Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JdYozfgMzZT2NMWka4kI0EcWv38.roa
File: JdYozfgMzZT2NMWka4kI0EcWv38.roa (raw, json)
Hash identifier: yEtLVJDp0jn8Dux7lX32QZsY09kyEbNvfc3ReegcFbA=
Subject key identifier: 25:D6:28:CD:F8:0C:CD:94:F6:34:C5:A4:6B:89:08:D0:47:16:BF:7F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186E6B7713B90F5D9F22608E09B90CC6478
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JdYozfgMzZT2NMWka4kI0EcWv38.roa
Signing time: Wed 15 Mar 2023 19:20:27 +0000
ROA not before: Wed 15 Mar 2023 19:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199423
IP address blocks: 2a12:bec0:1b0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e6:b7:71:3b:90:f5:d9:f2:26:08:e0:9b:90:cc:64:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 15 19:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25d628cdf80ccd94f634c5a46b8908d04716bf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fd:6b:fb:8f:f0:67:7d:9b:b0:53:8f:57:ef:
0d:b8:c2:a0:99:d8:ee:86:3c:75:22:3f:1f:78:a2:
97:8e:59:08:59:a0:9b:e1:eb:a2:9d:62:ac:f0:60:
31:32:4b:97:cf:d8:4e:8b:3a:6f:3e:d0:22:f9:e3:
40:01:2c:91:d7:9c:ce:18:29:c2:58:e6:09:8a:f7:
0a:1f:14:20:08:31:58:61:11:a7:36:8a:4f:e5:17:
f4:4a:ca:1c:eb:7a:7e:91:4e:a7:3d:c7:ea:6b:fb:
cf:5a:a4:8a:97:95:12:08:f1:99:1c:83:01:18:b4:
4f:4d:59:c3:f2:eb:1a:83:d7:3b:5e:94:2a:30:10:
e4:6b:c8:e8:4d:78:2c:a8:45:f2:40:71:06:d6:ac:
2c:e2:85:35:d0:ac:e8:d9:60:44:6d:07:91:c0:13:
92:d3:7b:10:4c:23:ea:49:5c:c7:2e:4a:69:71:2a:
68:ab:6e:df:53:78:3f:97:28:99:d1:80:95:d1:ae:
27:fa:ee:d8:df:df:48:df:1f:e0:70:02:1b:ab:aa:
45:95:eb:a5:96:0c:cd:ad:3d:62:13:c4:ae:70:ec:
b3:8b:86:54:73:43:b7:6d:42:72:e6:bd:08:3e:6b:
a9:04:66:4a:af:5b:0a:95:d6:f8:80:a7:d6:b8:35:
c8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D6:28:CD:F8:0C:CD:94:F6:34:C5:A4:6B:89:08:D0:47:16:BF:7F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JdYozfgMzZT2NMWka4kI0EcWv38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1b0::/44
Signature Algorithm: sha256WithRSAEncryption
86:e6:3c:a8:4d:fe:a1:82:ef:c6:fb:ac:3c:28:0b:38:50:10:
f8:72:86:81:c4:a4:90:fe:f4:18:fd:b3:69:f1:97:f9:31:97:
58:dd:b5:7f:52:f1:ea:83:3d:a3:60:64:9a:4e:22:0c:6b:d8:
92:d5:cc:41:b9:80:cb:6b:d8:5c:97:6c:1d:3a:a8:cb:36:44:
7c:49:96:db:3e:32:4f:ca:ff:29:d3:f6:71:8d:8e:a6:e0:f3:
5c:f3:7d:b2:57:fd:b7:06:a2:2e:32:67:8d:06:7e:04:84:39:
bf:a1:ce:fa:40:46:d2:a2:85:d3:25:5a:02:64:66:ee:4c:d0:
6c:a4:b0:40:7f:0d:b0:71:b4:c2:5d:db:4f:d9:a5:dd:75:c6:
5e:ff:e6:98:69:fa:87:36:fe:a6:d5:94:2c:70:95:39:2e:4b:
f3:e5:3f:43:2b:2c:95:37:51:a5:38:f4:10:a7:f0:d9:11:7d:
26:0b:c7:e7:cc:ee:dc:d5:a1:b1:64:72:91:ef:5b:6e:a5:2c:
95:4d:21:e0:76:25:b6:51:09:4c:61:c3:f6:26:88:bd:58:9b:
7e:88:bd:d6:56:c1:0b:81:d7:ca:b9:bf:e9:fb:54:55:87:7f:
6c:20:ab:22:6e:ad:ce:3d:c6:f1:aa:a1:d4:20:7c:63:df:d3:
99:4a:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org