Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CWgBRT9fmO5KG7JyL6EYupbO4Js.roa
File: CWgBRT9fmO5KG7JyL6EYupbO4Js.roa (raw, json)
Hash identifier: AMcBo9Wn3kMMToIXQlcRUgd4d87/YVFd0D8+UP/Lpjs=
Subject key identifier: 09:68:01:45:3F:5F:98:EE:4A:1B:B2:72:2F:A1:18:BA:96:CE:E0:9B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018DB17B453CD0523A7B59D4AF0FB4610881
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CWgBRT9fmO5KG7JyL6EYupbO4Js.roa
Signing time: Fri 16 Feb 2024 10:34:22 +0000
ROA not before: Fri 16 Feb 2024 10:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198351
IP address blocks: 2a12:bec4:1020::/48 maxlen: 48
2a12:bec4:1021::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 20 Feb 2024 08:51:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b1:7b:45:3c:d0:52:3a:7b:59:d4:af:0f:b4:61:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 16 10:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=096801453f5f98ee4a1bb2722fa118ba96cee09b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0c:c7:22:8b:79:73:14:7b:49:ce:36:c2:3f:
aa:26:6d:e8:f4:53:71:99:b9:f9:99:74:5d:1c:03:
73:f4:91:b8:e9:ec:83:5e:64:c6:63:25:f4:a0:2a:
71:36:3a:8c:9e:a3:b8:a9:6a:79:07:aa:43:d2:13:
ec:c4:f6:60:08:3a:e9:78:fe:9e:ef:8a:17:7b:c1:
00:b8:2d:58:1c:04:cd:dd:63:b3:55:83:60:58:d6:
26:3b:a1:93:8e:c6:fb:be:83:1c:96:23:15:ff:02:
8a:41:27:a7:81:85:ab:e3:ee:e9:07:32:f6:28:99:
1a:2a:ab:90:38:02:1a:8b:76:2f:bf:44:1e:37:7b:
f1:4c:c9:7d:ff:c1:22:50:e8:56:35:0e:40:c3:db:
e0:56:c0:82:30:43:d8:b6:6e:8b:ac:da:0a:83:e1:
4f:99:60:50:42:4f:74:cc:88:59:c2:d8:16:71:1b:
50:a6:79:28:60:46:8c:6f:8b:07:40:9b:4e:df:62:
2c:1d:8e:ff:5a:a7:fb:f5:9e:f0:0f:ee:7c:ee:ef:
7f:84:4d:77:ce:23:d0:f2:12:85:b9:5f:fd:02:7d:
60:21:37:f6:38:9d:6a:5a:62:f9:27:64:9e:e9:2a:
84:83:29:66:20:0d:72:84:ee:d7:a8:d2:d3:ff:b8:
a4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:68:01:45:3F:5F:98:EE:4A:1B:B2:72:2F:A1:18:BA:96:CE:E0:9B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/CWgBRT9fmO5KG7JyL6EYupbO4Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1020::/47
Signature Algorithm: sha256WithRSAEncryption
85:ff:46:28:97:cd:69:d1:40:84:c7:61:81:23:78:0a:ad:e4:
2a:17:17:16:2d:34:28:39:8d:96:46:66:4e:50:2d:4a:26:93:
9d:f1:35:2d:8f:22:15:98:4a:54:5b:8f:fa:d3:9c:bd:a2:93:
e6:d3:25:7a:22:8b:d7:60:f2:87:b5:51:fd:36:6f:f9:f6:88:
90:09:95:b0:fe:ed:ce:ab:58:71:01:e9:c0:f2:9b:c0:38:13:
87:e8:72:f0:15:a4:88:24:47:83:9b:9e:9c:33:a2:e3:d7:8f:
12:07:b1:69:14:de:64:c0:f7:ce:9f:51:58:2a:14:c0:b5:4c:
11:e2:dc:e8:d9:d4:fd:df:6f:25:71:b4:7a:e4:2b:33:ee:67:
0e:65:82:c2:65:af:70:e2:90:6b:ce:97:86:e8:45:f9:f5:fd:
63:5c:e3:57:6d:79:57:93:88:bc:a8:63:0f:69:d9:e1:38:5d:
6a:fe:b1:a7:85:ad:99:4a:28:17:5f:77:35:64:2e:19:6c:4f:
0a:3f:0e:88:88:58:f4:fc:ee:8b:05:c3:97:51:28:f8:d3:3f:
2f:13:2a:c2:a8:91:2e:ed:38:e2:20:ac:62:dc:f7:71:2c:6a:
fa:e7:5e:52:c8:55:59:2c:31:08:87:87:27:84:7f:a9:3a:b7:
c1:34:f0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org