Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/wTbCxY1YzCLaj7w3PyU1icS-JTk.roa
File: wTbCxY1YzCLaj7w3PyU1icS-JTk.roa (raw, json)
Hash identifier: Ox9g8ca4Kx1z7RPvgs8KaR7ELcPmmPx809VC1mYJQaw=
Subject key identifier: C1:36:C2:C5:8D:58:CC:22:DA:8F:BC:37:3F:25:35:89:C4:BE:25:39
Certificate issuer: /CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Certificate serial: 018F20928F316871D85A8D58445E54B93AA3
Authority key identifier: 3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/wTbCxY1YzCLaj7w3PyU1icS-JTk.roa
Signing time: Sat 27 Apr 2024 17:20:26 +0000
ROA not before: Sat 27 Apr 2024 17:20:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a12:2e40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Apr 2024 17:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:92:8f:31:68:71:d8:5a:8d:58:44:5e:54:b9:3a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ec50ab4ccf72e3d60c09f964019d6c034c50a6c
Validity
Not Before: Apr 27 17:20:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c136c2c58d58cc22da8fbc373f253589c4be2539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:89:92:21:a9:4f:ca:18:a6:1b:66:44:48:9f:
30:65:98:d5:3e:f6:41:7e:dc:62:ef:cf:7c:9e:1e:
4b:74:29:f4:54:0f:44:e9:3a:90:91:19:c9:74:c4:
f8:49:c1:27:32:08:cf:f8:5c:b7:c3:21:f6:e4:58:
fd:f5:f8:11:d7:24:ce:b5:8c:f8:68:cd:c2:c4:68:
7b:29:c6:93:52:46:17:a9:41:bf:52:bc:69:ba:3c:
14:56:27:34:9e:01:6f:79:59:35:36:8a:ae:da:92:
74:e2:55:7b:9b:36:e8:08:74:69:59:b7:0a:14:62:
38:a4:46:2e:f4:b5:7f:0e:f7:76:a5:53:cb:73:a8:
bd:33:08:c9:10:8e:b5:9c:3c:ab:14:21:d6:0e:c5:
db:20:fc:50:2a:80:aa:37:76:93:c9:11:54:2a:42:
d5:c7:1f:94:39:cb:c2:c0:09:6b:97:68:a0:13:2d:
6d:83:82:a4:5f:f0:90:c0:ec:30:47:a1:86:8c:f7:
57:9e:87:28:24:20:7e:44:41:21:6f:57:7b:e5:35:
b6:99:a4:da:a6:76:1d:4a:1e:79:33:1e:d5:9b:ac:
0d:4f:10:0e:18:d8:85:c5:a9:8e:cf:e9:bc:c3:9e:
b4:f0:2e:72:47:7b:3f:2c:d8:c8:e8:dc:de:c7:2a:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:C2:C5:8D:58:CC:22:DA:8F:BC:37:3F:25:35:89:C4:BE:25:39
X509v3 Authority Key Identifier:
keyid:3E:C5:0A:B4:CC:F7:2E:3D:60:C0:9F:96:40:19:D6:C0:34:C5:0A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/wTbCxY1YzCLaj7w3PyU1icS-JTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/79ef4f-e38e-44da-a657-2159376d3a64/1/PsUKtMz3Lj1gwJ-WQBnWwDTFCmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2e40::/29
Signature Algorithm: sha256WithRSAEncryption
27:18:16:b9:ce:bf:01:4b:84:32:06:eb:0e:9e:b1:20:2a:8a:
88:27:f0:7a:f4:8e:b2:7f:b4:e6:02:d9:2c:48:f1:6b:88:c5:
3c:35:5c:1f:92:02:df:5b:57:d1:36:6e:2b:b6:ad:26:c2:a9:
d2:fb:27:d9:18:0f:96:b9:f0:0d:53:13:c4:ee:af:ae:b3:d3:
37:84:c6:2f:7b:a4:2e:4d:e6:fc:e0:b3:0c:aa:89:65:d7:13:
e4:46:95:d6:32:36:79:30:14:c3:a1:10:d5:f9:ab:5a:61:f0:
74:4f:50:b0:74:37:d9:c0:90:f0:20:f4:70:ff:9b:e8:28:d3:
6f:a9:ee:af:30:e6:43:90:0a:ae:aa:3e:53:b4:5d:a3:6f:c8:
36:55:a7:66:23:7d:aa:ec:a2:62:77:06:a0:51:05:ff:32:65:
4f:15:e7:e1:34:b1:a0:b1:e7:66:63:29:60:b8:0c:85:fe:4b:
7c:f9:8e:87:ab:d6:fb:20:87:29:b2:b5:36:2e:d7:f9:12:64:
af:35:74:d1:56:87:74:45:87:c4:4b:3b:a7:31:2d:e5:41:0b:
35:90:77:d3:00:bc:f1:d6:5d:ca:8d:23:f8:8b:2c:39:df:09:
43:6b:31:21:cf:a0:53:a4:74:bb:c1:41:a1:31:ba:68:12:de:
bd:e4:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:17 2024 by rpki-client on console-fra.rpki-client.org