Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/dvC_zCXfzPFGMENBkVgHIoWu01M.roa
File: dvC_zCXfzPFGMENBkVgHIoWu01M.roa (raw, json)
Hash identifier: IzjqBw8C31/7FLLe9LHFFFZJmgBG4CBr1kqYU6uIKTE=
Subject key identifier: 76:F0:BF:CC:25:DF:CC:F1:46:30:43:41:91:58:07:22:85:AE:D3:53
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 018CBF842733E2F123EAB3FEC979D8D98F28
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/dvC_zCXfzPFGMENBkVgHIoWu01M.roa
Signing time: Sun 31 Dec 2023 10:55:58 +0000
ROA not before: Sun 31 Dec 2023 10:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216157
IP address blocks: 2a12:1900::/29 maxlen: 32
2a13:ba00::/29 maxlen: 32
2a12:28c0::/29 maxlen: 32
2a12:6b80::/29 maxlen: 32
2a13:dac0::/29 maxlen: 32
2a14:7e00::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:56:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:bf:84:27:33:e2:f1:23:ea:b3:fe:c9:79:d8:d9:8f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Dec 31 10:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76f0bfcc25dfccf1463043419158072285aed353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:ff:10:18:15:00:a4:34:c1:b9:5a:f8:99:
61:01:53:01:51:80:57:1b:a4:11:f7:e1:79:60:0d:
6d:4c:ec:c4:f2:9b:c0:fc:ef:0c:4f:be:69:56:49:
f5:8a:56:fd:1f:fc:5a:7c:3f:0e:8b:ca:7b:73:5a:
61:c6:89:c2:14:00:e2:8a:0f:54:fd:0c:cb:75:33:
1a:5e:bf:9d:d2:8d:e6:97:3b:9a:61:ed:9d:f0:09:
4a:5f:a8:14:40:7b:11:07:52:8b:9b:7b:26:9c:72:
ca:37:e8:77:f7:83:a8:e0:d9:65:38:55:00:54:ce:
97:49:52:97:96:51:09:c3:9e:65:2d:e7:f9:f6:16:
3a:3b:35:eb:c9:ff:8f:c8:d5:a2:e8:49:2e:4c:75:
0c:e6:5e:bf:92:36:36:b1:15:6f:11:35:f0:d6:a4:
5a:53:7c:95:31:bd:5d:61:7c:ef:49:bc:b6:c2:9b:
85:c7:3b:d6:70:14:8e:86:83:36:c5:f2:36:b2:c8:
c0:f4:b2:cc:22:1a:36:3b:38:77:bc:84:c4:9a:77:
1b:b7:c2:29:a1:d6:21:f3:0b:50:e2:c2:96:78:4a:
eb:02:05:13:46:1c:66:d5:0d:c6:cd:e5:9b:80:ec:
dc:48:fb:43:2c:ac:4a:b5:d1:a4:2c:86:2a:a1:3f:
2d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:BF:CC:25:DF:CC:F1:46:30:43:41:91:58:07:22:85:AE:D3:53
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/dvC_zCXfzPFGMENBkVgHIoWu01M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1900::/29
2a12:28c0::/29
2a12:6b80::/29
2a13:ba00::/29
2a13:dac0::/29
2a14:7e00::/29
Signature Algorithm: sha256WithRSAEncryption
00:31:da:e7:6b:75:0f:14:f1:67:8c:ad:66:de:90:75:50:6b:
5b:14:fc:ed:56:12:6b:d5:89:90:f4:76:c2:cc:e5:4f:a5:c6:
66:c4:c6:68:15:48:64:73:c7:54:9e:c4:4e:34:87:46:ae:64:
18:47:ba:9c:c5:70:64:aa:94:e8:a2:86:c0:13:3a:ef:c0:e7:
71:d0:36:8e:6b:70:f3:23:67:76:99:bd:15:18:7a:56:61:66:
21:84:bc:df:57:73:e3:89:d0:7c:bd:38:cd:f9:59:29:dd:7e:
53:59:db:1f:fa:55:72:18:e8:5e:eb:64:42:1a:30:72:e1:76:
e5:19:a6:fa:56:31:6e:07:6d:35:19:2a:1d:e9:b1:b0:15:0f:
b4:16:ee:14:91:db:e4:49:ea:5c:d2:4e:55:dc:a8:ad:af:9c:
f6:bd:c4:dd:e4:2e:a7:21:01:ae:7e:13:b3:f5:92:df:21:70:
e9:35:88:94:07:cf:4c:ab:e5:d8:4e:62:fd:fc:2d:83:93:f7:
e8:27:38:27:cf:6a:8c:e1:ec:a6:6a:2e:94:5f:6a:ac:0a:4c:
4a:53:81:e5:ee:8f:28:ca:88:92:5e:b2:15:8d:1c:64:29:ca:
25:01:5c:a8:73:93:c1:29:96:43:87:e7:65:4a:d7:0d:a7:11:
d9:b3:d7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:02 2024 by rpki-client on console-ams.rpki-client.org