Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8Rngh-4n6Eu3NtcJHDeg4LdcIio.roa
File: 8Rngh-4n6Eu3NtcJHDeg4LdcIio.roa (raw, json)
Hash identifier: HZSnUKHIdWWWzaH8Buh2uDt0j1rMBZ/30ZKqbE5W3Hg=
Subject key identifier: F1:19:E0:87:EE:27:E8:4B:B7:36:D7:09:1C:37:A0:E0:B7:5C:22:2A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CD9494A8D8FE1029867D31D003670307B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8Rngh-4n6Eu3NtcJHDeg4LdcIio.roa
Signing time: Fri 05 Jan 2024 11:01:48 +0000
ROA not before: Fri 05 Jan 2024 11:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215791
IP address blocks: 2a12:bec0:6304::/48 maxlen: 48
2a12:bec0:6307::/48 maxlen: 48
2a12:bec0:6302::/48 maxlen: 48
2a12:bec0:6305::/48 maxlen: 48
2a12:bec0:6300::/48 maxlen: 48
2a12:bec0:6303::/48 maxlen: 48
2a12:bec0:6306::/48 maxlen: 48
2a12:bec0:6301::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 11 Jan 2024 01:13:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d9:49:4a:8d:8f:e1:02:98:67:d3:1d:00:36:70:30:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 5 11:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f119e087ee27e84bb736d7091c37a0e0b75c222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:31:d2:c3:d8:27:38:b8:be:cd:b6:fa:77:
85:19:30:cc:1d:1b:8e:a3:9c:d1:6d:a2:93:44:6d:
2e:6a:f8:1f:9f:7e:0d:44:e1:32:cb:48:b4:8d:a3:
48:4c:a5:66:79:8a:60:2f:8a:6f:83:95:59:54:f5:
51:0f:ef:78:13:a9:ee:0c:14:bf:94:b8:e6:0d:3f:
ab:aa:a3:91:b1:61:92:15:b1:b2:79:51:7e:f5:db:
e2:39:dd:3d:b7:1e:1b:8e:c1:bf:91:61:1c:e0:0d:
0e:df:ae:1f:7b:a8:31:d4:10:c9:b9:a0:e8:f8:24:
5c:3f:43:2d:1a:4d:9c:1e:81:ad:0d:16:51:3c:ad:
7c:35:cc:e4:0b:0c:bc:74:92:a3:ee:55:3c:15:82:
d2:00:99:8b:1f:a4:a1:10:51:aa:41:4e:fc:3f:fe:
97:8a:d8:94:be:c2:4c:bf:62:7c:d6:da:25:7d:b2:
77:50:ee:f2:f1:87:02:44:97:21:38:34:48:55:12:
f4:fe:1e:29:60:a1:3f:6a:75:92:00:48:2c:79:17:
1d:1b:0c:1a:9d:ae:2a:0a:0d:43:3e:21:92:f9:34:
0d:4d:f3:57:b7:9f:e7:a8:57:b0:7c:2e:5c:35:ea:
bd:a9:9f:bc:b9:ae:f1:e4:39:fa:cb:56:f3:ed:11:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:19:E0:87:EE:27:E8:4B:B7:36:D7:09:1C:37:A0:E0:B7:5C:22:2A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/8Rngh-4n6Eu3NtcJHDeg4LdcIio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:6300::/45
Signature Algorithm: sha256WithRSAEncryption
5f:d4:f2:7c:3c:0a:86:a9:a5:05:b9:46:55:c0:4a:92:7c:fd:
e1:d1:2d:16:65:81:69:73:45:5e:be:64:75:19:13:16:c2:b9:
98:9f:b7:94:bc:9b:1f:ac:07:fa:ce:bd:30:11:1c:e4:a0:41:
90:21:95:38:05:16:a0:7c:6f:d7:c5:80:6c:2e:b0:13:0d:39:
61:c3:6b:4b:5d:0b:10:29:27:bc:cf:04:7c:9d:7a:38:4c:cb:
e1:c0:88:05:92:0a:81:73:7d:51:4e:16:c5:be:7b:28:b7:fa:
a6:b7:f8:36:a4:34:db:c2:25:25:3f:ee:6c:39:c1:1d:b9:8b:
99:ad:9c:e3:3d:ad:e6:4b:f1:68:3b:3f:36:c3:c1:54:6e:6d:
ab:ed:5c:7b:0f:62:4c:b0:4d:5c:d5:7d:93:bf:9a:d2:11:d2:
02:d2:75:5c:85:2f:3d:f5:5d:01:1d:a3:3f:0e:6d:e7:0b:1e:
eb:fc:7a:54:f5:b5:d1:30:20:09:e7:dc:80:f4:1b:f4:e6:d1:
ce:64:b6:bd:5c:44:36:32:c3:3c:2e:0d:67:d1:cf:6d:97:06:
c5:05:69:ce:ba:d9:91:0c:69:b1:77:13:e1:f6:ce:d6:62:40:
ee:c3:81:09:8a:57:eb:1e:75:90:96:f5:1c:e0:d3:3f:25:fa:
de:3a:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org