Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/N-baIIO3-MXisXnV8r0WnVM09bg.roa
File: N-baIIO3-MXisXnV8r0WnVM09bg.roa (raw, json)
Hash identifier: 615bEfV3tJnbx/NBP7V7TZE8ZFrDk/Q7XegV7Ktgqhw=
Subject key identifier: 37:E6:DA:20:83:B7:F8:C5:E2:B1:79:D5:F2:BD:16:9D:53:34:F5:B8
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018D383CE862D872B8A445FC2D404791649E
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/N-baIIO3-MXisXnV8r0WnVM09bg.roa
Signing time: Tue 23 Jan 2024 21:32:12 +0000
ROA not before: Tue 23 Jan 2024 21:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 2a12:ec0::/29 maxlen: 32
2a12:1900::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Feb 2024 11:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:38:3c:e8:62:d8:72:b8:a4:45:fc:2d:40:47:91:64:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jan 23 21:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37e6da2083b7f8c5e2b179d5f2bd169d5334f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:52:ac:a4:49:89:4c:f9:a3:e2:52:a1:81:
d6:ed:e7:b6:3b:a4:d8:51:ee:2d:5a:a8:47:1f:d3:
5a:f4:d0:4d:0e:73:5d:2d:af:11:fd:d7:5b:82:d4:
e1:a8:64:4e:dd:d0:79:8c:58:f5:17:fa:1a:80:f7:
dd:d9:c2:aa:74:3e:e2:bb:08:35:2d:5c:2e:ad:de:
60:d8:54:5a:9b:a5:6a:9c:e4:35:03:72:64:81:e3:
4e:6b:e7:7f:83:e3:a9:8f:32:c0:2d:36:cc:33:b2:
94:4a:ce:8e:a4:22:f9:38:1d:71:15:8d:7b:e6:50:
e6:a9:bb:fa:65:e5:48:90:81:92:71:32:f9:26:55:
be:86:cd:35:6f:c9:57:cf:ee:0d:28:e1:de:6d:96:
f7:e1:a5:3a:32:f4:3f:ca:a5:2b:6a:2b:8b:19:a1:
b0:2a:35:31:a5:ad:b8:a1:d4:3c:a8:05:99:c4:f0:
b2:48:4e:3a:b1:9a:a2:63:f8:fb:aa:3c:46:33:34:
29:1e:23:ca:04:40:79:8f:5e:b7:de:65:6f:a5:90:
7b:ec:5b:e4:3b:ec:60:35:bc:29:ff:26:31:3f:5d:
da:03:b0:62:f3:53:b0:e8:b7:6c:d0:85:fc:a3:92:
1d:0f:72:83:74:52:d6:be:55:97:40:2b:21:14:02:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E6:DA:20:83:B7:F8:C5:E2:B1:79:D5:F2:BD:16:9D:53:34:F5:B8
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/N-baIIO3-MXisXnV8r0WnVM09bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
2a12:1900::/29
Signature Algorithm: sha256WithRSAEncryption
77:f3:6d:c5:f1:b9:c6:00:1f:4a:ce:64:8c:0a:f4:9c:7a:f8:
b7:3b:05:ff:36:4a:b5:35:5d:f4:14:e2:c0:7f:f5:da:80:85:
cb:81:ea:a4:cf:2e:79:69:c7:1e:49:dc:a7:ac:2f:15:f8:9a:
8d:92:0b:74:4b:0f:79:a8:d5:aa:60:66:e5:95:e2:56:1d:d6:
93:c9:ae:53:fc:86:a9:4e:26:0d:08:62:3f:a2:18:91:af:cc:
1c:93:2c:6c:ca:17:4d:d2:89:43:6a:78:3f:45:1c:72:fd:79:
b9:24:50:7d:c2:b2:a6:84:0a:70:45:5b:93:0f:36:15:51:f9:
1d:28:70:04:cf:8a:bb:db:a4:84:49:dc:b0:1e:9a:cd:bc:e4:
db:71:d2:3c:c4:6a:26:e1:69:b8:09:41:0e:0e:52:d2:b8:53:
d4:a7:7a:5a:53:83:f5:cd:88:a7:0b:7f:49:5b:51:dc:f5:cf:
6a:d4:05:17:3b:52:49:77:ed:7e:7b:70:f5:8b:43:10:c5:e1:
e0:b3:62:e3:b6:ef:f6:3a:e4:f7:fc:8c:05:ba:97:53:d2:7e:
86:62:72:36:37:25:95:59:ba:fb:2b:19:f4:2a:5f:42:cd:aa:
e1:df:3a:03:6f:52:e5:cc:d3:6d:ff:f3:eb:3d:4a:f3:79:b5:
82:32:db:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org