Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/T6PLe41MEjnNUsIygB27tx5fM1w.roa
File: T6PLe41MEjnNUsIygB27tx5fM1w.roa (raw, json)
Hash identifier: /qFttVT2vLlXKEWk0zToRmgeQESKNloJo0NZ0Z3nEhE=
Subject key identifier: 4F:A3:CB:7B:8D:4C:12:39:CD:52:C2:32:80:1D:BB:B7:1E:5F:33:5C
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187E6F50F3275E95EC0A19AB8DC4676E620
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/T6PLe41MEjnNUsIygB27tx5fM1w.roa
Signing time: Thu 04 May 2023 13:30:32 +0000
ROA not before: Thu 04 May 2023 13:30:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200636
IP address blocks: 2a12:bec0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:f5:0f:32:75:e9:5e:c0:a1:9a:b8:dc:46:76:e6:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 4 13:30:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa3cb7b8d4c1239cd52c232801dbbb71e5f335c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:42:6b:76:e8:c2:89:cc:52:ec:d1:41:fa:
d7:17:e7:4e:91:62:9d:ac:45:7d:6b:bd:76:26:75:
82:1b:63:6e:1a:17:5c:a8:eb:42:d6:07:78:34:89:
5d:11:3f:48:30:e0:1a:47:47:20:32:34:28:03:10:
30:92:7b:97:bb:20:2e:09:7d:90:b3:11:a5:df:37:
39:8f:4c:70:7a:1b:5b:19:3f:c9:ae:cd:1e:1f:4c:
12:80:7d:ce:34:e2:04:25:fa:33:2b:81:ba:5f:8b:
42:6d:bf:40:b2:ea:6e:03:f1:8f:b0:b3:74:1b:15:
3b:48:f5:dc:97:40:1d:5b:bf:c1:28:96:68:08:d6:
19:b3:58:fa:42:c1:b7:52:7e:35:9f:6a:02:23:aa:
70:89:ea:3d:c3:ee:77:93:01:a4:ee:81:51:a8:2f:
75:cb:86:e3:ca:0a:1b:bb:f0:f4:1a:a9:07:0e:93:
9e:3c:67:99:0c:be:01:1e:f8:06:20:84:4b:e6:ae:
00:c3:cf:ae:16:dd:fc:87:53:36:15:f3:12:ad:4e:
65:30:d2:49:9e:42:d0:ab:cd:94:40:21:cd:09:f3:
8e:27:de:89:9c:cc:7e:d9:0a:46:4d:ea:d4:4b:08:
c5:18:48:01:0c:12:65:d5:65:fd:2f:2c:79:6a:a9:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A3:CB:7B:8D:4C:12:39:CD:52:C2:32:80:1D:BB:B7:1E:5F:33:5C
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/T6PLe41MEjnNUsIygB27tx5fM1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1::/48
Signature Algorithm: sha256WithRSAEncryption
1e:10:ad:35:98:6a:4b:b4:b2:bc:0b:4b:74:eb:76:6e:15:5f:
db:2e:31:1b:30:8f:bb:fb:1e:b7:d2:fd:bd:58:a9:2b:4e:f0:
a5:cd:68:17:a9:eb:20:f3:af:1b:ac:5e:8a:d2:96:27:00:9c:
a2:d6:d5:33:12:62:b9:82:63:b2:39:f3:41:1f:fb:40:ba:af:
21:ce:9a:99:29:06:a1:4d:93:15:02:84:3a:3f:74:41:40:3b:
d1:b9:a9:b3:74:c6:18:e6:32:39:3c:65:dd:a7:99:33:95:29:
d3:4c:ab:bd:58:e2:f2:9c:60:c7:74:18:4b:f4:bd:91:1a:d7:
15:f9:37:1d:16:4f:1a:02:8c:a1:6b:da:54:97:6e:1b:0f:7d:
31:2a:16:bd:c5:1c:a3:e4:d2:91:d8:34:6a:2e:98:6b:e7:f7:
d9:6f:b1:a3:9a:20:82:55:4c:a1:4b:9a:42:aa:02:41:e2:c3:
64:c8:15:59:5b:00:f1:dd:32:f5:b1:34:ab:50:b8:7b:a9:f2:
92:4b:f6:79:7c:66:e2:ac:b8:40:3b:61:df:59:8f:e6:cf:b6:
13:50:8e:63:3d:32:f6:66:0f:d1:67:5e:4b:09:7e:42:1b:d1:
4c:ae:be:26:e3:1f:bf:15:b7:4e:76:18:92:e7:d4:bd:b7:b4:
e2:af:4f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org