Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DR_SemLWDppeYC5ONaO4O-y0VvI.roa
File: DR_SemLWDppeYC5ONaO4O-y0VvI.roa (raw, json)
Hash identifier: +N6kWRosmgq+T9th/AaYxQvmMTPfk/u82aEoZ24c3xw=
Subject key identifier: 0D:1F:D2:7A:62:D6:0E:9A:5E:60:2E:4E:35:A3:B8:3B:EC:B4:56:F2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018A2768961EECAA54FA7BB6B95E66DDF8D0
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DR_SemLWDppeYC5ONaO4O-y0VvI.roa
Signing time: Thu 24 Aug 2023 11:58:00 +0000
ROA not before: Thu 24 Aug 2023 11:58:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216409
IP address blocks: 2a12:bec0:440::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:27:68:96:1e:ec:aa:54:fa:7b:b6:b9:5e:66:dd:f8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Aug 24 11:58:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d1fd27a62d60e9a5e602e4e35a3b83becb456f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:41:20:a6:f4:41:ff:2f:27:aa:3c:1b:06:8f:
87:ce:35:ea:0a:f8:56:dd:ef:4f:c0:28:ec:fb:bb:
5b:aa:fb:da:04:99:00:1b:c2:19:7c:38:2d:7c:b8:
37:1e:bd:03:3b:92:37:65:c5:b2:af:9d:6c:fe:c8:
34:8f:aa:44:2f:d7:2e:a9:1c:55:0d:24:0d:fa:a5:
2c:5a:22:bc:a6:04:d7:dd:64:2e:8f:30:62:fe:01:
8c:17:56:b2:01:16:31:7f:af:dd:2e:79:df:1c:8b:
8c:4e:e9:9f:1b:39:01:de:24:d8:3a:98:3d:11:fb:
64:f3:d5:76:c6:f5:86:d9:ff:1e:0b:68:52:4d:7e:
56:98:3f:71:4f:00:3e:70:ad:94:9a:6e:6a:ba:56:
c3:bd:0e:4b:30:f0:6d:7d:61:fd:3a:9c:6e:3b:96:
4f:b0:6c:07:27:66:85:71:c0:0a:d9:30:d4:04:39:
d8:79:10:39:b3:0b:ff:16:c2:c1:d3:9f:17:9f:43:
a5:29:04:a1:2f:73:70:ba:22:dd:3c:4a:93:b3:2f:
18:49:d8:e6:38:75:52:2d:29:ee:7f:1f:fa:c3:ba:
d1:e1:fe:db:89:1f:00:08:ad:f8:5d:19:87:48:10:
a9:c9:fa:41:b2:d5:6a:73:66:c3:d5:3f:ca:88:50:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1F:D2:7A:62:D6:0E:9A:5E:60:2E:4E:35:A3:B8:3B:EC:B4:56:F2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/DR_SemLWDppeYC5ONaO4O-y0VvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:440::/44
Signature Algorithm: sha256WithRSAEncryption
94:e7:c4:2d:17:14:75:17:a6:24:67:55:4a:f8:9f:08:96:2f:
a7:f3:1c:6c:de:2f:38:41:61:f2:28:5e:d6:db:63:ee:3a:8b:
3b:41:2d:7a:20:6e:2f:06:0d:1c:77:d8:02:45:79:77:51:41:
5f:49:7a:7c:cc:e7:13:e0:c5:4b:34:5d:29:1a:c2:07:e7:1c:
99:49:a0:cc:44:db:5e:87:26:64:6a:43:e7:ad:e1:1d:c7:5e:
6d:67:89:b4:f3:dd:f9:6e:54:6c:60:ed:be:37:b8:2e:9f:c6:
61:b9:e7:87:a3:ba:ff:fe:d0:10:9f:a5:d3:0f:8b:41:35:7c:
63:3e:53:11:6b:d8:2f:cb:39:74:10:52:c7:0c:7e:07:cb:91:
e6:c2:15:13:8e:28:6f:c2:d2:a6:fd:70:0a:c3:68:43:6a:33:
c4:68:e5:81:e0:f0:de:c4:cd:02:d3:f3:90:2a:ff:0d:63:50:
8c:4e:d6:60:53:20:13:97:7c:70:a2:62:30:5d:3f:01:83:25:
2e:e5:68:de:75:fc:f7:88:3e:09:e1:2a:ff:4a:ac:f8:67:eb:
0c:a0:13:43:9c:53:06:cd:e4:b2:ee:6f:db:21:06:05:fb:67:
17:5d:6a:1e:4f:98:f5:92:46:10:13:02:8e:4c:ea:c3:90:e4:
c3:6e:05:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org