Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/gAncwM8NrR1P3ifJtSZp7pV2Ey4.roa
File: gAncwM8NrR1P3ifJtSZp7pV2Ey4.roa (raw, json)
Hash identifier: qGLUQ2lEIRnBWoZuW9SplWfM0UKR6BtwfQhecTRqNdc=
Subject key identifier: 80:09:DC:C0:CF:0D:AD:1D:4F:DE:27:C9:B5:26:69:EE:95:76:13:2E
Certificate issuer: /CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Certificate serial: 018B1EEFD4039D66A852D82B0E969D60A55C
Authority key identifier: DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/gAncwM8NrR1P3ifJtSZp7pV2Ey4.roa
Signing time: Wed 11 Oct 2023 13:31:55 +0000
ROA not before: Wed 11 Oct 2023 13:31:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16097
IP address blocks: 2a12:6900:1200::/40 maxlen: 64
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:ef:d4:03:9d:66:a8:52:d8:2b:0e:96:9d:60:a5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dede91a0fb1f4dd17900d06db6e88336f78b5c05
Validity
Not Before: Oct 11 13:31:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8009dcc0cf0dad1d4fde27c9b52669ee9576132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:19:bf:5d:f3:b4:67:db:c2:fe:7d:47:3b:
98:2e:90:85:50:30:9e:1a:da:6c:01:b6:63:57:b9:
72:7d:9c:ef:29:96:a3:4b:fd:1c:2f:18:61:12:f8:
10:aa:cb:39:d9:94:7c:3c:31:a0:70:52:cd:4c:53:
62:b8:8a:f7:a0:38:86:3c:34:9f:75:39:e6:f4:d7:
8e:5d:5e:ab:35:b9:47:1c:0f:5e:46:1d:ed:fa:fd:
3a:ec:9d:b1:d8:5c:05:b0:86:7e:c2:6d:fc:93:73:
e8:95:33:0b:22:26:f9:e6:a4:cb:d5:8f:53:df:f2:
a1:52:08:7f:f6:94:cc:93:c1:68:e6:59:9a:46:c1:
72:06:44:6d:a2:84:dd:26:92:2c:e7:e5:a9:30:55:
78:6a:2b:50:47:41:bb:d4:50:20:78:37:70:df:0a:
93:2c:e0:0a:75:f5:c2:54:e4:de:ac:e9:56:61:e0:
04:85:99:c9:8a:27:61:65:0a:86:cf:f2:7b:98:42:
73:34:dc:37:ba:fd:6b:c6:ae:3c:e8:97:b8:34:19:
8c:94:f6:e9:ba:54:3a:58:29:58:a4:2a:8e:04:2f:
23:09:f0:b9:db:20:03:e6:16:5c:4b:9a:38:72:9f:
40:91:09:9e:5e:c4:ff:d4:f3:5c:3f:cd:10:b6:e5:
9d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:DC:C0:CF:0D:AD:1D:4F:DE:27:C9:B5:26:69:EE:95:76:13:2E
X509v3 Authority Key Identifier:
keyid:DE:DE:91:A0:FB:1F:4D:D1:79:00:D0:6D:B6:E8:83:36:F7:8B:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3t6RoPsfTdF5ANBttuiDNveLXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/gAncwM8NrR1P3ifJtSZp7pV2Ey4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/2321d6-bd6c-4b2a-af83-21a700c7119f/1/3t6RoPsfTdF5ANBttuiDNveLXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:6900:1200::/40
Signature Algorithm: sha256WithRSAEncryption
8c:08:4b:8b:9e:56:11:f1:6d:b2:54:8f:23:9c:01:00:24:a0:
78:5a:9e:f1:cd:fb:e2:38:13:4c:35:94:75:91:1b:ab:dd:27:
97:e0:fd:5a:ce:82:ff:a7:db:1e:f6:4c:cd:d7:0a:5c:48:55:
1a:be:da:cf:1f:d2:af:7d:85:9e:94:d6:f1:0f:23:c1:64:fc:
30:95:71:99:df:22:73:9c:08:64:49:65:0e:d3:bb:67:c9:82:
6c:de:32:9b:45:1f:59:67:a3:97:cc:27:23:1c:29:90:5f:9f:
bf:c8:0a:43:06:35:6f:9d:4a:63:57:3f:a9:6b:e4:f6:9c:33:
83:78:ed:3a:4b:5c:93:18:c7:26:65:d1:d5:c6:2f:69:6a:56:
bd:12:9d:d9:88:aa:7f:7e:be:f4:5f:f3:94:1a:ef:a6:ca:b0:
40:21:13:64:c6:9a:52:14:99:17:09:03:a0:38:bc:19:0d:f7:
cd:b7:52:a0:43:c2:ea:5f:7c:84:b9:78:20:0b:55:7f:85:81:
72:5b:e2:59:91:16:72:a2:7b:92:94:47:45:b7:64:66:47:65:
6f:1c:c4:20:67:7c:5d:1c:37:c4:c3:a3:cf:26:09:01:73:4b:
51:02:d5:20:3a:ad:5f:1b:74:d4:a6:86:af:7c:ed:a2:14:a7:
9a:65:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:08 2024 by rpki-client on console-fra.rpki-client.org