Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9hugdSbBUZuWksHG3laSB-z2LWc.roa
File: 9hugdSbBUZuWksHG3laSB-z2LWc.roa (raw, json)
Hash identifier: c5kPulEsLnR1OhRfLXbRo0qyT1L5cYrmuJThg/ot6l8=
Subject key identifier: F6:1B:A0:75:26:C1:51:9B:96:92:C1:C6:DE:56:92:07:EC:F6:2D:67
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01859863924396D8160CDE1AF1906F960E50
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9hugdSbBUZuWksHG3laSB-z2LWc.roa
Signing time: Mon 09 Jan 2023 21:15:40 +0000
ROA not before: Mon 09 Jan 2023 21:15:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210269
IP address blocks: 2a12:bec0:100::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:98:63:92:43:96:d8:16:0c:de:1a:f1:90:6f:96:0e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 9 21:15:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f61ba07526c1519b9692c1c6de569207ecf62d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:56:6b:0c:6e:cb:e5:86:fb:0b:e6:f5:1d:04:
2d:f8:e7:26:ef:99:43:eb:cf:cf:99:71:14:48:c1:
e1:20:60:bb:77:fb:c0:e4:2a:d3:d1:b2:58:a4:59:
53:6e:92:36:ae:16:46:38:b9:7a:60:42:90:63:c7:
af:31:41:19:bc:ea:74:7b:89:f5:9a:f2:6d:fe:dd:
ae:7c:58:bb:52:74:dc:6b:4a:1f:d7:30:df:18:0d:
f8:3f:71:02:36:00:3a:50:52:7e:45:4f:7e:92:b8:
ff:14:5a:5f:f5:30:e6:a9:85:c0:47:c2:06:40:ea:
09:ee:49:96:e3:69:23:82:eb:b0:7d:0e:39:3d:63:
1e:36:8e:0e:b7:a5:b0:ff:14:58:fd:06:ef:f1:86:
66:de:6c:dd:20:c7:9b:70:e5:bb:6f:06:3b:48:36:
70:15:a2:4e:8e:9f:a6:04:78:f1:e8:5a:a4:68:9c:
82:9b:ab:76:61:fe:df:93:1d:c3:b1:76:66:8e:53:
7b:ca:44:29:c9:84:10:9f:93:8e:d3:4f:37:6d:6f:
60:d7:fb:46:e7:82:be:28:ec:a7:4d:9e:2d:cd:dc:
4c:6f:a8:db:f0:e5:54:33:ce:d9:2f:26:cb:fe:bb:
1a:05:33:f5:e8:fd:d2:76:e5:d9:84:58:be:12:12:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:1B:A0:75:26:C1:51:9B:96:92:C1:C6:DE:56:92:07:EC:F6:2D:67
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9hugdSbBUZuWksHG3laSB-z2LWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:100::/44
Signature Algorithm: sha256WithRSAEncryption
4c:0e:57:df:07:1d:39:5b:af:f2:27:14:2b:c6:2a:81:e0:ec:
b4:2c:ab:be:c0:08:ce:4c:c9:54:78:25:c9:df:6c:7c:81:d8:
c4:29:0a:5e:ba:81:ef:a1:1a:c5:bd:f8:da:7c:32:03:0c:d0:
6a:70:63:ef:3d:82:fc:8b:e6:72:0f:e1:9f:fa:ed:31:8e:f2:
b4:ce:e1:83:53:e3:ca:9c:e9:2f:45:ae:81:76:9f:92:e3:f0:
c4:ea:29:37:f6:3f:91:58:c7:21:73:07:33:39:10:46:91:e1:
7b:f1:bd:02:fb:a3:c3:19:5d:8a:5a:e2:56:48:72:1a:a9:37:
68:bc:13:d1:c1:16:37:7c:0f:ca:39:8d:a7:cf:94:1b:66:0a:
8d:c5:c9:dc:ba:cd:b5:e5:db:56:a1:c2:28:ac:ec:6f:b8:f8:
fa:7a:f4:f2:c4:3e:bf:c6:5f:f7:e9:40:26:9d:ee:61:4c:a8:
65:e9:1e:d4:22:c2:b4:b4:8a:4f:7b:c6:bb:82:71:13:ec:09:
52:65:a3:e7:98:c3:03:c4:c1:d4:d4:10:98:71:d5:07:5a:f9:
db:3d:a7:3f:d9:e8:a8:50:39:7e:d5:4e:55:84:81:6f:a4:67:
88:f0:a0:3a:20:dc:c1:7d:50:ef:8f:d2:b9:87:4e:64:d4:0a:
7b:28:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org