Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/T7y-zIYrKqwgFInm_6D2AV2NzMs.roa
File: T7y-zIYrKqwgFInm_6D2AV2NzMs.roa (raw, json)
Hash identifier: qgeb4RqzVNgnOmJSwmrH61PzrKxocE8N9Wh5XkQYiAg=
Subject key identifier: 4F:BC:BE:CC:86:2B:2A:AC:20:14:89:E6:FF:A0:F6:01:5D:8D:CC:CB
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01901A6795510AF3791C447E5F18C2353A81
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/T7y-zIYrKqwgFInm_6D2AV2NzMs.roa
Signing time: Sat 15 Jun 2024 05:38:34 +0000
ROA not before: Sat 15 Jun 2024 05:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:ec0::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 17 Aug 2024 11:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1a:67:95:51:0a:f3:79:1c:44:7e:5f:18:c2:35:3a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 15 05:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fbcbecc862b2aac201489e6ffa0f6015d8dcccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:e6:92:15:2d:30:1d:bc:70:4e:eb:6d:7a:
51:f6:f0:e3:dc:da:b8:44:75:ee:4a:f2:35:6e:83:
0b:6b:83:98:8f:df:b8:79:bc:20:2e:98:d7:70:1d:
ba:ef:b8:84:03:0e:33:8b:bb:6d:46:8d:ce:22:f1:
4c:dd:9e:33:d7:69:e5:68:ea:16:85:79:df:d7:91:
97:32:37:c2:c4:ce:d1:72:7f:ab:3b:9b:b2:87:db:
91:86:25:57:01:d5:47:59:d6:fd:e4:6b:56:35:c4:
e9:9c:d6:2c:b1:56:ce:dd:6c:a5:45:4a:64:f2:a4:
24:92:d0:f6:cc:7e:b7:9b:ae:3f:d5:b1:49:f9:62:
e6:14:b1:18:29:80:24:40:fd:76:4b:5e:d4:0a:c0:
74:58:ab:a0:9e:e8:71:16:5e:20:06:8a:6f:e8:40:
fe:38:89:59:de:44:10:e8:c7:0d:f1:76:e6:37:76:
d6:81:0b:13:9f:40:66:25:4e:80:6e:4a:3e:78:ec:
59:34:1b:71:8c:a1:47:ee:63:c0:40:fd:69:4f:35:
44:eb:3e:b0:0e:7d:50:79:2b:a0:52:29:04:01:5a:
b6:94:b2:6e:4a:af:d7:58:44:c6:4b:8a:74:39:ed:
6d:69:54:5b:9f:ad:cb:31:2e:4f:e0:2f:73:62:e2:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BC:BE:CC:86:2B:2A:AC:20:14:89:E6:FF:A0:F6:01:5D:8D:CC:CB
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/T7y-zIYrKqwgFInm_6D2AV2NzMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:62:a0:2e:f6:71:d8:99:9b:af:32:1a:58:4c:f7:82:fe:ac:
47:21:bc:51:a3:da:ac:40:39:69:5c:c5:02:e0:3d:6a:2e:06:
86:2a:6a:de:e8:42:97:ab:8b:9c:69:f5:86:a0:6b:ca:ff:aa:
6a:e1:94:3c:df:00:3f:d3:fe:7c:10:ff:b4:59:2c:bf:ab:88:
e2:bd:d9:ca:22:cb:e7:25:b4:0f:a9:04:dd:cd:bd:8f:96:6f:
66:1a:1a:8a:34:1e:58:46:8e:f3:9a:72:7c:de:2a:df:83:ee:
89:de:3d:a5:c2:36:af:e5:ed:b4:2b:23:14:d0:d0:68:42:90:
7f:d2:b2:4b:c2:cf:79:4d:25:a1:f7:d5:3c:20:07:32:7b:4e:
85:81:45:03:29:75:6e:8d:2a:9c:13:43:51:f0:bb:3e:5e:44:
23:47:d9:2a:9c:90:f1:c0:33:a5:e2:fb:70:3f:70:c1:ca:0c:
69:61:18:82:de:b0:93:c2:5b:ac:f2:a9:38:a8:f3:e3:42:7e:
dc:36:5a:92:3b:c4:f0:84:b7:bb:fb:e2:ed:12:4a:a3:5d:58:
dc:c4:f5:03:3e:0b:ad:69:88:71:9b:31:77:3f:ea:31:0b:84:
ed:6f:8e:5b:56:49:c4:bd:dd:55:bf:ef:28:dc:4a:a7:98:37:
48:bb:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 16:28:12 2024 by rpki-client on console-fra.rpki-client.org