Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/b8v_ffAvSd_ISDPdfLDeV8F5t70.roa
File: b8v_ffAvSd_ISDPdfLDeV8F5t70.roa (raw, json)
Hash identifier: heWg67lZD54EALE0dguRsdV4ZgtaojSQE1sKCelppx4=
Subject key identifier: 6F:CB:FF:7D:F0:2F:49:DF:C8:48:33:DD:7C:B0:DE:57:C1:79:B7:BD
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 01856BAED310AAE36FAB35E525FA2E571AC5
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/b8v_ffAvSd_ISDPdfLDeV8F5t70.roa
Signing time: Sun 01 Jan 2023 04:54:57 +0000
ROA not before: Sun 01 Jan 2023 04:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 2a12:8fc6:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:d3:10:aa:e3:6f:ab:35:e5:25:fa:2e:57:1a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 04:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fcbff7df02f49dfc84833dd7cb0de57c179b7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:f2:5b:a2:75:bb:85:fa:5a:a1:dc:e1:72:
30:67:58:28:26:af:f3:cf:a8:81:3a:cf:b0:e5:56:
8c:bd:b0:3d:5b:ba:3c:64:42:ff:ff:30:eb:55:ef:
a6:cc:e8:5d:ce:36:14:18:09:bf:c9:5c:8d:20:6e:
46:08:36:87:1a:c0:72:ba:b9:f0:13:8e:df:c2:11:
7b:a8:de:7b:16:30:1f:50:81:29:ff:b4:bf:a8:1b:
a7:ce:6b:d1:29:c1:1c:3c:b8:4d:ac:ba:f8:b9:6a:
c8:4c:31:cd:30:88:10:bb:20:ba:fb:fc:91:b9:31:
24:fa:10:d6:52:2a:79:2c:16:4d:c1:b8:74:20:86:
5b:d6:8c:e9:d6:b1:01:36:e5:5f:fd:d7:65:93:30:
a6:18:c9:b9:3d:0e:dd:fe:cd:49:91:c9:0f:ec:19:
6b:64:bd:3f:dc:f0:84:e8:58:2a:71:9e:75:8e:95:
e6:36:bd:db:18:9a:85:a2:de:83:46:92:e0:fe:e4:
0e:3d:f2:b7:56:22:bd:66:0a:3e:8a:b1:09:2d:85:
92:05:36:15:dd:c0:ae:01:9c:ec:a3:fb:22:23:13:
56:34:03:fb:23:7d:28:22:cb:03:3e:fb:55:ab:26:
cb:64:7e:b0:e2:1a:e0:5e:f9:03:c1:1b:0a:c9:c1:
24:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CB:FF:7D:F0:2F:49:DF:C8:48:33:DD:7C:B0:DE:57:C1:79:B7:BD
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/b8v_ffAvSd_ISDPdfLDeV8F5t70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:200::/48
Signature Algorithm: sha256WithRSAEncryption
7f:d7:7c:cd:9d:91:1f:b2:b5:26:a5:f2:31:5e:4a:9f:b4:f2:
00:87:8b:c0:3d:b7:3b:5b:6a:22:f9:82:b9:3c:66:f3:4a:55:
1d:4f:45:eb:b4:81:bc:cf:b5:5a:bb:3b:f5:e9:70:26:31:32:
4d:bb:09:ef:dc:e4:a6:72:7c:82:1d:d3:64:2b:82:b2:11:ad:
6d:bb:02:d1:4f:d8:e9:9f:1d:c7:fe:cd:78:3b:b0:34:24:46:
81:93:6d:10:33:fe:71:3b:10:cf:9f:05:00:8e:8e:aa:f3:5e:
df:55:cb:b3:03:81:6b:f6:06:c2:51:65:82:d1:20:a6:e8:7f:
ee:93:09:5d:85:d7:34:d8:45:e7:b7:86:b7:9a:4b:c5:0c:a5:
26:aa:33:bf:d5:f1:f0:b1:32:c6:77:32:6b:3d:f9:f6:ee:ce:
69:76:41:4b:c5:c2:ee:8d:7d:0d:fb:9b:6a:e8:ff:12:98:5a:
dc:2f:ac:21:47:71:56:79:a8:6a:ca:f9:fc:e3:3d:42:3f:89:
ea:a4:9b:ff:39:a5:ce:e9:8b:03:cc:b8:53:92:47:af:7d:44:
7c:db:2d:6e:b3:76:08:7e:57:6d:db:7a:ef:c9:58:f0:98:9f:
27:ad:8e:45:8a:2a:eb:09:c7:02:63:f5:70:8d:54:98:81:21:
94:72:0a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:04 2024 by rpki-client on console-ams.rpki-client.org