Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/PIpfIAplEtPnwB6tVG9NjDqDXso.roa
File: PIpfIAplEtPnwB6tVG9NjDqDXso.roa (raw, json)
Hash identifier: 4IBgJEDmZrki6zdJnGYUFsuJpoqCDjPY7xSZ+oqhPDM=
Subject key identifier: 3C:8A:5F:20:0A:65:12:D3:E7:C0:1E:AD:54:6F:4D:8C:3A:83:5E:CA
Certificate issuer: /CN=7981ea4d507fb0ae07159f6f88def958430fd070
Certificate serial: 018BBE2ACAF60DAED9DC9FD2FF109FC13301
Authority key identifier: 79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/PIpfIAplEtPnwB6tVG9NjDqDXso.roa
Signing time: Sat 11 Nov 2023 11:35:57 +0000
ROA not before: Sat 11 Nov 2023 11:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60542
IP address blocks: 2a12:eb80:1::/48 maxlen: 48
2a12:eb80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:be:2a:ca:f6:0d:ae:d9:dc:9f:d2:ff:10:9f:c1:33:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7981ea4d507fb0ae07159f6f88def958430fd070
Validity
Not Before: Nov 11 11:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c8a5f200a6512d3e7c01ead546f4d8c3a835eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:71:da:62:22:1a:d9:7c:fc:51:48:18:4c:db:
f6:8f:fe:45:c4:62:66:35:eb:eb:54:d5:ab:ad:6c:
85:10:50:c1:95:28:83:69:3e:b5:35:be:8e:b2:df:
cf:7a:e2:c9:e8:41:0a:27:ad:6d:9a:f1:f0:19:af:
c4:8c:5e:c5:8f:f3:ca:79:a6:d0:e5:e9:15:29:ed:
a3:7a:d0:49:62:36:6f:61:ad:ac:8d:53:30:e6:46:
2a:65:21:93:4e:cb:b2:1c:99:b6:43:7f:ac:3a:5c:
c4:cc:dc:47:78:11:c8:1e:d0:09:6b:a6:09:8c:8b:
6c:a4:cf:8d:fa:bc:5b:dc:35:26:a9:13:fb:8d:5c:
14:a3:e4:4b:45:d1:e1:91:52:f7:aa:14:da:11:aa:
71:48:cc:92:bb:b1:30:5a:cb:9c:0c:2b:db:c4:5e:
15:cc:bc:c4:a4:cc:72:74:f5:1c:ff:4d:0a:17:0a:
19:e1:29:9b:c5:3d:2a:14:97:b3:6c:52:d5:b5:2a:
43:5d:9d:11:0c:0f:2e:da:dd:82:47:ff:50:02:c0:
f9:dc:5c:75:41:75:ee:85:e2:1a:fc:cd:59:ef:c9:
cf:58:3e:1e:09:69:c6:3c:0c:d6:4f:ba:cb:b3:7d:
17:47:f8:89:07:d0:0f:8d:c3:c8:f4:a8:20:c2:d2:
08:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:5F:20:0A:65:12:D3:E7:C0:1E:AD:54:6F:4D:8C:3A:83:5E:CA
X509v3 Authority Key Identifier:
keyid:79:81:EA:4D:50:7F:B0:AE:07:15:9F:6F:88:DE:F9:58:43:0F:D0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYHqTVB_sK4HFZ9viN75WEMP0HA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/PIpfIAplEtPnwB6tVG9NjDqDXso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e44bd7-0f70-45c8-856e-40e2ef3383b0/1/eYHqTVB_sK4HFZ9viN75WEMP0HA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:eb80:1::-2a12:eb80:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
9c:06:c5:1a:35:8c:79:c3:5e:7a:94:3d:38:ea:d3:e1:8b:92:
88:49:94:13:60:d0:36:63:4c:c5:3f:17:60:81:78:b5:a0:cd:
da:9b:d5:b3:5b:db:3d:46:6c:fb:d2:3d:b1:90:be:cf:8b:b7:
40:c6:d2:b0:e4:34:d4:03:09:79:71:0b:86:c1:c4:cf:91:9c:
0c:ed:d4:99:1b:e2:0d:02:a2:6f:37:5c:a0:bc:ae:b7:02:79:
c8:5e:b5:dc:57:23:ca:a9:97:0b:08:17:f0:8e:59:17:e1:f0:
6b:71:0b:d9:2e:50:76:27:52:bf:40:d8:58:d9:29:e7:8e:1e:
7e:3d:65:2c:c3:a0:d1:76:c1:a6:7d:24:67:19:20:a2:d8:ea:
62:0c:ec:c5:4e:8a:13:a5:31:46:c6:2e:62:82:4d:b8:16:eb:
5a:c3:24:e0:81:2b:10:ec:5d:2f:f8:c0:55:d6:91:2e:77:8e:
1d:fe:64:77:3f:1b:8b:73:b0:75:28:98:99:18:5c:0d:d1:7b:
ed:a7:7e:5b:31:f8:1c:cc:7f:65:7c:ff:fd:95:b6:08:33:bd:
ff:3c:9c:8b:3d:9d:d4:e2:df:ef:88:a7:80:76:77:14:91:b6:
e8:d8:88:74:3d:94:4b:12:f2:5a:67:f3:f7:69:10:05:82:8b:
9b:d4:dc:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:15 2024 by rpki-client on console-ams.rpki-client.org