Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PsNZPGfMBYo9m3tH5OJ7AOqwYy0.roa
File: PsNZPGfMBYo9m3tH5OJ7AOqwYy0.roa (raw, json)
Hash identifier: w2OaZOYXJmi6JJmxQaYp7nrBeIoxPv6DzJ9EcwX+Yi0=
Subject key identifier: 3E:C3:59:3C:67:CC:05:8A:3D:9B:7B:47:E4:E2:7B:00:EA:B0:63:2D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D8CD218E471D24A09060D04358345FFEE
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PsNZPGfMBYo9m3tH5OJ7AOqwYy0.roa
Signing time: Fri 09 Feb 2024 07:43:15 +0000
ROA not before: Fri 09 Feb 2024 07:43:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198351
IP address blocks: 2a12:bec4:1020::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 16 Feb 2024 10:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:d2:18:e4:71:d2:4a:09:06:0d:04:35:83:45:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 9 07:43:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ec3593c67cc058a3d9b7b47e4e27b00eab0632d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6a:d9:cd:9d:e2:cc:c5:f7:af:fa:d4:12:5a:
8a:e5:f2:b5:13:24:8f:ca:cb:29:01:6f:2d:c8:3d:
7b:ee:29:2e:d4:43:d4:63:ed:15:0c:0c:fd:47:a1:
67:25:cb:5c:c0:53:01:58:74:85:74:8b:2e:c3:fa:
c1:c7:65:3f:1b:b0:24:df:09:d4:3b:b8:c5:bf:94:
74:bd:21:ee:46:1a:dd:cf:a2:4e:02:0a:81:b6:04:
a1:24:08:c5:63:aa:37:33:bf:e5:48:d4:4f:f3:a4:
b9:33:2b:1d:85:eb:3a:1d:85:25:b1:ca:7b:d0:cd:
bc:3b:c4:71:b4:97:2d:54:eb:91:4c:c3:3f:cf:a8:
9d:51:71:5d:aa:18:ec:44:ac:ae:b0:78:5b:50:c9:
9e:a5:ad:e5:54:e2:d6:5b:33:2d:b4:70:d7:0a:de:
c3:16:b8:72:58:7a:8f:8e:16:bc:1b:94:3b:9b:53:
37:15:1f:36:94:33:8c:3a:9d:b0:27:e6:1c:1c:ff:
a6:5f:b9:44:e1:1c:61:fd:ce:50:59:cf:5f:c0:45:
53:94:4e:c8:58:8b:ab:08:90:c2:4e:bd:23:af:b7:
8d:40:6e:42:50:02:4e:ba:e8:c9:05:67:a1:c2:92:
04:58:c2:2f:5e:1c:d7:d4:d3:16:1c:0f:b8:5a:4f:
7c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C3:59:3C:67:CC:05:8A:3D:9B:7B:47:E4:E2:7B:00:EA:B0:63:2D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/PsNZPGfMBYo9m3tH5OJ7AOqwYy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1020::/48
Signature Algorithm: sha256WithRSAEncryption
b8:df:3a:32:2f:53:db:2f:f8:f4:d2:09:b1:fe:14:eb:c1:9a:
f8:d3:56:08:ce:e6:33:86:97:e7:16:cf:97:ea:5a:a9:25:67:
15:b6:59:01:36:35:7c:02:14:00:2d:a4:10:01:27:7b:aa:17:
11:ff:75:5b:aa:87:76:56:09:1e:af:ee:cf:36:9b:ae:25:c1:
db:f5:f1:74:c0:c4:07:8a:bb:ef:90:31:89:87:f1:6a:f4:23:
8c:e8:74:0f:79:d7:47:c3:33:7e:e8:05:5f:f4:9f:ba:01:83:
e1:09:c6:1a:64:62:80:55:6f:a5:86:64:c8:0d:96:1e:0a:5a:
10:3c:11:cc:88:c6:f0:ea:11:c5:7d:6b:ff:d8:82:d9:22:d5:
e2:8a:13:f2:fd:96:6a:80:88:cd:c6:4b:e6:07:62:e4:29:46:
99:f8:08:5c:cc:db:be:d1:3b:f5:21:e3:77:85:f9:e8:cb:98:
71:9d:9a:cd:cf:b6:7c:d5:84:16:40:ef:3d:e2:39:06:67:3f:
76:c7:c3:31:33:62:be:2a:cb:7a:9b:ad:76:97:1e:38:9e:88:
83:4d:79:e7:49:1b:cf:96:ce:8a:b2:1b:37:fc:b5:de:3d:0b:
dd:6a:5b:7f:d0:a8:fa:31:e1:00:a1:8a:48:47:93:b1:65:52:
10:ea:de:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org