Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RCUx_gD5m7Fwuj57mu9tXGPkekk.roa
File: RCUx_gD5m7Fwuj57mu9tXGPkekk.roa (raw, json)
Hash identifier: kCs4GWwPJrCuuBz5a6Lum18ahHGo1Pm1TDQvPA8TOSY=
Subject key identifier: 44:25:31:FE:00:F9:9B:B1:70:BA:3E:7B:9A:EF:6D:5C:63:E4:7A:49
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186B3B136188494F83F856788A9ACEE416A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RCUx_gD5m7Fwuj57mu9tXGPkekk.roa
Signing time: Sun 05 Mar 2023 21:33:00 +0000
ROA not before: Sun 05 Mar 2023 21:33:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199671
IP address blocks: 2a12:bec0:190::/44 maxlen: 48
2a12:bec0:190::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b3:b1:36:18:84:94:f8:3f:85:67:88:a9:ac:ee:41:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 5 21:33:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=442531fe00f99bb170ba3e7b9aef6d5c63e47a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5d:d2:54:89:68:62:b2:93:43:7e:4a:e7:3e:
ce:2b:3b:ed:87:7f:5d:6e:c2:fa:f8:07:0e:73:1b:
ee:40:cb:da:82:01:e9:c7:f9:67:f4:fa:44:ff:a1:
5b:99:fb:71:e1:a9:c2:e1:cb:4c:e6:66:81:0a:cb:
e0:e4:47:28:37:52:69:cb:ea:5a:04:2e:8e:09:09:
c5:27:e6:60:f4:3e:92:16:6a:80:f0:f6:a1:01:ca:
4b:5f:c1:10:00:3b:c9:22:ef:f8:e8:d3:a9:69:bb:
79:ad:ea:7d:42:51:6d:a5:20:2f:35:f5:fc:e2:82:
55:6d:9b:00:ae:69:4c:74:f0:43:4b:d1:3e:e3:4e:
81:f7:5e:14:20:ac:71:40:08:c2:46:13:d1:5c:e3:
45:51:58:81:d7:61:ab:14:58:92:95:4f:0c:69:0d:
8a:e0:c1:a4:49:29:5e:af:f7:dd:5c:89:27:11:60:
3a:72:fa:64:cd:f7:b2:7f:c8:c3:4d:e8:ec:3c:52:
d7:07:52:a7:54:86:88:4e:cc:49:42:ea:14:47:5c:
10:fe:cd:69:44:39:2e:ac:61:db:35:a5:2f:9c:d7:
12:fe:70:79:e3:7a:89:ca:11:da:10:ef:68:08:35:
ef:e1:7c:a6:d4:7c:95:49:da:6d:46:41:0e:84:a4:
3a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:31:FE:00:F9:9B:B1:70:BA:3E:7B:9A:EF:6D:5C:63:E4:7A:49
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/RCUx_gD5m7Fwuj57mu9tXGPkekk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:190::/44
Signature Algorithm: sha256WithRSAEncryption
68:0f:47:f0:68:ba:a2:74:0e:a2:77:cf:9e:52:c3:19:4f:fe:
cd:66:f8:39:25:37:db:5b:d0:a8:a9:7b:79:1e:c7:24:9a:c2:
cf:24:d6:9a:3d:87:18:32:b6:ab:5d:b0:65:dd:dd:e5:a9:65:
24:f2:9b:57:86:1a:55:db:96:97:21:bd:ba:3a:63:f4:3e:86:
03:5e:b0:23:d2:47:97:b7:35:68:7e:8c:f8:41:61:20:fb:1b:
da:0e:0c:7e:2d:e8:2c:0d:3e:e8:6b:b4:22:20:76:9e:dd:5f:
e5:55:6d:3c:ca:f5:e6:9e:57:11:c5:6a:b2:8c:d3:80:15:98:
9c:7f:a0:e0:02:27:00:b2:28:a5:0a:97:2e:f1:3f:0d:fa:29:
bf:9e:0a:81:b9:7a:6a:1e:f8:67:8a:54:3b:33:e6:c7:c6:3d:
64:26:3c:46:27:d1:b6:3f:75:c5:24:f4:94:e4:db:76:b7:a0:
d7:6a:2d:51:69:68:ee:f5:57:ea:c8:f8:bc:64:e0:ff:91:11:
b3:2a:ef:a8:4d:6c:93:07:57:b9:85:32:01:23:cc:d0:fc:6f:
35:58:99:82:09:68:e6:2b:19:e4:97:1a:a5:b0:aa:3a:b5:83:
b6:4b:a1:e3:25:35:4e:57:f0:1f:ff:6d:73:dc:af:d5:1b:fe:
28:22:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org