Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/x-RaiTOtlSUw-dHwobmL8U3nkX8.roa
File: x-RaiTOtlSUw-dHwobmL8U3nkX8.roa (raw, json)
Hash identifier: 4c1lI5OTBCwT6vr6O4DNbZtNIHYQ/ZjR1hCEmHgZKls=
Subject key identifier: C7:E4:5A:89:33:AD:95:25:30:F9:D1:F0:A1:B9:8B:F1:4D:E7:91:7F
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018A0D2327247325284FFB6343BEE73B7485
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/x-RaiTOtlSUw-dHwobmL8U3nkX8.roa
Signing time: Sat 19 Aug 2023 09:32:02 +0000
ROA not before: Sat 19 Aug 2023 09:32:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48261
IP address blocks: 2a12:4b40::/29 maxlen: 64
2a13:c400::/29 maxlen: 64
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0d:23:27:24:73:25:28:4f:fb:63:43:be:e7:3b:74:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 19 09:32:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7e45a8933ad952530f9d1f0a1b98bf14de7917f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c9:11:0d:c4:27:9a:e3:d9:78:14:b3:e2:ca:
b8:14:90:f9:36:2d:35:d0:ff:8c:fc:ce:0a:26:3a:
b2:0b:e1:a1:86:59:89:6b:e6:58:66:e8:21:58:10:
03:b8:5b:9d:6b:6e:7a:9f:e0:8e:97:68:b9:81:38:
2d:c0:e8:fd:2c:bb:06:1e:ec:d9:55:ba:5b:7c:7c:
bd:8d:08:16:75:bc:fe:5a:54:4b:fd:ba:72:6b:98:
ba:52:e8:e3:f1:e5:0f:f1:c7:b2:cf:c7:5b:17:4d:
a1:e4:42:7d:4b:16:6d:4c:df:36:b4:36:50:42:77:
1c:ac:9b:59:d8:47:08:93:75:d1:9f:0a:60:e9:1f:
2c:1d:97:a7:91:d8:7c:dd:2b:e2:8e:7f:75:92:12:
c5:b0:2d:76:7f:aa:97:d1:8d:dd:e6:01:e3:c8:cb:
b5:43:d6:e1:c4:1f:31:63:1b:c4:2c:d5:99:9a:5b:
38:01:c2:dc:fd:84:09:29:ea:08:f7:d2:58:f7:72:
d3:41:e4:93:87:63:14:39:02:17:a9:54:e4:0f:7d:
ad:35:c3:08:10:68:81:d1:69:48:c9:72:7f:8b:e4:
38:0b:a5:6a:09:15:a3:22:b5:37:75:34:de:6c:f5:
c1:87:cc:41:f6:a6:58:8d:7f:02:96:bc:de:13:74:
7a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E4:5A:89:33:AD:95:25:30:F9:D1:F0:A1:B9:8B:F1:4D:E7:91:7F
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/x-RaiTOtlSUw-dHwobmL8U3nkX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4b40::/29
2a13:c400::/29
Signature Algorithm: sha256WithRSAEncryption
85:f2:0d:06:90:7d:54:d8:02:91:57:19:fe:ee:8f:45:1b:4b:
8b:30:71:a6:68:c4:8a:24:22:f3:f8:3e:9b:86:a3:42:9c:77:
58:d4:6c:fc:da:d9:cb:f0:94:25:7d:38:58:af:9f:5f:a8:45:
44:a7:3b:3d:cf:4d:ad:9a:c9:36:f2:8d:e9:e4:65:8a:67:37:
7b:d4:fc:a5:06:bd:69:fc:05:3d:39:73:bb:90:70:9d:ce:29:
47:17:e5:1a:a2:c7:7a:10:3c:77:6b:07:d3:57:eb:53:f5:78:
82:59:40:5b:81:70:41:b6:1c:c0:87:0b:d2:a3:58:94:9d:26:
20:7a:b4:dc:ea:16:1d:f2:ac:f3:5a:ba:43:ff:24:34:9b:60:
e2:ac:d3:db:40:85:28:d1:a1:e8:20:00:f7:9f:cb:db:e5:4c:
e1:77:15:00:80:7f:86:76:a2:a3:00:ed:4f:7a:6d:4c:0d:67:
21:41:d3:b5:f5:fc:7e:f0:12:b4:74:b0:14:2f:1c:2f:ab:bd:
cb:2c:86:6a:b7:6b:8c:3a:56:05:55:01:67:8d:23:3c:8e:15:
18:a2:be:77:b2:50:08:b9:3f:82:33:92:ee:01:bd:f0:89:c8:
04:aa:83:22:8e:f2:72:36:2e:f0:b3:80:bb:c3:58:4f:9b:5f:
1e:43:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org