Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6s1IVO6Ol_pLkrfl12eKhS2qodM.roa
File: 6s1IVO6Ol_pLkrfl12eKhS2qodM.roa (raw, json)
Hash identifier: S6IGhRRypVcEc6Jz8nbKasIhFSMhEWL3mJNhD8at1aw=
Subject key identifier: EA:CD:48:54:EE:8E:97:FA:4B:92:B7:E5:D7:67:8A:85:2D:AA:A1:D3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187C804F8644E02267D5AA6A2B65FAD3428
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6s1IVO6Ol_pLkrfl12eKhS2qodM.roa
Signing time: Fri 28 Apr 2023 13:19:41 +0000
ROA not before: Fri 28 Apr 2023 13:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198699
IP address blocks: 2a12:bec0:320::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c8:04:f8:64:4e:02:26:7d:5a:a6:a2:b6:5f:ad:34:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 28 13:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eacd4854ee8e97fa4b92b7e5d7678a852daaa1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:24:b2:6b:f1:de:4f:90:5b:ad:03:00:5b:0b:
f9:e5:49:9b:a0:df:7c:f2:c0:0f:5f:70:85:37:7f:
b2:0a:a7:00:4b:8b:8c:10:68:f8:7e:b3:79:9d:4c:
b1:94:84:02:32:56:96:2e:87:8c:9d:e8:bf:ae:14:
b1:ff:b0:6d:a3:ab:6a:5e:b2:11:3a:88:c8:0b:7c:
6e:b1:2b:14:6b:8a:62:a0:9c:b1:4c:6f:76:47:78:
9d:57:c4:e5:da:e1:16:4a:0d:6b:57:27:82:68:59:
e6:9c:5d:71:96:1b:9a:ee:42:30:66:b4:fb:69:b9:
da:e7:09:cc:0b:7a:cb:67:3a:7a:ad:c6:66:f7:d4:
4f:fd:be:08:6e:b3:77:41:eb:33:6b:67:e0:73:f7:
c2:bc:c6:e3:12:6a:50:54:e6:50:e1:e0:66:d9:15:
1b:08:31:18:83:92:c6:07:02:42:68:c3:05:84:ad:
82:0b:1d:9f:d0:cc:d9:a6:06:f0:9c:36:24:d4:d8:
65:3c:a9:04:3b:e5:d0:2f:0e:30:b2:55:8c:b5:34:
43:7f:17:f4:47:5d:55:54:a2:9d:05:e8:42:75:c8:
49:ac:2a:dd:e3:7e:ad:3c:6d:a0:cb:96:15:28:a3:
5d:1d:06:2d:cc:df:8d:6d:95:86:35:d7:c1:67:3f:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:CD:48:54:EE:8E:97:FA:4B:92:B7:E5:D7:67:8A:85:2D:AA:A1:D3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6s1IVO6Ol_pLkrfl12eKhS2qodM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:320::/44
Signature Algorithm: sha256WithRSAEncryption
c1:34:7d:14:7f:f1:19:e4:44:90:a9:a1:fc:de:f8:89:e4:29:
19:f1:c6:68:cc:72:1c:9c:14:d7:6d:bd:e4:6c:c7:e7:62:6b:
49:a6:5b:ca:39:61:f7:5a:35:a0:77:6a:32:83:d7:d0:38:b6:
2c:dd:b8:b8:ed:8f:af:ed:ec:fd:b7:ac:5b:2c:62:5d:bf:34:
da:50:93:56:2c:42:07:4a:d6:a9:bf:d8:b4:a6:92:61:5c:90:
9c:7b:c4:8d:31:db:6c:86:c4:67:7d:5c:9b:69:9a:fc:f2:15:
9f:e5:41:59:67:a1:33:24:53:ff:05:c7:f5:06:df:22:86:cb:
cf:60:35:72:d1:8d:0d:13:c7:7a:9e:5d:05:79:48:53:c3:5b:
83:42:24:ee:51:2a:18:d6:71:43:b4:d3:42:49:c3:2b:56:4f:
02:e1:24:ed:58:b6:8f:ba:5c:eb:2e:ab:d5:d0:ff:b0:04:8d:
b1:5e:53:00:b4:bb:63:7c:6c:24:b2:54:3b:2d:8a:da:7c:87:
4c:a5:14:b3:f1:9c:24:97:34:ad:53:52:d0:00:50:7a:7c:da:
50:3b:96:ff:61:bd:db:58:bd:f2:3e:f5:37:b2:61:4b:b1:90:
dd:ba:61:fc:5c:d2:b2:82:4d:20:76:6f:0f:11:39:df:38:88:
eb:8a:cf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org