Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5OW5uIN2-k4QrsJFSqae8neJv5o.roa
File: 5OW5uIN2-k4QrsJFSqae8neJv5o.roa (raw, json)
Hash identifier: GJELCqTnYukPhW3d7O8np04TRhh+f6l0gu0mpXP9zBE=
Subject key identifier: E4:E5:B9:B8:83:76:FA:4E:10:AE:C2:45:4A:A6:9E:F2:77:89:BF:9A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01857079951D8B69D77FFFA46E6C6AF4B515
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5OW5uIN2-k4QrsJFSqae8neJv5o.roa
Signing time: Mon 02 Jan 2023 03:14:54 +0000
ROA not before: Mon 02 Jan 2023 03:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206444
IP address blocks: 2a12:bec1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:95:1d:8b:69:d7:7f:ff:a4:6e:6c:6a:f4:b5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 2 03:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4e5b9b88376fa4e10aec2454aa69ef27789bf9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:df:44:7c:48:55:3c:8e:7c:0a:68:f6:89:65:
4f:61:13:53:be:44:2a:5b:dd:13:ca:9b:fb:75:c6:
84:4d:b0:d3:9d:de:1d:bb:97:21:0a:3f:9e:53:55:
3c:96:0d:f2:11:0b:b8:c4:b2:b4:2c:12:30:78:53:
09:61:cd:8f:c1:fe:ae:31:94:7f:38:4f:80:22:ae:
07:dc:fa:1e:9b:88:ed:68:79:5b:72:84:2f:9d:f7:
7d:dd:45:c4:f3:8c:f9:82:9e:43:d2:0e:f1:09:b6:
06:35:1f:75:47:15:1b:1a:0f:2e:6c:d8:39:18:9b:
29:65:42:d9:0e:8a:25:90:84:32:47:6a:80:57:35:
08:75:0c:2a:96:43:eb:ac:8a:78:70:e8:f8:bf:73:
92:03:85:c4:59:00:a3:46:a9:dd:29:7d:e2:47:34:
ed:55:8d:bf:3b:13:4a:43:88:86:93:c8:ef:6b:86:
6a:67:f1:6f:d1:ce:b4:e6:31:ff:db:76:e5:b2:a0:
5f:c7:21:e5:dd:23:09:6e:5c:ee:23:b9:b5:fa:41:
53:38:e6:9b:be:fd:2b:73:4b:6b:10:42:5c:e3:6f:
55:cb:3a:14:9b:37:42:d4:f8:9e:f6:a9:35:73:97:
b9:4c:84:11:de:0a:75:35:3a:c9:95:16:69:e6:c5:
de:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E5:B9:B8:83:76:FA:4E:10:AE:C2:45:4A:A6:9E:F2:77:89:BF:9A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/5OW5uIN2-k4QrsJFSqae8neJv5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec1::/32
Signature Algorithm: sha256WithRSAEncryption
65:0a:db:89:77:86:61:c5:34:31:ec:bb:03:9c:d7:b2:bf:2a:
e6:b5:21:50:c6:17:1c:26:a6:37:c5:91:ef:a2:21:3d:4f:cd:
9d:b1:e2:50:c1:85:e2:29:5d:2e:b8:88:1a:f0:0c:b7:0a:0e:
4b:ef:61:2d:91:73:5b:42:65:fd:7b:e1:f1:76:51:b9:6e:60:
ee:12:81:f8:1f:ce:6d:85:9c:90:c8:e4:6e:a5:e3:59:3e:2b:
66:a4:24:ef:fc:9e:6f:e7:6e:f6:44:27:f8:39:7e:0d:a4:b7:
77:e2:ad:8c:ab:86:03:2d:90:d3:9a:04:b5:80:b2:63:fe:4e:
43:2e:15:4d:8b:9b:74:f8:31:14:3a:30:2e:70:5b:6c:5e:dc:
37:e7:ed:e3:5f:ff:67:e3:37:85:8e:02:5b:cb:60:31:36:82:
88:46:c5:32:cd:63:4f:5b:2f:aa:cc:de:c1:bc:11:4b:0f:48:
bf:11:c1:41:a7:e5:ad:7a:a2:a3:42:85:fa:11:e9:c2:dc:6a:
f2:0b:38:99:10:b0:0f:1b:f9:9c:b0:08:ce:4b:c0:3f:87:6a:
b6:44:67:a6:1a:71:4c:ac:c6:24:e6:9c:1c:ce:3b:cf:c1:bd:
4a:7c:a5:13:91:a0:08:52:80:ae:35:7c:e0:45:45:56:db:b7:
ba:d1:a3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org