Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2Mv3xFzsIxiJkzmWuu7YPbrZfeE.roa
File: 2Mv3xFzsIxiJkzmWuu7YPbrZfeE.roa (raw, json)
Hash identifier: uUQ/XECjzmYQRJIiHD39oO5ZvBFnWudK39E9gxoVWnk=
Subject key identifier: D8:CB:F7:C4:5C:EC:23:18:89:93:39:96:BA:EE:D8:3D:BA:D9:7D:E1
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018ACC911EF3F74609052ACAC3DB9C38671A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2Mv3xFzsIxiJkzmWuu7YPbrZfeE.roa
Signing time: Mon 25 Sep 2023 13:39:37 +0000
ROA not before: Mon 25 Sep 2023 13:39:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216255
IP address blocks: 2a12:bec0:470::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:91:1e:f3:f7:46:09:05:2a:ca:c3:db:9c:38:67:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 25 13:39:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cbf7c45cec231889933996baeed83dbad97de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:93:37:5a:e8:d0:c1:06:f7:16:e4:b7:3b:3e:
45:66:4c:3c:1c:0f:3a:88:26:df:4f:b6:cc:a9:ac:
b0:9c:c1:26:d1:57:ab:2e:3e:82:3f:d2:30:4c:87:
16:a3:8e:e3:bf:3f:ff:a7:1e:9f:9b:4c:e4:d9:36:
9a:17:4e:fb:8c:ce:e9:c8:e8:1b:75:14:75:ac:af:
14:83:13:99:e1:3e:c9:c7:43:73:7e:1a:45:cf:fd:
4a:e2:42:e8:d7:18:91:22:d1:66:f6:00:9f:5b:e1:
90:3e:95:01:03:99:b7:d2:0a:c8:13:0d:24:17:df:
dc:65:0c:e3:65:4a:da:b9:27:99:a5:0c:9d:3d:9f:
dd:54:e4:e6:53:b3:30:58:db:8d:11:cb:29:88:3c:
d0:22:33:ef:ae:f1:2e:e0:c4:89:fe:23:3c:55:9a:
81:d9:52:7d:f4:72:d3:a4:bc:72:4d:94:98:5e:a4:
d5:be:cd:0b:a7:10:5a:76:e0:41:ed:9e:bc:10:32:
1f:7c:66:7d:ac:8a:7f:e6:1e:40:dd:d7:36:15:dd:
09:29:db:96:20:4d:c0:46:2a:d3:a0:a3:0b:a4:f8:
58:85:ce:30:85:94:72:2f:52:74:9f:ae:d2:e0:84:
d8:fb:12:61:c6:23:4e:7c:63:bd:a6:2b:7e:b4:a6:
a3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CB:F7:C4:5C:EC:23:18:89:93:39:96:BA:EE:D8:3D:BA:D9:7D:E1
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/2Mv3xFzsIxiJkzmWuu7YPbrZfeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:470::/44
Signature Algorithm: sha256WithRSAEncryption
36:9a:f7:1d:4c:4a:d5:96:e4:4b:07:38:9d:c4:e1:1c:b6:af:
2d:e4:5c:53:5c:28:15:11:b5:34:93:ef:a9:29:3f:5d:d2:b9:
a1:47:da:c1:c4:7a:47:b8:a7:d9:8d:00:d9:a2:69:11:ff:74:
fd:5a:23:1d:03:cc:c5:a0:ef:5b:a1:58:9f:e7:2a:84:96:07:
67:25:cc:0f:3a:59:1c:14:87:aa:8b:95:8a:62:a5:93:34:e9:
1c:d5:be:08:4f:a1:e9:4f:41:48:1d:e7:ec:7b:4e:a4:00:1f:
e7:9f:15:0d:5d:da:7b:ec:5d:06:a3:d3:29:ce:81:fd:ac:f4:
d6:39:96:19:88:24:8f:60:cd:43:48:90:56:09:a6:97:46:e9:
5e:2d:19:88:49:56:dd:53:0c:eb:83:91:6a:6a:8b:9d:0e:46:
00:00:4b:f7:cc:c1:e3:fb:48:4b:32:3a:4c:9c:ed:de:42:1b:
70:44:94:2f:7f:10:67:0e:a2:75:3f:0e:cf:55:59:88:49:ba:
f3:2a:9d:f5:4a:99:fa:1b:7d:2b:b3:61:87:bf:ea:81:a4:79:
0f:99:17:8f:fe:ef:30:74:30:5a:c4:87:9c:34:08:23:da:e7:
a5:9b:47:0a:e0:31:00:eb:fb:60:50:39:69:c0:27:1a:91:80:
99:ae:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org