Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/P7_TI7yoGIW8uMetKKLo5j_Yu2s.roa
File: P7_TI7yoGIW8uMetKKLo5j_Yu2s.roa (raw, json)
Hash identifier: NmIBxHMcaWMoac86HonmtJ1EyCKWnYJDUcWg/YcZ2tQ=
Subject key identifier: 3F:BF:D3:23:BC:A8:18:85:BC:B8:C7:AD:28:A2:E8:E6:3F:D8:BB:6B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018B6FFF7AA8C11426DAD8E5589313B38AF9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/P7_TI7yoGIW8uMetKKLo5j_Yu2s.roa
Signing time: Fri 27 Oct 2023 07:18:15 +0000
ROA not before: Fri 27 Oct 2023 07:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216085
IP address blocks: 2a12:bec0:570::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6f:ff:7a:a8:c1:14:26:da:d8:e5:58:93:13:b3:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 27 07:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fbfd323bca81885bcb8c7ad28a2e8e63fd8bb6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:99:71:b0:c2:88:40:50:a3:cc:e3:1c:ef:
61:86:85:28:67:0f:a4:13:cc:85:08:5f:21:cd:b1:
16:9d:7c:e7:b8:de:85:ca:8e:74:d8:1c:7c:78:df:
1c:5d:31:76:b6:e5:23:fe:7a:da:bf:c1:81:20:b2:
96:ab:82:17:3a:20:3d:8b:0c:80:6a:f7:3f:ff:37:
27:11:8f:70:42:c5:c9:5e:c3:20:78:2f:01:c9:91:
db:1b:ac:5f:e0:d2:a9:7f:58:a0:97:10:b8:14:9c:
92:9c:ed:df:a2:bf:37:ea:8d:d4:80:56:d0:60:fc:
6c:db:ae:4a:34:71:3c:a3:19:6f:35:00:66:06:fa:
e2:2c:50:01:7b:c3:41:bc:93:f8:23:18:d4:c3:d3:
58:74:2d:08:50:27:db:0c:8f:24:70:f6:d3:b1:91:
1b:3d:c4:18:36:3b:c3:f5:36:f1:41:68:75:8f:e4:
28:37:f1:0c:46:6b:0c:12:62:ac:1c:5f:4d:18:01:
97:2d:3e:4e:f4:f3:77:bf:6d:05:eb:c5:8f:d9:8b:
c6:a9:64:4b:5e:b6:36:f9:e2:ea:79:9a:63:2a:e4:
9f:48:41:5f:a3:91:28:d0:f8:56:f6:d3:66:b5:70:
74:d8:2d:67:25:2e:47:88:cb:b7:a3:b4:66:4d:2d:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:D3:23:BC:A8:18:85:BC:B8:C7:AD:28:A2:E8:E6:3F:D8:BB:6B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/P7_TI7yoGIW8uMetKKLo5j_Yu2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:570::/44
Signature Algorithm: sha256WithRSAEncryption
53:2f:28:3a:4b:be:82:27:70:d8:35:f2:63:55:41:a5:b6:ae:
c2:35:56:e3:4a:f4:3b:a9:89:1c:cf:4a:30:b4:65:a1:54:3b:
9c:e7:b6:96:6f:ec:07:b1:bd:7c:df:6d:0c:23:c7:c8:21:99:
b0:37:9f:d8:bc:b8:85:10:76:ad:48:29:4a:54:84:91:20:8d:
f1:8c:22:e5:4d:60:8f:04:af:37:f8:dc:92:62:3e:90:22:59:
8b:d5:27:86:e0:17:6e:36:79:67:19:90:51:69:cf:1b:13:da:
bf:d0:2b:cd:67:cf:b9:1e:82:86:ed:5a:7b:ad:f2:9f:c9:16:
41:b5:9d:7e:c8:cc:95:a8:e6:85:80:26:df:e6:9a:af:4c:a2:
8b:0e:23:4e:b9:6e:24:29:24:36:46:35:ac:3d:1a:35:65:d8:
0c:5d:48:91:94:54:e3:1d:9b:33:0c:16:bf:30:2b:6f:9f:71:
a8:b6:86:da:a7:dd:e4:6d:af:c7:36:91:aa:39:68:fc:61:ee:
f5:2d:e7:53:93:d9:fd:a5:d4:a2:1a:86:28:51:e5:6a:c1:e2:
36:05:3b:dd:6c:e9:7b:9a:43:38:91:b3:c0:d1:5b:57:ff:d8:
db:a9:cd:f1:ed:61:cd:a7:2b:b3:7a:ad:e2:50:ab:a2:5e:7b:
75:24:f2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org