Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Pe6U9Q3JR71hrSLACRlSEyF_8Cs.roa
File: Pe6U9Q3JR71hrSLACRlSEyF_8Cs.roa (raw, json)
Hash identifier: 5o5l7ZG64kzXrPgBZHTYVWXdIbQnd3LbsFTwZ4wcJLI=
Subject key identifier: 3D:EE:94:F5:0D:C9:47:BD:61:AD:22:C0:09:19:52:13:21:7F:F0:2B
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018ED8C44BE40421F0B75EB5EF71019AC7A4
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Pe6U9Q3JR71hrSLACRlSEyF_8Cs.roa
Signing time: Sat 13 Apr 2024 18:42:06 +0000
ROA not before: Sat 13 Apr 2024 18:42:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a12:ec0::/29 maxlen: 36
2a12:1900::/29 maxlen: 36
Validation: Failed, certificate revoked on Fri 17 May 2024 18:44:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d8:c4:4b:e4:04:21:f0:b7:5e:b5:ef:71:01:9a:c7:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Apr 13 18:42:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dee94f50dc947bd61ad22c009195213217ff02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:77:64:cc:63:f0:8a:da:2a:4c:fe:1f:ab:
46:ad:e6:c2:86:27:3a:92:d0:ee:c4:7f:87:58:be:
93:db:66:9e:9e:ae:81:ea:b3:55:01:4a:be:d9:e3:
e7:b1:98:90:d9:43:4d:b6:35:25:3b:d8:d7:78:a1:
e4:97:81:63:13:65:48:93:de:90:ed:c5:2d:82:61:
3c:b2:cc:23:fd:42:87:bb:51:af:d9:ec:c5:a1:1b:
d7:82:e6:28:1b:78:13:68:4c:c4:09:de:db:9f:48:
dc:9f:d4:d4:55:ba:80:42:51:30:eb:d5:94:ad:4f:
79:c0:7b:82:0b:37:46:fa:96:ab:15:38:2e:3a:70:
22:df:e0:95:08:e6:de:30:85:7c:ad:6a:e5:67:9e:
df:12:df:d1:4f:fb:96:80:67:fa:bb:02:ce:18:57:
cb:08:c0:f2:ec:61:f5:e1:fa:45:84:cc:c9:52:87:
16:31:52:87:6a:b6:ce:52:b5:53:52:c3:f6:cc:be:
2f:8a:f6:8d:7a:8c:4a:cd:fe:0e:1a:48:70:49:0f:
f9:ed:3a:e7:0a:29:4a:20:e1:6c:23:73:ca:b6:b7:
61:c3:08:91:db:ce:31:40:a5:d7:32:42:a4:45:f1:
60:c7:0b:5f:8c:4c:b3:84:4e:e8:ea:12:07:be:f5:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:94:F5:0D:C9:47:BD:61:AD:22:C0:09:19:52:13:21:7F:F0:2B
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/Pe6U9Q3JR71hrSLACRlSEyF_8Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
2a12:1900::/29
Signature Algorithm: sha256WithRSAEncryption
98:4d:d0:aa:b6:93:72:0a:c6:2d:5c:5e:47:eb:54:49:97:1f:
24:63:b2:03:03:ff:48:2a:c8:ad:4e:d8:01:f5:ac:fd:20:bc:
c5:61:1b:20:31:42:2c:34:79:91:33:77:1a:8c:36:6e:80:47:
30:7b:3c:5d:46:e7:34:53:73:28:8b:cf:92:1f:a2:c6:d2:c4:
3b:fd:18:d8:f2:79:06:01:3e:99:be:94:4e:e1:dc:2c:74:42:
c0:f6:be:df:28:c6:46:3c:37:cc:8d:ac:b7:62:11:e7:1d:41:
19:41:26:15:4c:c2:a1:39:ee:04:4f:da:9b:85:8f:66:80:60:
da:36:a6:3b:51:7f:1d:11:b4:b3:1b:9a:ab:1b:74:50:e2:77:
f6:e3:38:63:8e:4b:8d:e4:b6:c2:8a:44:a6:cc:c8:4f:61:e5:
39:0c:73:38:24:1d:92:d3:1a:8b:f5:20:0e:1a:d8:6b:6e:30:
4a:08:b3:1e:1a:d1:8b:72:62:f0:13:8b:f1:1c:25:8e:d7:46:
ed:f4:f1:70:5f:05:0e:a4:f5:12:75:4b:05:6c:27:11:b4:57:
b0:ba:cb:11:22:b8:cd:91:1a:3b:83:7b:1e:85:85:38:fa:3c:
7e:0b:3a:be:b2:35:84:f1:86:7e:11:a7:09:d2:0a:ce:6a:d3:
00:7b:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:38 2024 by rpki-client on console-fra.rpki-client.org