f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:49 2024 by rpki-client on console-ams.rpki-client.org