Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0LTHUf_jiLkXuY43MOAJc2hkPms.roa
File: 0LTHUf_jiLkXuY43MOAJc2hkPms.roa (raw, json)
Hash identifier: ckVcDc94Gz9zXDLsPSaAfNc2qaW8ihAHTCGaIeiRg0Q=
Subject key identifier: D0:B4:C7:51:FF:E3:88:B9:17:B9:8E:37:30:E0:09:73:68:64:3E:6B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018A60C486015776F33FC8F7C1AF1AD0E04B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0LTHUf_jiLkXuY43MOAJc2hkPms.roa
Signing time: Mon 04 Sep 2023 15:16:46 +0000
ROA not before: Mon 04 Sep 2023 15:16:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216401
IP address blocks: 2a12:bec0:e20::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:c4:86:01:57:76:f3:3f:c8:f7:c1:af:1a:d0:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 4 15:16:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0b4c751ffe388b917b98e3730e0097368643e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:85:ac:e2:73:c2:4b:8d:d8:2f:70:d2:96:
d4:46:9b:2f:cc:08:2c:a6:dc:c7:c6:bf:16:52:7c:
4b:33:13:bb:de:e3:d1:80:13:3d:ed:43:9d:ad:2f:
e6:1d:95:ea:f9:a1:44:ec:dc:c7:e5:81:ba:50:b7:
74:65:fd:27:b1:d0:16:39:21:6f:b3:68:2c:2b:9a:
52:28:05:55:e4:67:8c:87:17:31:6d:fb:1f:a2:91:
09:29:38:3f:4e:fd:d6:fa:ba:e6:03:f7:33:e5:6d:
5a:49:81:95:5e:f6:b0:e7:9a:b3:25:f8:d3:7e:78:
3d:77:13:39:05:f8:97:bd:ec:fc:09:2d:eb:0c:19:
dc:af:a9:5d:25:5d:4d:6f:37:db:8d:53:bd:ab:d8:
8d:36:12:b3:4f:c7:0a:e4:5b:6f:77:35:b2:1e:22:
42:56:84:3d:21:99:0a:6e:a7:58:93:16:96:a9:12:
bc:b5:d0:50:c9:48:b0:e3:13:b2:5f:c6:34:45:28:
4d:e5:24:48:5c:11:68:e4:78:44:eb:a6:67:b1:75:
59:db:ff:99:10:4e:76:ec:fe:18:b2:9e:6c:bd:1f:
38:b6:ca:c1:95:41:74:5e:ab:ae:99:61:7e:78:e1:
26:e4:95:c5:41:35:31:c6:8e:b7:bf:a7:33:bb:45:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:B4:C7:51:FF:E3:88:B9:17:B9:8E:37:30:E0:09:73:68:64:3E:6B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/0LTHUf_jiLkXuY43MOAJc2hkPms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:e20::/44
Signature Algorithm: sha256WithRSAEncryption
11:8f:16:9d:a7:c5:35:ef:e5:2c:3f:fa:e3:27:37:63:99:88:
32:24:be:e7:70:4e:8d:4c:59:bc:cd:b1:bd:5f:38:a5:76:f6:
b8:fd:37:b2:eb:71:c4:84:e5:e5:e5:8b:50:63:39:2c:2b:60:
ce:24:56:b4:14:a3:08:41:12:ca:f9:a3:73:f8:ce:56:cd:a8:
ab:3d:69:46:25:82:3f:a1:17:b2:31:77:80:88:46:3b:39:68:
83:2e:2a:82:e3:48:30:a2:50:cc:7b:19:e5:e7:42:34:d3:b3:
80:35:37:6e:16:0f:84:db:06:3f:9b:ea:71:2e:42:4f:9f:82:
a9:1c:92:8d:65:e5:c4:09:96:66:02:4f:a3:e3:e0:6f:de:78:
fd:31:bd:6e:0a:1d:82:6d:3c:89:00:86:b5:92:f3:f0:a7:c1:
c3:ed:11:79:d3:f4:dd:2a:8d:c9:86:96:46:93:7f:f6:ab:3c:
0d:fd:0e:88:e3:4e:19:29:b6:fe:92:f6:3a:4d:9d:6e:84:eb:
c7:f4:a4:53:c8:6e:48:4c:a9:6a:18:73:11:d5:99:0f:15:a0:
b3:0c:ac:14:27:12:83:09:07:6c:f3:f2:49:9c:06:ca:91:d6:
2a:8a:03:bd:8c:26:ec:e3:95:07:e4:1a:e3:37:5f:b8:13:07:
e8:2a:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org