Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/IQhAgvJ1t_wbPZty1KsnRkux00k.roa
File: IQhAgvJ1t_wbPZty1KsnRkux00k.roa (raw, json)
Hash identifier: gBsjBsdcPBs325UGEuNQEfwPmPwAE+3bFIxs8EHfKwA=
Subject key identifier: 21:08:40:82:F2:75:B7:FC:1B:3D:9B:72:D4:AB:27:46:4B:B1:D3:49
Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial: 01856ED4A67414184BC170CD7BAAE3E463EE
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/IQhAgvJ1t_wbPZty1KsnRkux00k.roa
Signing time: Sun 01 Jan 2023 19:35:08 +0000
ROA not before: Sun 01 Jan 2023 19:35:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209958
IP address blocks: 2a12:4940::/32 maxlen: 48
2a12:4946:6960::/44 maxlen: 48
2a12:4946:4940::/44 maxlen: 48
2a12:4946:3000::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:a6:74:14:18:4b:c1:70:cd:7b:aa:e3:e4:63:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Validity
Not Before: Jan 1 19:35:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21084082f275b7fc1b3d9b72d4ab27464bb1d349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d3:ce:58:ac:74:8b:63:5e:fe:75:a5:f9:a8:
86:43:bf:e2:7b:59:60:67:11:84:44:b1:ab:1e:51:
7d:32:3b:b7:4b:13:dd:7c:31:62:84:ce:f8:b7:9c:
51:3c:c5:2d:2a:62:aa:1e:15:69:7c:84:ee:4f:8a:
2a:88:4a:f8:cb:8a:50:1a:e4:80:19:05:48:4b:11:
b2:88:aa:ac:01:ef:f0:e2:b9:73:3f:56:64:1b:a9:
72:c2:ba:65:b2:fa:d5:f2:99:b0:17:62:14:44:19:
52:d6:80:1c:f9:c0:1b:f0:87:37:ec:74:79:b7:7c:
17:97:79:eb:53:04:f1:12:b9:b1:86:bf:32:41:97:
33:f7:17:96:66:79:39:3a:6d:21:e0:d3:17:8a:2e:
bd:db:83:b7:b3:4e:28:0c:be:99:96:cd:17:1b:74:
0c:82:65:23:b0:72:f5:39:4c:aa:6a:f5:3c:09:35:
b3:98:7f:10:16:7e:37:1c:2b:0a:bd:08:d8:75:5d:
ff:17:ad:2a:28:84:8a:b6:a4:2b:a3:49:fe:98:82:
cd:39:83:6a:8e:92:40:e8:da:42:68:ba:13:4d:0a:
36:ee:e1:b1:ce:6f:12:da:13:f7:7a:24:cf:89:23:
a3:23:c3:45:e7:ef:69:de:c9:07:76:62:06:c2:d0:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:40:82:F2:75:B7:FC:1B:3D:9B:72:D4:AB:27:46:4B:B1:D3:49
X509v3 Authority Key Identifier:
keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/IQhAgvJ1t_wbPZty1KsnRkux00k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:4940::/32
2a12:4946:3000::/48
2a12:4946:4940::/44
2a12:4946:6960::/44
Signature Algorithm: sha256WithRSAEncryption
58:90:0d:c2:02:09:8a:26:ea:b7:b8:96:b4:67:09:bd:54:25:
fd:2a:8a:ff:b2:db:96:31:96:6b:e7:b8:7a:5b:14:3a:df:fb:
30:62:6b:e7:fb:19:cd:e9:70:a0:36:8f:d1:81:be:77:c7:c4:
fa:cc:f0:80:3a:40:0b:e0:90:46:b7:cc:94:36:d4:98:58:07:
9e:cf:c1:62:e3:ec:e8:ac:41:d3:84:6c:cf:6c:1c:bc:40:e0:
a8:92:f5:a2:39:44:53:91:58:d8:5c:0b:99:a5:2f:e3:5d:94:
83:fe:83:37:93:77:12:a2:3e:f6:00:14:a7:0d:30:bf:3d:28:
b0:3c:6c:ef:94:ef:f4:09:97:9f:9b:31:6e:c7:37:3b:45:5b:
d5:17:72:ed:5e:6f:e6:6d:fc:47:80:a1:39:dd:5e:d8:da:b1:
e7:15:e5:c6:eb:3c:8d:85:64:fa:05:63:c4:33:45:99:2c:4b:
9a:2c:6c:98:f6:8d:6c:ba:a8:5b:bf:db:9b:05:d5:72:0c:aa:
84:8c:f2:88:1b:75:3c:6a:d1:ba:37:31:2d:19:3a:99:93:92:
36:da:33:92:5b:9d:a1:35:4d:01:f7:a1:5e:76:65:cb:0b:d6:
52:c5:9f:cc:b1:7d:94:a4:1d:b0:7f:71:75:c8:52:32:4b:4e:
ac:8d:e4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:58 2024 by rpki-client on console-fra.rpki-client.org