Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/H0fO_9_3Jsi63-kVW6zOeW3Ti4s.roa
File: H0fO_9_3Jsi63-kVW6zOeW3Ti4s.roa (raw, json)
Hash identifier: GibFmrtWqo7ywTNaQgTYMgDbr66eDe0xjKO/nZZ1fw4=
Subject key identifier: 1F:47:CE:FF:DF:F7:26:C8:BA:DF:E9:15:5B:AC:CE:79:6D:D3:8B:8B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187532605237ABE934CBCCAE8E7F420B51E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/H0fO_9_3Jsi63-kVW6zOeW3Ti4s.roa
Signing time: Wed 05 Apr 2023 20:40:13 +0000
ROA not before: Wed 05 Apr 2023 20:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60298
IP address blocks: 2a12:bec0:2a0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:53:26:05:23:7a:be:93:4c:bc:ca:e8:e7:f4:20:b5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 5 20:40:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f47ceffdff726c8badfe9155bacce796dd38b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:be:c3:b1:56:80:e5:8b:ca:00:72:41:6a:1d:
b7:8d:d0:6c:7b:24:05:81:f2:ac:c7:2f:57:d6:0c:
b9:a9:d9:98:e6:23:f3:02:1b:0f:17:56:13:ca:e9:
47:02:af:80:69:75:51:81:79:b3:f5:1a:00:58:14:
9e:08:84:81:5a:f2:f8:f7:3a:09:71:f0:83:f1:af:
d2:86:c0:77:b7:9a:23:5a:2a:98:33:e9:41:c3:ab:
a3:18:42:14:ca:53:d1:a8:57:b2:89:dd:8b:d1:ac:
4c:55:98:90:a8:2a:ca:56:d8:6d:fc:af:0a:21:9a:
fc:95:e7:b6:04:d3:46:2c:64:29:3e:d1:7d:fd:da:
43:ab:21:cb:da:d0:d9:a4:7c:2f:54:64:c5:58:21:
ec:d1:bb:79:82:e1:d8:8e:2b:2f:c2:98:f0:5e:69:
04:61:fa:b2:f8:94:d0:dc:ca:2e:63:ab:df:6f:3d:
1d:69:2c:98:d7:d1:7e:3e:12:99:bb:22:92:8d:70:
c8:2f:9e:f8:7c:02:8d:4b:76:fa:20:0b:7d:cb:77:
fa:80:77:0d:fd:84:7c:f2:d3:18:06:f5:3c:fb:1c:
05:37:0c:8a:c1:27:75:8a:9f:b5:9c:7c:bb:e1:35:
e0:b8:2f:96:f7:9b:0f:77:c8:d1:17:21:09:47:dc:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:47:CE:FF:DF:F7:26:C8:BA:DF:E9:15:5B:AC:CE:79:6D:D3:8B:8B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/H0fO_9_3Jsi63-kVW6zOeW3Ti4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2a0::/44
Signature Algorithm: sha256WithRSAEncryption
65:2a:c0:06:ed:41:50:b9:1b:55:b3:59:07:3e:e8:85:13:ad:
b8:dd:5a:41:f7:79:f9:d8:c1:8d:b3:c5:18:44:d9:8e:a5:58:
17:a6:c9:fb:f2:ab:8c:62:5d:37:5c:c8:6c:a3:5f:84:76:d8:
a2:c6:5f:d8:f6:42:e8:d3:cc:07:ea:49:72:da:b8:01:80:93:
18:0c:b2:43:6e:c2:ef:af:90:3d:ca:e3:4b:77:ad:59:2d:3a:
02:e7:a8:a9:eb:b1:bf:b3:6f:0e:0c:cb:c4:39:98:28:00:74:
32:76:58:a8:dc:d1:aa:38:aa:35:4f:9f:20:2a:fc:dd:a9:9d:
c1:b8:36:2f:08:13:61:a5:0e:60:43:30:1b:36:af:b4:e0:e3:
ec:77:05:ee:4e:cf:3a:ac:02:7f:ec:8a:50:f2:e7:d4:2a:22:
01:52:37:cf:4a:e0:66:93:f5:0f:ee:c1:0c:8c:53:47:a0:4b:
55:d2:ed:41:8d:aa:c0:84:30:7b:4f:8d:13:a3:1e:42:46:43:
d6:3f:61:fe:58:ed:1d:33:db:3a:6b:83:9b:84:f0:95:37:b2:
c2:63:73:92:78:0a:0c:a8:11:2c:5c:35:b0:1d:c6:77:ae:38:
6b:98:b9:dc:97:f0:54:a8:a9:4b:20:fe:77:21:7e:19:80:5d:
da:37:a5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org