Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/aeyn3s62b09lipsRyoqQS3UDD5I.roa
File: aeyn3s62b09lipsRyoqQS3UDD5I.roa (raw, json)
Hash identifier: 2EAaEUOSeWzz2P5kKCI8Lx8g1HVkR7w8YOFcUFa4Pkg=
Subject key identifier: 69:EC:A7:DE:CE:B6:6F:4F:65:8A:9B:11:CA:8A:90:4B:75:03:0F:92
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 018B1EE4DA3ADE735637C5663F20C41EE809
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/aeyn3s62b09lipsRyoqQS3UDD5I.roa
Signing time: Wed 11 Oct 2023 13:19:55 +0000
ROA not before: Wed 11 Oct 2023 13:19:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12337
IP address blocks: 2a12:6900:1100::/40 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:e4:da:3a:de:73:56:37:c5:66:3f:20:c4:1e:e8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Oct 11 13:19:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69eca7deceb66f4f658a9b11ca8a904b75030f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:a5:5b:dc:ca:f8:2d:2c:28:46:dd:a6:22:
7b:c3:73:fe:c4:13:75:e7:a1:f6:e1:4d:7b:9e:c6:
db:88:5b:36:1b:ee:80:7a:f3:ec:92:30:50:49:a5:
fc:07:86:c9:3b:96:b0:f2:81:c2:20:37:7f:b1:4e:
77:3c:a8:90:c9:31:58:48:fa:a4:25:45:32:5c:fa:
b3:29:e4:46:c2:08:3b:2b:35:60:5d:21:5f:fc:a5:
54:25:90:9c:fa:c2:56:bc:3c:de:06:0c:99:f9:62:
83:27:0d:b8:c8:82:2d:f4:d6:70:2c:c0:58:d2:9e:
38:13:6a:95:50:7b:cf:97:93:77:2d:4b:4a:67:1b:
83:bd:aa:20:19:5a:5c:ac:f9:fb:a1:87:46:10:0c:
05:6e:c9:b4:82:14:22:ca:f4:83:55:5e:f7:a5:11:
a8:09:09:1c:2a:4a:8d:98:af:e7:14:2d:24:c1:ea:
91:34:3d:33:4d:f4:1d:37:65:a0:a3:ac:fc:c5:13:
bf:14:c4:92:f1:ae:04:9a:9b:13:52:66:ac:0a:2c:
6a:68:f9:33:a7:17:f2:77:dc:98:96:46:cc:bb:25:
f6:59:e1:3f:1e:a0:f0:c6:5c:6a:df:41:b0:6f:ff:
62:50:bc:0f:a0:fd:4e:d9:2c:0f:ae:02:8d:18:d1:
b9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EC:A7:DE:CE:B6:6F:4F:65:8A:9B:11:CA:8A:90:4B:75:03:0F:92
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/aeyn3s62b09lipsRyoqQS3UDD5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1100::/40
Signature Algorithm: sha256WithRSAEncryption
97:9c:ff:7a:90:35:ad:20:7a:6b:e4:91:28:45:c7:95:ac:43:
b2:f0:e8:6c:4b:b8:14:eb:c0:0c:10:06:e3:5a:1f:1e:61:b4:
b9:0f:99:57:0c:42:7b:8a:b3:cc:53:4c:ea:80:04:07:b1:e1:
70:46:2e:1e:77:fa:d7:8c:3c:91:06:48:5f:c9:97:68:3c:4b:
89:d1:8a:b3:32:76:9c:d2:7c:e6:fd:63:dd:3c:44:e5:80:f8:
0a:fc:8f:7d:70:73:cd:29:89:85:15:47:f2:2f:72:4b:56:a6:
39:79:82:7a:c8:47:40:98:16:1c:be:c8:4f:68:d6:bc:cf:f2:
56:86:41:be:4a:96:57:07:dd:70:b6:18:29:2e:8b:7c:28:c7:
1c:d2:b4:47:3f:53:0a:79:fa:c6:57:c4:fb:7b:b0:23:c2:ed:
0a:43:4b:8c:ac:83:da:2a:2b:89:35:c7:60:b1:28:3c:a6:43:
ac:1b:30:3f:76:3b:16:5d:d8:62:a0:a1:b7:a0:0e:b6:55:bb:
10:0d:0c:31:58:00:ea:e4:91:e7:57:24:c3:fb:c3:f3:c0:d9:
73:c2:6e:0a:13:cd:97:58:6e:da:bd:9c:86:bc:92:21:e4:ba:
56:d5:8b:b0:a2:29:4f:2b:a6:80:a9:06:db:1e:3d:7f:ae:c2:
94:56:2a:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:08 2024 by rpki-client on console-fra.rpki-client.org