Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/auFuwBpBIQ3nQ-XpswmS1iLL50o.roa
File: auFuwBpBIQ3nQ-XpswmS1iLL50o.roa (raw, json)
Hash identifier: hTGfmdbt3n0qNuz7wuWHS8wBuQB68jOZ0wZqoE/m/OI=
Subject key identifier: 6A:E1:6E:C0:1A:41:21:0D:E7:43:E5:E9:B3:09:92:D6:22:CB:E7:4A
Certificate issuer: /CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Certificate serial: 01915B83B185F0AFB03E268DC9477307BAC6
Authority key identifier: C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/auFuwBpBIQ3nQ-XpswmS1iLL50o.roa
Signing time: Fri 16 Aug 2024 14:07:22 +0000
ROA not before: Fri 16 Aug 2024 14:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a12:38c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Aug 2024 21:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:83:b1:85:f0:af:b0:3e:26:8d:c9:47:73:07:ba:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3abdcc49f7d9033b52904679f3c9b783d8c1358
Validity
Not Before: Aug 16 14:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ae16ec01a41210de743e5e9b30992d622cbe74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:61:da:e0:de:83:5c:49:7f:a9:cd:df:e8:72:
34:cb:54:d5:f5:0f:03:1a:1b:26:cd:5d:96:f7:87:
a0:df:40:fe:f4:07:e8:57:0e:56:71:c4:03:7f:bb:
0a:35:5d:73:d4:77:ab:df:73:3d:12:43:9d:f6:37:
ea:48:e1:9c:59:d6:13:f8:87:2f:31:0e:98:d5:d7:
0f:17:f9:8b:60:d0:3c:06:fb:49:16:43:f2:0c:2e:
c3:b6:66:36:5a:6a:3b:c0:e3:f8:b9:c1:8e:88:14:
d3:13:e3:a1:3b:39:73:1e:dd:5c:99:d2:30:08:90:
f3:15:bd:4d:96:a6:45:32:fe:79:d1:1d:77:92:ca:
27:0b:39:43:7b:68:42:18:7c:48:92:7a:f2:2d:e1:
03:8b:cd:43:79:58:64:56:93:b0:71:ae:97:3b:cc:
6a:90:20:f9:4e:72:ae:04:0e:b6:76:43:6b:36:49:
a6:6e:29:59:ff:49:12:ac:b9:d1:96:c0:e9:70:49:
75:5e:8a:c8:11:f7:65:a5:51:14:31:2a:3d:15:bf:
09:25:0a:6d:a1:f9:91:5d:23:28:5b:2a:7f:19:82:
d0:aa:c7:47:df:46:be:5c:d1:bc:9a:ab:2e:e7:dc:
23:04:95:59:c5:93:8d:56:92:15:73:d1:ec:a7:fc:
77:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E1:6E:C0:1A:41:21:0D:E7:43:E5:E9:B3:09:92:D6:22:CB:E7:4A
X509v3 Authority Key Identifier:
keyid:C3:AB:DC:C4:9F:7D:90:33:B5:29:04:67:9F:3C:9B:78:3D:8C:13:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6vcxJ99kDO1KQRnnzybeD2ME1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/auFuwBpBIQ3nQ-XpswmS1iLL50o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/672883-feb4-414f-9d00-4d9127fba3ad/1/w6vcxJ99kDO1KQRnnzybeD2ME1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:38c0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:3e:4a:6b:1d:d7:81:32:4e:44:8c:66:0b:b1:7d:28:a7:30:
a3:7d:00:71:a9:76:c2:00:06:3f:50:1b:2f:d9:48:73:ce:cb:
dc:25:3d:50:cc:9d:79:b5:68:c4:38:44:61:e9:65:8c:6e:d1:
74:95:44:5d:3c:14:91:71:e6:df:da:bf:a6:e2:b8:f6:40:eb:
e6:2d:b0:d4:3c:88:81:d8:6f:7c:96:10:d7:ee:6a:36:87:90:
50:28:f3:9a:f9:7a:9a:4b:1d:81:5b:ae:d3:33:8b:02:b9:7c:
9b:c9:9a:3b:9c:7e:8a:b8:a3:99:ed:c9:de:0e:f3:69:47:3d:
3c:be:73:d6:c3:94:23:84:69:1b:07:a2:f4:8d:88:9e:7b:86:
b9:12:7b:61:f6:20:8d:70:50:b3:a9:9e:0e:4d:2e:ac:28:9c:
da:f4:91:4c:6e:93:1b:e4:e9:26:30:ae:65:b0:f0:da:ac:b8:
30:d7:0f:2e:e6:2e:30:4f:53:ab:8b:07:f7:e1:bd:e7:41:27:
1e:79:9d:c2:89:1f:9c:ce:88:60:aa:25:f3:19:30:b0:57:44:
91:31:a5:18:ea:59:94:6d:35:ad:e1:62:88:e5:46:0f:d5:ff:
5b:96:15:82:75:73:0b:33:6e:b7:10:81:5e:8c:a5:47:66:67:
13:86:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 23:51:28 2024 by rpki-client on console-ams.rpki-client.org