Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-z6zmWWG4xvz2kw6xlLdCbuESQE.roa
File: 1-z6zmWWG4xvz2kw6xlLdCbuESQE.roa (raw, json)
Hash identifier: 6y/GNXDLCrpAhknuFlQaIZrNKvRd50KYp5r1KXwfEWg=
Subject key identifier: FB:3E:B3:99:65:86:E3:1B:F3:DA:4C:3A:C6:52:DD:09:BB:84:49:01
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01891BA5618909F7DD8EBEFB18CB047D382C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-z6zmWWG4xvz2kw6xlLdCbuESQE.roa
Signing time: Mon 03 Jul 2023 12:06:10 +0000
ROA not before: Mon 03 Jul 2023 12:06:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197963
IP address blocks: 2a12:bec0:380::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:1b:a5:61:89:09:f7:dd:8e:be:fb:18:cb:04:7d:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 3 12:06:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3eb3996586e31bf3da4c3ac652dd09bb844901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:9a:eb:b7:ab:1d:b5:84:c0:26:bc:29:f5:
63:72:36:93:09:11:99:cf:2c:da:f6:a2:c9:ec:52:
e7:40:e1:5a:5c:7f:17:1a:c3:43:c9:3e:9c:cd:c7:
18:a3:ee:f0:24:62:a4:f3:25:10:54:0c:c3:f1:1f:
7e:26:0c:b9:a6:8d:69:43:16:5d:6e:53:5e:c3:33:
ab:52:65:87:c3:7c:3d:e5:91:e3:ee:87:bc:eb:50:
f8:5c:0f:a1:f0:2f:2a:15:36:a9:c2:b6:4b:87:51:
1e:34:70:99:13:4f:40:1c:9c:44:c8:21:6e:3f:ea:
60:ca:45:58:69:4e:08:7a:ce:9e:df:46:f0:9b:93:
fb:08:f3:a4:d6:6e:4e:67:01:96:64:0b:b2:2e:eb:
48:d7:b1:c1:13:1c:3e:3b:a1:1d:74:51:f4:bf:67:
78:b2:15:4d:30:67:35:55:1d:03:0e:59:cb:3a:ee:
42:3e:95:bb:8a:ed:c0:a1:11:0a:af:aa:2c:ea:f3:
17:28:02:8e:2a:d1:6d:c1:f9:57:76:7b:84:ea:54:
12:fb:8f:85:79:db:a8:0e:82:dc:38:bb:67:3b:0c:
3a:ee:3a:c1:bd:c5:06:ac:14:c1:a6:92:12:49:85:
44:8a:4a:5c:82:d2:fe:27:ad:1b:24:4b:60:d4:f5:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3E:B3:99:65:86:E3:1B:F3:DA:4C:3A:C6:52:DD:09:BB:84:49:01
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1-z6zmWWG4xvz2kw6xlLdCbuESQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:380::/44
Signature Algorithm: sha256WithRSAEncryption
8e:bb:d7:ff:c2:f4:7d:52:54:62:41:a7:48:50:01:c0:46:da:
83:b2:45:00:ea:f5:a7:54:d5:84:27:d0:cc:9d:65:a1:c7:6a:
48:20:15:de:90:04:75:11:a7:31:4a:a9:81:aa:6e:75:43:20:
0c:6b:7f:76:82:c1:8e:96:f0:fa:39:46:2b:1b:c4:ef:a1:19:
25:20:8f:e7:cf:b9:60:08:ee:d1:5a:cd:d7:9b:31:a7:8d:d3:
bc:64:7a:0e:b5:e6:b8:70:6d:e5:eb:2c:f5:f1:c0:b2:17:57:
bf:2f:26:f9:83:0c:44:99:d5:29:08:56:f9:58:d4:fd:d8:31:
43:4f:23:8b:fa:35:b4:0d:19:cf:eb:43:7e:06:f4:e9:a2:9d:
22:bf:83:bd:cb:78:f3:01:b2:70:a7:6a:3d:27:6e:1a:3d:df:
bc:1d:8f:89:91:3d:91:8e:4f:ab:19:a3:5b:b6:11:4f:cb:fd:
23:0b:34:2b:4d:36:9b:1c:fd:01:47:88:f7:ad:4f:56:9b:7a:
b2:59:e3:08:f0:8a:90:4c:ec:4a:6d:91:2e:b1:94:da:5d:b1:
c5:20:aa:26:31:85:b3:44:ef:7f:d0:45:9c:78:7a:e9:95:30:
85:d9:f1:cb:63:b0:41:d8:8f:4c:80:94:a3:ee:ff:d0:ed:c4:
b4:a8:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org