Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XIuYgjaAnuLtH7q_IL0qKsug_mA.roa
File: XIuYgjaAnuLtH7q_IL0qKsug_mA.roa (raw, json)
Hash identifier: fPcp+zeEjkl90blhT8oKzC2zXal+WUPhrOgB79bpivA=
Subject key identifier: 5C:8B:98:82:36:80:9E:E2:ED:1F:BA:BF:20:BD:2A:2A:CB:A0:FE:60
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018D8885A1FAB495FEC478E7B163F4AD49DB
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XIuYgjaAnuLtH7q_IL0qKsug_mA.roa
Signing time: Thu 08 Feb 2024 11:41:15 +0000
ROA not before: Thu 08 Feb 2024 11:41:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a12:ec0::/29 maxlen: 32
2a12:1900::/29 maxlen: 32
Validation: Failed, certificate revoked on Thu 08 Feb 2024 20:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:88:85:a1:fa:b4:95:fe:c4:78:e7:b1:63:f4:ad:49:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Feb 8 11:41:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c8b988236809ee2ed1fbabf20bd2a2acba0fe60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5e:6b:3f:55:f5:cb:87:53:f5:c7:e2:aa:57:
67:5f:17:70:98:61:05:f4:48:df:fa:9f:dc:a9:bf:
2d:3a:d7:62:71:51:56:65:80:28:ec:49:db:70:49:
9e:0b:9b:be:e4:4f:c7:a1:25:7d:ed:91:7c:0d:6a:
1a:b3:7d:72:fc:72:00:a0:a8:aa:68:53:9e:d3:3d:
e3:5c:dc:4a:69:d2:c4:4f:66:3d:77:a5:0e:89:c0:
26:ee:c5:c5:2c:7a:83:79:2c:5b:b2:15:ff:8c:ab:
cc:19:40:f2:39:c7:dc:8b:c4:ea:c7:22:fb:7e:91:
1e:c4:a9:b0:dc:84:11:22:63:07:9a:7c:c6:51:62:
11:77:e2:4d:89:8a:b7:c1:d1:45:de:f6:c2:e9:6e:
c8:46:3e:5a:57:89:a8:ae:a7:54:be:2b:df:27:cb:
c6:4d:69:50:ac:14:0b:88:e7:0b:65:ff:a4:de:9b:
40:05:41:f1:b4:f8:e3:91:97:ef:18:bc:49:52:1b:
2e:d3:29:40:52:99:13:8a:ef:06:93:59:cf:ca:1c:
48:28:2a:8e:24:32:e7:3d:f8:a6:ce:fc:05:63:bd:
dd:e4:ae:bf:76:1d:da:58:ed:9a:08:0f:ee:7d:56:
f5:7d:02:71:e3:a4:d4:94:31:8b:79:13:32:87:9a:
12:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:98:82:36:80:9E:E2:ED:1F:BA:BF:20:BD:2A:2A:CB:A0:FE:60
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/XIuYgjaAnuLtH7q_IL0qKsug_mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
2a12:1900::/29
Signature Algorithm: sha256WithRSAEncryption
8d:9a:04:ac:f9:7f:d7:2a:96:41:35:b8:e6:40:b1:9e:9e:84:
04:c5:95:45:f6:80:70:26:7c:f5:da:c8:56:c0:48:e4:38:b2:
38:87:a8:48:17:a6:67:6f:14:59:71:4a:6d:e2:ee:2f:33:11:
a3:e9:00:c0:fa:9a:e1:67:d0:ce:ec:4e:57:6f:b5:f7:19:3e:
60:7c:19:c1:6a:2c:23:7d:cb:c2:8b:c0:c9:2a:08:06:f3:48:
af:ed:d0:0e:e4:50:38:dc:d3:c3:2d:a5:8f:7f:07:8f:da:2c:
86:61:a7:4f:e1:55:7e:16:af:45:c5:10:6c:d6:65:6a:08:ca:
44:9d:b1:da:41:29:86:10:ca:e0:9b:33:44:df:62:cc:85:a1:
e5:1e:a4:7a:06:08:26:05:4b:38:ce:53:bc:1a:af:d0:1d:36:
8d:be:4e:5a:7b:5e:66:d3:50:85:b1:0e:86:86:f0:fb:d1:ef:
4a:18:98:68:bf:04:07:6f:00:3f:80:3d:2a:94:7d:23:9d:78:
4a:b2:68:1e:9a:be:06:22:6b:8b:24:4b:ce:4a:1c:30:6f:8f:
0c:57:7f:1e:f7:6d:31:ab:3e:0c:b1:35:c4:59:6c:9f:9b:e8:
b9:20:1b:47:b3:2d:08:e4:d4:e9:47:82:f2:b6:bd:71:c2:cb:
5e:3b:de:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org