Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gREOsaaIuqr6PZ-dawCDxKpiHsk.roa
File: gREOsaaIuqr6PZ-dawCDxKpiHsk.roa (raw, json)
Hash identifier: NvOjSJuCUoHXlpKYNlsbB2NbDp4G4t4Gy0VNpSpbvRg=
Subject key identifier: 81:11:0E:B1:A6:88:BA:AA:FA:3D:9F:9D:6B:00:83:C4:AA:62:1E:C9
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 01857321CC227099B1B9DBEBC6D685B1D49A
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gREOsaaIuqr6PZ-dawCDxKpiHsk.roa
Signing time: Mon 02 Jan 2023 15:37:52 +0000
ROA not before: Mon 02 Jan 2023 15:37:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212149
IP address blocks: 2a12:5840:b00b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:cc:22:70:99:b1:b9:db:eb:c6:d6:85:b1:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Jan 2 15:37:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81110eb1a688baaafa3d9f9d6b0083c4aa621ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:aa:00:81:ea:bf:ef:be:95:05:6b:e6:b3:46:
bf:bc:1b:e5:9d:79:28:a6:d7:e9:08:9f:52:62:ca:
3f:5c:b2:d7:84:67:90:b8:04:9c:00:4a:5f:57:18:
21:f0:1d:42:df:0b:70:a8:00:a3:8b:e9:89:ca:93:
a7:af:25:85:78:2e:03:54:1d:42:f2:94:83:2d:bb:
19:c1:97:21:e6:14:29:62:86:c6:37:cc:b8:6c:f8:
44:e7:b9:75:94:ee:e1:6f:0d:43:f4:3a:53:50:8a:
23:d5:50:e1:1c:bf:35:8c:f5:03:97:2a:a4:f4:e3:
5b:2b:cd:7d:ff:3f:43:a6:06:28:8c:c9:8a:50:f5:
05:4f:cd:44:bc:89:e5:cf:d6:3d:96:bb:1c:03:e7:
52:8c:09:07:2b:8a:a4:a9:53:59:22:df:f2:6f:63:
f1:ef:19:bd:d5:59:f1:1b:0b:d1:13:1b:73:60:f1:
a6:93:95:49:89:6e:d0:c7:64:7e:db:0c:13:cc:94:
25:1e:32:df:c0:a7:4b:1e:4d:3d:7c:96:1c:0b:c7:
99:70:45:00:1a:88:2d:0e:12:7d:f1:d2:de:79:f4:
3b:e9:11:01:75:85:e3:43:21:f1:05:61:eb:ff:cb:
0c:d7:eb:55:fc:f5:1d:89:d8:4f:0e:2b:46:14:4c:
28:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:11:0E:B1:A6:88:BA:AA:FA:3D:9F:9D:6B:00:83:C4:AA:62:1E:C9
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gREOsaaIuqr6PZ-dawCDxKpiHsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
b3:0d:72:f5:2b:a9:c9:8e:e2:16:da:30:46:48:a7:9b:41:84:
6e:de:91:c8:04:54:65:33:4f:9f:2c:a2:db:c9:98:ad:20:58:
96:5a:29:f4:d2:ac:d6:f4:9e:3e:b1:d5:f8:4c:33:d0:97:b6:
02:fd:8e:f6:9f:c1:2a:be:1a:e9:7e:20:fe:ad:e0:a8:b2:c3:
8b:e2:4a:73:6d:bb:eb:21:cf:86:58:97:6b:da:c6:33:af:13:
e9:7b:7b:13:54:99:f8:28:d0:4b:06:5a:05:d3:a4:2c:6e:67:
c1:30:9c:b8:81:48:09:84:31:62:74:7f:5d:99:9a:30:15:4b:
da:ef:45:fa:d4:da:4a:b0:62:97:43:b4:e0:3c:86:db:b1:17:
71:f8:05:78:de:7e:44:55:00:ba:89:c1:6f:13:af:d7:35:f5:
c6:9d:a7:ae:28:0b:36:f3:0e:5e:83:84:e0:48:e5:6b:30:df:
26:b2:11:66:2e:6b:d2:5d:6f:27:51:47:0a:9b:c6:44:89:bd:
ef:3a:6f:42:2b:6c:a2:e5:d6:7a:5b:20:be:a7:7e:25:4a:8e:
59:26:3b:29:c5:16:1d:00:d7:f8:7d:1a:33:58:8c:e4:0f:3a:
b9:17:06:33:68:11:f4:b3:5e:3f:be:a3:63:1f:69:23:d6:4d:
bf:e3:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:36 2024 by rpki-client on console-ams.rpki-client.org