Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa
File: gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa (raw, json)
Hash identifier: rX8uC2oq+/JbcVYBDVQyJAD8lZXrL7Vozvbu6iYt+/8=
Subject key identifier: 81:39:24:8E:7C:22:66:69:0E:48:9C:7A:94:65:F1:28:35:FB:4E:6F
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0187F6F5A1725D8AEBF349D43154FA8B1E28
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa
Signing time: Sun 07 May 2023 16:05:05 +0000
ROA not before: Sun 07 May 2023 16:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212104
IP address blocks: 2a12:5844:1112::/48 maxlen: 48
2a12:5844:1110::/44 maxlen: 44
2a12:5844:1111::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:f5:a1:72:5d:8a:eb:f3:49:d4:31:54:fa:8b:1e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: May 7 16:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8139248e7c2266690e489c7a9465f12835fb4e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8f:68:90:a3:b4:6e:53:67:ca:9a:58:28:5c:
c2:47:ee:29:fb:32:72:ef:f0:c8:0b:4b:a1:12:21:
f9:6c:be:f8:3a:2f:74:c0:e4:3d:f6:d3:bb:48:ac:
16:8e:14:11:fa:76:13:1b:99:88:ed:8f:4d:d2:b2:
b3:0e:90:12:c9:80:48:df:99:62:b0:3d:90:e9:5d:
6f:a9:cc:85:ea:58:3e:8f:12:29:56:25:83:0f:d7:
ee:d3:88:9d:56:52:84:88:88:e8:4b:3e:b9:89:e3:
bb:9a:0b:2e:b8:0a:0c:4d:f2:fe:2e:95:c0:71:57:
77:a1:5d:f5:b3:11:b9:8e:6a:74:68:83:8c:da:08:
ea:c1:d9:3b:60:14:1c:6d:86:4d:25:6e:04:26:ba:
93:47:90:d3:4f:de:2c:58:9e:42:c1:87:d4:bc:dc:
11:37:89:b3:56:95:fb:be:16:17:31:24:05:75:e0:
37:ab:39:bc:50:92:62:8d:f2:c9:e1:9b:77:7a:bd:
c1:73:f2:5a:48:be:be:f2:dc:3c:57:69:74:11:b4:
a5:4b:8b:7b:6d:37:f6:b0:b0:80:f6:de:ee:cc:f0:
87:5f:22:58:56:7a:ec:2a:08:7e:c7:08:ba:56:46:
34:f7:07:8f:79:45:aa:3b:83:8d:62:8f:d3:75:b7:
5c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:39:24:8E:7C:22:66:69:0E:48:9C:7A:94:65:F1:28:35:FB:4E:6F
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/gTkkjnwiZmkOSJx6lGXxKDX7Tm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5844:1110::/44
Signature Algorithm: sha256WithRSAEncryption
46:de:1f:64:40:f0:6c:03:54:a4:0d:33:75:df:51:f5:18:ff:
61:e7:a2:00:79:97:79:97:78:6d:f3:f7:af:aa:60:3e:80:ea:
d5:23:bb:15:1c:79:56:b6:e8:b8:19:8b:f0:72:9c:38:b7:6b:
23:3d:3e:cc:66:69:8f:bc:c8:76:5d:99:b8:53:ad:bb:c7:63:
d4:26:08:3f:34:22:dc:33:fa:9c:44:77:ca:71:e9:03:7f:cd:
93:f6:26:a8:76:6f:0f:26:07:a9:34:fb:fc:a8:f6:61:ec:f7:
53:8a:58:3b:9e:ea:85:32:88:2d:17:5e:a0:8e:01:02:4f:e5:
f5:f5:f2:07:09:5a:0c:5b:bc:bc:20:6a:d4:17:82:9e:93:fc:
55:04:f6:d0:3f:95:86:5c:ea:d6:08:79:43:ce:e4:ae:8a:22:
94:0d:05:cd:d0:bb:85:3c:78:8c:a8:aa:fd:b5:d2:da:76:97:
8c:e6:65:b6:1a:c8:8b:0b:1d:cf:28:b4:7d:1f:df:62:6f:73:
a2:d6:e7:92:b3:62:42:35:95:c4:1d:29:6a:26:f7:c3:4e:96:
63:30:a8:77:35:5c:dc:f5:a7:cd:25:22:69:30:99:13:57:44:
60:72:6c:dc:1b:28:8d:ae:71:69:3c:55:ea:62:96:97:02:9e:
34:33:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:35 2024 by rpki-client on console-fra.rpki-client.org