Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Ttn71hj39xn1BNZAX1G_nNc7sYA.roa
File: Ttn71hj39xn1BNZAX1G_nNc7sYA.roa (raw, json)
Hash identifier: tjQBumE+Ucosb9c5Gxk/rMZLrqV15WBmlydK50YV9qc=
Subject key identifier: 4E:D9:FB:D6:18:F7:F7:19:F5:04:D6:40:5F:51:BF:9C:D7:3B:B1:80
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186A6C05C83ED39AB2147E1DA1F25182BEE
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Ttn71hj39xn1BNZAX1G_nNc7sYA.roa
Signing time: Fri 03 Mar 2023 09:14:29 +0000
ROA not before: Fri 03 Mar 2023 09:14:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199765
IP address blocks: 2a12:bec0:150::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Oct 2023 12:49:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:c0:5c:83:ed:39:ab:21:47:e1:da:1f:25:18:2b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 3 09:14:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ed9fbd618f7f719f504d6405f51bf9cd73bb180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ec:9d:d1:43:7f:53:fd:e5:92:9e:2f:fe:7c:
fc:04:1d:c9:3f:e2:f0:ec:b0:48:18:b8:f5:f9:da:
f5:78:f8:b3:e6:bf:6a:ea:24:2b:5e:5a:7f:7d:70:
a1:cd:02:1d:c6:fa:ec:9a:b2:94:1c:79:ac:b7:6e:
c9:44:0d:5f:89:d8:03:23:13:45:45:05:e3:1e:fc:
ee:a1:f5:d9:50:0f:b4:81:55:67:10:c6:34:8d:d2:
86:02:dc:a6:c8:84:18:58:b5:0e:0b:fd:43:fd:12:
84:56:9a:05:2b:71:5f:a8:a3:dc:c0:c8:48:84:00:
a4:a5:06:0e:5a:21:32:a8:f8:ed:06:3b:e7:5f:30:
89:e5:01:1c:d8:a4:63:79:3d:4c:c9:d1:e7:dc:3f:
5c:a9:e3:20:20:a6:71:97:cc:f6:f6:91:49:11:97:
3b:4c:a4:ee:4b:30:42:70:53:21:2c:ae:01:a3:b5:
94:04:c7:08:7f:b6:bd:4d:d6:cf:1c:b2:cc:f2:c3:
3e:84:08:22:1a:df:5c:b0:9b:34:72:2c:fa:7b:6c:
df:30:f9:ea:6f:c0:62:d8:73:79:7c:cb:89:70:6a:
78:90:f9:ea:59:74:b8:17:99:93:59:e7:c7:ad:f3:
cf:23:2a:3b:13:87:a8:40:b6:b8:91:9f:69:c9:36:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:FB:D6:18:F7:F7:19:F5:04:D6:40:5F:51:BF:9C:D7:3B:B1:80
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Ttn71hj39xn1BNZAX1G_nNc7sYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:150::/44
Signature Algorithm: sha256WithRSAEncryption
3e:c1:d4:7e:48:84:53:4d:30:35:42:e7:a4:3a:08:28:a0:4d:
40:97:d3:dd:6e:6d:99:52:08:fd:6f:df:0c:49:c8:13:07:f3:
8f:9f:00:43:e2:da:32:e8:c9:c2:f3:b7:c5:96:25:ea:d7:a4:
d8:bc:08:f3:dc:d6:0e:fb:e0:ff:2a:3e:a3:f7:8f:9c:a5:d1:
be:0b:e6:9f:0b:39:63:2a:5e:65:e2:ea:29:48:2d:35:9b:f1:
3b:59:22:92:f7:64:5d:27:bc:15:c9:e3:0d:94:bb:1d:92:2b:
46:7b:b2:94:7f:7f:4b:6d:4d:2a:58:ab:a2:e3:9a:aa:68:44:
80:98:33:2b:c0:26:d5:3a:0d:5f:a0:4a:9f:b9:fd:49:81:9e:
a1:4b:f3:49:49:cb:0e:07:0b:45:53:d6:0b:f5:e2:65:f8:bd:
ff:25:a4:7b:ae:5b:cd:eb:20:03:8f:6a:5c:ca:92:b0:99:4c:
e5:31:84:aa:95:1c:12:f9:5c:18:1e:f7:4b:80:1c:87:09:5b:
e4:68:28:04:0f:31:da:66:fc:89:6b:1e:00:80:25:d4:89:0d:
43:80:85:cc:30:0c:04:2b:60:da:54:dd:10:39:2c:77:86:c3:
b8:6e:a3:43:0c:e7:02:17:c4:da:cd:55:24:49:92:4e:e0:d1:
80:2c:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org