Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IouUNOUkZTxtSxyIRmtTwc-8ZDI.roa
File: IouUNOUkZTxtSxyIRmtTwc-8ZDI.roa (raw, json)
Hash identifier: 6y62QsULJZZtYtbuSUz9IfAkqBtIoZvXnx/DHRF5lUw=
Subject key identifier: 22:8B:94:34:E5:24:65:3C:6D:4B:1C:88:46:6B:53:C1:CF:BC:64:32
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01896DFAE6A64F15185FBDC70DFCBB45217B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IouUNOUkZTxtSxyIRmtTwc-8ZDI.roa
Signing time: Wed 19 Jul 2023 11:48:26 +0000
ROA not before: Wed 19 Jul 2023 11:48:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48297
IP address blocks: 2a12:bec0:410::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:fa:e6:a6:4f:15:18:5f:bd:c7:0d:fc:bb:45:21:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 19 11:48:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=228b9434e524653c6d4b1c88466b53c1cfbc6432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fc:6d:41:8f:ec:fa:19:4e:c8:dd:fb:cd:bd:
03:8a:44:da:a7:95:6a:35:78:ed:46:82:17:4b:98:
d7:48:50:2a:c6:0e:90:0d:2b:df:e6:b7:2c:f2:43:
15:b3:df:ba:f5:6b:df:fa:27:ee:26:8c:b6:b0:df:
b6:d3:73:ab:67:0d:4d:fe:7a:0a:3f:88:85:5b:5a:
41:cd:d2:d4:5a:3b:31:1b:02:13:2f:ec:de:7d:20:
49:0c:4a:6c:8e:06:87:68:93:1d:f0:c8:d8:e7:0c:
e0:6a:b8:a4:c6:75:e0:e0:6f:16:3a:24:fe:be:2d:
59:7a:6b:78:7d:ab:90:86:93:d1:46:6e:50:f9:01:
54:70:31:b3:60:2b:f7:20:06:38:56:71:b0:bd:0c:
78:5e:ff:66:ce:f5:b3:73:99:2d:77:e4:c6:fb:f9:
f1:5b:0c:50:65:9a:23:cd:72:4f:27:ce:b7:61:17:
2c:30:c3:79:9d:15:77:7b:51:f8:d6:4a:44:43:25:
74:e8:66:90:5b:3c:c9:bf:00:c4:0b:27:56:9f:26:
9e:90:4a:e7:51:8c:82:51:ac:e5:01:e5:7b:6a:21:
0f:c2:28:71:df:23:74:31:ba:68:54:f3:e1:0f:80:
2e:dd:35:f0:ff:9a:de:c5:d6:17:0d:54:56:a5:87:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8B:94:34:E5:24:65:3C:6D:4B:1C:88:46:6B:53:C1:CF:BC:64:32
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/IouUNOUkZTxtSxyIRmtTwc-8ZDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:410::/44
Signature Algorithm: sha256WithRSAEncryption
39:f0:3d:87:4d:ad:0c:8c:f3:a2:a0:0e:66:6e:0a:ed:5b:f9:
8b:5c:b8:3c:d5:0c:f0:c0:ea:cc:a9:69:08:ea:c3:98:4f:a0:
f6:c4:23:4e:ff:6d:c5:47:8f:32:37:83:70:d4:b7:14:26:85:
9b:c7:39:96:81:b5:a3:a5:4a:1c:d3:54:a9:f9:d4:72:a8:b2:
b5:1b:f9:72:80:f6:c6:c9:65:a6:df:55:65:dd:be:d0:c4:32:
60:f3:98:13:fa:5e:f4:dc:c4:9f:04:22:5b:17:2d:3d:9c:b1:
0b:6d:2e:46:6e:c5:dc:1f:e9:bb:72:26:68:05:a7:25:6e:10:
52:c9:4c:ad:36:58:d0:0d:df:4f:4f:ff:1e:6c:80:2a:ed:fd:
15:73:6f:7f:9e:b5:ad:5a:32:e3:80:93:29:14:1b:85:8a:7c:
c1:4a:25:33:1b:4a:66:1d:db:02:b0:87:7d:32:dd:5d:16:00:
83:32:fc:4d:2a:da:4c:42:f5:bf:ef:eb:4d:1c:11:ff:09:87:
2a:cc:f8:35:47:ee:d9:86:9e:92:d0:10:a6:32:e3:79:c9:af:
07:06:0b:cb:d5:76:1d:a7:7f:1d:94:38:b6:ae:b0:85:2b:fc:
22:10:44:79:10:a0:da:7a:33:f7:f6:78:d4:be:d9:2a:fc:df:
69:45:c5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org