Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/4ljQYRt75RaFvCoigauZKK_4Rs8.roa
File: 4ljQYRt75RaFvCoigauZKK_4Rs8.roa (raw, json)
Hash identifier: zJxZveNZZ4V4Tg6VZSynXCneo3C5OhE1pzrgZuPupRA=
Subject key identifier: E2:58:D0:61:1B:7B:E5:16:85:BC:2A:22:81:AB:99:28:AF:F8:46:CF
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018F8134AF63985426A6F1C323D5666B702B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/4ljQYRt75RaFvCoigauZKK_4Rs8.roa
Signing time: Thu 16 May 2024 11:41:04 +0000
ROA not before: Thu 16 May 2024 11:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215158
IP address blocks: 2a12:a880::/29 maxlen: 29
2a12:e700::/29 maxlen: 29
2a12:ed80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 May 2024 19:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:34:af:63:98:54:26:a6:f1:c3:23:d5:66:6b:70:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: May 16 11:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e258d0611b7be51685bc2a2281ab9928aff846cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:2b:e2:26:03:8a:3f:b0:70:d1:31:3a:62:
79:eb:78:1b:be:71:90:ab:85:7e:ee:a8:21:61:89:
7e:a9:d9:0e:22:14:22:6b:6b:7c:0b:99:43:da:af:
83:99:e8:72:9d:c2:78:f7:bf:33:17:70:98:9c:10:
60:64:89:a1:4c:f3:f5:eb:bc:14:be:6e:48:d9:76:
1a:0d:72:0e:81:56:31:32:80:fe:d5:71:73:e3:15:
e9:da:8a:68:ad:18:67:9d:fc:bd:53:c9:49:6b:b8:
89:76:59:d7:14:47:bb:3d:7e:98:d2:0c:0c:55:c5:
6f:35:e8:26:b4:41:46:da:92:80:9c:de:bb:75:26:
e6:b1:41:7e:17:5f:49:a8:94:8d:5e:e9:8e:dd:d1:
8b:c3:80:bd:60:7b:6a:5f:87:8f:5b:ec:a3:d4:c8:
c8:36:48:e0:ae:ff:bf:97:82:05:d8:6c:61:c1:9a:
f1:82:18:11:b1:46:eb:3c:61:83:17:a0:d0:d9:49:
3f:a1:e5:94:eb:b5:32:fc:2f:59:1d:c1:fb:79:2c:
13:68:69:ce:43:3a:65:16:78:76:9b:e0:68:7e:ba:
3c:75:78:76:ca:b2:b6:30:ca:7a:c7:f2:e1:ac:30:
a4:9f:bd:07:b7:ff:a0:1e:cf:8f:ec:2a:3e:dd:57:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:58:D0:61:1B:7B:E5:16:85:BC:2A:22:81:AB:99:28:AF:F8:46:CF
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/4ljQYRt75RaFvCoigauZKK_4Rs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a880::/29
2a12:e700::/29
2a12:ed80::/29
Signature Algorithm: sha256WithRSAEncryption
35:20:b9:e2:37:58:51:22:32:fe:cb:49:e6:de:77:17:0e:2d:
7f:42:d7:70:be:7c:fc:52:fb:ee:11:2d:f1:15:20:ce:6b:60:
35:00:74:1d:aa:c5:14:97:9a:bf:7a:49:1f:c1:88:73:b9:cf:
71:dd:89:8e:ed:3b:1c:f5:a6:9c:71:08:43:a8:78:a3:bd:32:
31:9e:9b:23:37:2a:0e:fa:3a:06:48:6e:24:26:25:56:59:b7:
59:7f:b0:70:3f:3a:34:d1:e0:7f:0b:8b:22:44:d1:85:13:94:
09:fe:53:7c:07:3f:4e:bc:d1:fc:23:71:05:50:00:00:06:c7:
18:a3:d4:e3:ef:82:e3:c5:a9:5c:9a:66:1e:e0:7e:a2:d4:0c:
28:9e:f3:bc:61:ed:2b:77:e5:19:95:22:6f:e7:d4:22:67:31:
a7:2f:32:79:d3:f8:b0:1d:5c:7c:b6:ac:1d:6a:83:0b:42:72:
84:49:1e:77:3c:65:80:e0:bb:a2:6a:4f:64:c7:bf:e1:2a:c0:
af:df:81:12:ba:c9:3d:8e:19:c4:54:17:8b:2e:ea:76:48:61:
74:66:88:be:9c:32:7f:69:d5:a1:50:51:b6:49:68:b6:d2:bf:
24:67:08:c6:d2:07:5e:44:8c:49:62:34:36:8f:ab:6b:20:eb:
88:c4:c0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org