Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6zevBlRXQUZ6n9C6HkzS3uaIhTs.roa
File: 6zevBlRXQUZ6n9C6HkzS3uaIhTs.roa (raw, json)
Hash identifier: 3/jpvxmu/rBFUSvFcQs5jOuuFOxijOKu7dqD243vH+c=
Subject key identifier: EB:37:AF:06:54:57:41:46:7A:9F:D0:BA:1E:4C:D2:DE:E6:88:85:3B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01857079969E0C4512DE6BC1052C3EC618DC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6zevBlRXQUZ6n9C6HkzS3uaIhTs.roa
Signing time: Mon 02 Jan 2023 03:14:54 +0000
ROA not before: Mon 02 Jan 2023 03:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211350
IP address blocks: 2a12:bec0:74ef::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:96:9e:0c:45:12:de:6b:c1:05:2c:3e:c6:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 2 03:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb37af06545741467a9fd0ba1e4cd2dee688853b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:af:8d:da:97:ef:5b:01:2f:22:14:1d:c7:
c1:79:f1:9c:54:de:5a:f2:17:3d:84:19:a1:d6:64:
71:92:69:46:ae:fe:80:ca:eb:4a:ca:77:d4:b4:40:
a5:0a:e6:8d:17:40:db:15:37:20:1b:a0:4d:51:3c:
14:c9:c7:e3:98:d1:59:c3:76:23:eb:7d:7e:c9:b1:
4c:45:c8:3c:96:b8:58:8b:f2:e8:93:cd:1b:d8:ad:
6f:f6:31:b0:c5:0c:39:44:e3:dd:0e:3c:fb:d9:60:
fd:49:a7:fa:ef:6b:79:09:6b:56:b9:a2:ed:86:d7:
7a:bb:48:d7:1e:12:85:c7:cd:b5:d8:b1:6d:29:b1:
05:f6:cb:b4:0e:4d:23:71:77:07:df:b2:e6:61:bf:
a7:78:a8:bb:5d:64:29:e3:08:53:cf:6c:2f:fa:d2:
d1:86:ed:28:04:95:46:e1:f6:48:2c:8f:73:5e:4d:
b4:d7:82:ff:4d:9c:b7:80:7a:75:63:fd:f6:44:a4:
ee:31:58:23:4a:88:6c:3e:f1:9c:ec:86:80:58:ff:
62:ae:69:b1:27:f2:36:c2:e8:ae:6b:37:62:49:cc:
d3:83:cc:73:68:51:fd:bd:98:4b:32:2b:bf:23:ca:
0f:e0:2b:d2:dd:1e:2f:05:eb:70:c8:f3:03:fc:a0:
b4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:37:AF:06:54:57:41:46:7A:9F:D0:BA:1E:4C:D2:DE:E6:88:85:3B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/6zevBlRXQUZ6n9C6HkzS3uaIhTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:74ef::/48
Signature Algorithm: sha256WithRSAEncryption
61:87:54:a4:0a:f7:19:ad:53:0d:6c:03:fc:12:4e:3a:06:50:
07:24:a3:56:60:a7:22:0d:76:54:34:bb:7b:c5:ce:6e:b1:4e:
3e:0f:39:3b:31:7c:81:67:6a:be:71:0c:4e:44:2f:e5:a1:82:
2a:7a:c5:b3:74:10:f4:22:69:1d:1e:32:37:80:36:11:8e:ee:
7b:f0:74:ca:0c:93:a9:41:eb:45:57:8e:db:e9:b1:3a:5d:cc:
0b:2c:1f:8d:15:f0:33:79:1c:6f:fb:dd:38:bd:dc:b3:00:d1:
1c:e5:08:11:bc:fc:a9:dd:38:25:cc:92:d5:15:95:99:2a:c2:
2a:f1:d9:20:9b:85:5f:fd:9d:20:de:a1:89:61:5e:f4:3c:22:
1e:a5:63:67:d2:c7:18:1a:6c:d4:9c:92:ee:a8:71:6e:a3:86:
65:c0:57:52:98:00:6e:6b:bb:e3:3a:84:5e:5a:c6:a4:21:34:
5c:f6:12:8e:3a:03:fa:b0:ea:bc:98:67:f9:30:d4:ee:08:3e:
b1:e5:58:4a:41:d3:69:3d:0d:cd:bf:93:43:66:a0:37:53:b2:
2d:a0:7e:9b:13:9d:85:81:74:b6:d0:d1:83:a3:79:5b:7a:5c:
92:1d:4c:5e:62:ea:25:43:83:e8:a4:de:d3:f4:96:34:e7:17:
89:3a:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org