Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/CN7j5yKHb0Op6cZF_RQT1LmTTYc.roa
File: CN7j5yKHb0Op6cZF_RQT1LmTTYc.roa (raw, json)
Hash identifier: IjkxOaHb8OZKA8FfgEMmPLskuzt7SGurZKE0E/T+NgU=
Subject key identifier: 08:DE:E3:E7:22:87:6F:43:A9:E9:C6:45:FD:14:13:D4:B9:93:4D:87
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 01856ED4A3F705614BEC58337E8233CE4C33
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/CN7j5yKHb0Op6cZF_RQT1LmTTYc.roa
Signing time: Sun 01 Jan 2023 19:35:07 +0000
ROA not before: Sun 01 Jan 2023 19:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 2a12:4946:1222::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a3:f7:05:61:4b:ec:58:33:7e:82:33:ce:4c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 19:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08dee3e722876f43a9e9c645fd1413d4b9934d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:ee:bc:2e:4d:99:14:af:9f:0b:a8:83:0c:
31:45:bb:6e:54:d0:4e:9c:b6:ea:30:55:58:31:04:
d9:bc:78:ec:dc:44:3f:3c:b2:e3:86:6d:e9:65:28:
cc:42:8f:48:6e:ad:94:bd:25:fa:60:d0:18:b4:bf:
97:bd:c0:9f:41:1b:b7:55:67:8b:19:db:57:e9:29:
02:e1:0a:97:09:64:34:a1:9b:47:7b:ac:da:81:e3:
a5:f6:ec:09:ca:c4:71:d2:ea:95:25:b1:19:dc:1e:
93:22:2a:2e:7b:15:89:fe:e2:1f:79:dc:57:80:57:
23:f5:43:6b:c5:9c:f5:ea:58:81:68:70:b8:66:4c:
f1:75:f4:43:f1:8f:44:5e:15:5f:bd:38:5a:a8:ff:
20:92:80:3b:ce:96:e0:b7:50:26:db:0d:22:9e:e5:
ec:9f:20:8c:59:e9:f6:aa:6b:01:1f:6d:e9:8f:d4:
84:e1:b3:e2:b9:62:87:a0:37:6d:5c:cf:76:5e:fc:
d5:b3:6d:6d:99:5a:6d:b8:34:a5:80:59:4c:b1:f5:
28:96:75:7c:c2:bf:94:9a:b3:09:e7:45:ed:5e:4b:
dc:1b:d4:4d:04:7e:42:12:b6:27:6d:d9:77:23:52:
56:55:ab:1b:26:fe:25:96:cd:9d:6e:db:fb:b1:66:
18:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:E3:E7:22:87:6F:43:A9:E9:C6:45:FD:14:13:D4:B9:93:4D:87
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/CN7j5yKHb0Op6cZF_RQT1LmTTYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4946:1222::/48
Signature Algorithm: sha256WithRSAEncryption
ab:f9:a5:d9:7a:a8:4d:39:f2:f1:df:df:93:b9:c7:cc:cd:f9:
41:81:35:f7:05:8d:3a:8a:1a:ce:f6:13:45:ad:3c:18:17:0c:
dc:b1:70:89:27:cb:81:c4:73:5e:38:1d:b4:12:d8:64:37:7f:
20:2b:3d:5d:d5:56:29:84:d5:0c:0e:79:12:86:66:26:38:f0:
bf:eb:ce:41:af:be:60:f5:30:7c:fd:34:dc:f3:27:d1:14:19:
1e:76:6d:37:9e:94:42:de:c6:ce:63:12:e1:cd:ec:cd:35:28:
ea:7a:66:9f:ca:cd:66:1f:0d:91:18:61:0e:66:18:29:8f:9e:
37:e3:af:9f:2f:f9:10:d8:fa:e4:7d:a3:dc:23:d6:6e:d8:a9:
5b:cc:4f:4f:69:5a:cf:cf:fd:38:7e:05:2a:04:64:7f:20:1d:
9e:88:7f:7e:87:74:34:fa:e3:0b:74:9e:06:a6:77:74:6f:3b:
7a:e4:2c:a7:62:a4:c3:eb:10:9b:f2:5d:f9:64:4b:1b:e7:c1:
f5:0a:10:ba:da:38:e5:ca:dc:99:5a:e5:3b:93:fc:2e:67:31:
96:e8:1c:93:5b:8e:88:cc:a6:0b:12:63:46:32:ae:2c:04:b4:
0d:f8:b8:a0:61:11:b3:cc:a2:00:e0:87:bc:16:71:14:38:f9:
3e:59:ad:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:34 2024 by rpki-client on console-fra.rpki-client.org