Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/9vvow6hmm4C8bXUA34WTsI4GLIk.roa
File: 9vvow6hmm4C8bXUA34WTsI4GLIk.roa (raw, json)
Hash identifier: RZSgpeRvglQHTlEuRaJdZs5mlLtUvEQzAY3Q5zwdpwo=
Subject key identifier: F6:FB:E8:C3:A8:66:9B:80:BC:6D:75:00:DF:85:93:B0:8E:06:2C:89
Certificate issuer: /CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Certificate serial: 01887136D56070F17753AD8C4F1759509871
Authority key identifier: D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/9vvow6hmm4C8bXUA34WTsI4GLIk.roa
Signing time: Wed 31 May 2023 09:49:58 +0000
ROA not before: Wed 31 May 2023 09:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207330
IP address blocks: 2a12:a3c6::/31 maxlen: 31
2a12:a3c2::/31 maxlen: 31
2a12:a3c0::/31 maxlen: 31
2a12:a3c4::/31 maxlen: 31
2a12:a3c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 20 Jul 2023 13:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:36:d5:60:70:f1:77:53:ad:8c:4f:17:59:50:98:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e31a149c2e6ae9acc729cf7ac1706de3de739b
Validity
Not Before: May 31 09:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6fbe8c3a8669b80bc6d7500df8593b08e062c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c2:82:70:26:3f:c3:2e:51:33:16:77:6e:56:
19:f3:dc:fb:43:06:39:c9:a5:ee:a1:9c:f7:cc:22:
5d:ca:31:df:84:9f:0f:ee:6d:c7:16:3c:f9:d3:d1:
30:13:87:73:2b:09:e9:29:44:d3:82:bf:67:f4:df:
ac:1b:43:5e:25:91:99:60:10:f7:90:44:66:68:cb:
2f:3e:94:fc:36:45:c1:23:33:fa:8a:a0:06:e6:aa:
3a:a1:7b:b2:7a:b6:e5:52:c4:cd:31:88:33:74:42:
ab:ab:81:b9:d7:06:da:f0:fa:94:1d:02:ef:eb:31:
f7:57:f9:57:24:7b:7c:de:3f:9f:fb:c0:51:cf:5c:
f0:86:50:44:f7:2e:6c:df:e6:6c:f0:4e:30:77:de:
2a:58:c7:f3:45:e2:1d:00:15:06:93:29:52:2d:2d:
aa:83:da:07:8c:69:4b:f9:6f:72:e1:91:06:39:80:
2d:3e:d1:5c:60:12:a4:c5:e5:78:1f:17:54:71:d9:
a0:3d:63:55:a9:11:5e:f8:05:cd:b4:d9:df:19:4d:
8f:df:1d:72:ea:c1:47:b9:c2:3e:c8:29:12:ad:cf:
d4:79:ca:9e:0e:2a:6a:43:a4:b5:ae:08:12:c3:b2:
a7:7c:0c:ba:05:c0:a3:68:cd:d0:a2:24:47:ab:d9:
13:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FB:E8:C3:A8:66:9B:80:BC:6D:75:00:DF:85:93:B0:8E:06:2C:89
X509v3 Authority Key Identifier:
keyid:D0:E3:1A:14:9C:2E:6A:E9:AC:C7:29:CF:7A:C1:70:6D:E3:DE:73:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OMaFJwuaumsxynPesFwbePec5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/9vvow6hmm4C8bXUA34WTsI4GLIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d46e2b-de4d-4b6f-8dd7-69629c501943/1/0OMaFJwuaumsxynPesFwbePec5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
3f:3f:b2:f0:0e:59:ee:e0:bc:49:51:91:46:9a:f8:8d:25:a4:
1b:ef:4f:f6:82:20:8f:03:9d:ec:2c:27:34:e0:81:61:e1:89:
fb:9d:76:48:16:65:72:62:eb:39:61:81:33:7c:62:4d:33:48:
e8:75:99:a1:be:eb:41:78:3f:33:da:38:b9:ec:e2:13:73:fa:
bc:6a:1a:a0:44:09:6f:a3:32:84:82:a1:65:f8:02:72:aa:1c:
ad:91:7c:86:91:85:01:c9:16:eb:d8:7c:bb:2e:3b:31:8e:70:
17:02:21:db:9b:03:45:0e:7e:54:80:87:c5:41:66:ea:72:85:
24:3c:98:18:89:65:8d:79:3c:0e:f0:18:f4:8a:a3:87:76:68:
44:9a:57:03:6b:25:2c:27:83:9b:93:a9:e7:d0:48:05:56:26:
cc:b0:38:8f:a5:47:21:ac:97:1e:9e:69:ca:17:4a:47:e5:9e:
9d:3f:aa:9f:7e:b8:cd:6f:f2:63:a4:f5:87:8c:13:81:00:44:
ee:39:cb:8d:7c:68:f6:20:5a:f6:ef:ff:47:2c:f5:1f:27:ea:
53:8e:7a:5f:cf:11:35:67:4b:1f:ae:e1:2d:de:cd:d6:9b:ed:
60:26:3a:d5:b0:e5:56:fc:19:0a:79:20:dd:10:7f:30:e7:fb:
35:ad:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:08 2024 by rpki-client on console-fra.rpki-client.org