Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WcjJ9uV1rXW0kjXz28jWkVLofW8.roa
File: WcjJ9uV1rXW0kjXz28jWkVLofW8.roa (raw, json)
Hash identifier: dMw7XhFpHt7CDlUCZDZLV0KWMXeEks/65otJfhVQ5tw=
Subject key identifier: 59:C8:C9:F6:E5:75:AD:75:B4:92:35:F3:DB:C8:D6:91:52:E8:7D:6F
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0187095D5F755D5B5F27AB3E0DDCB1798B72
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WcjJ9uV1rXW0kjXz28jWkVLofW8.roa
Signing time: Wed 22 Mar 2023 12:48:46 +0000
ROA not before: Wed 22 Mar 2023 12:48:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 2a12:bec0:230::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 22 Mar 2023 19:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:5d:5f:75:5d:5b:5f:27:ab:3e:0d:dc:b1:79:8b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 22 12:48:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59c8c9f6e575ad75b49235f3dbc8d69152e87d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:55:80:12:73:a0:a7:1d:3f:bc:c1:97:34:69:
9b:cf:f0:be:02:24:f1:9d:8d:fa:a6:60:c9:ce:ec:
61:de:98:a1:8a:c4:36:98:09:b6:f3:4f:5e:70:59:
0c:32:22:49:7f:32:e7:6c:60:20:ba:26:eb:7e:28:
8a:16:17:b3:d0:ed:04:36:20:49:c2:3a:24:84:83:
81:0d:9e:1b:a8:25:94:b9:c9:96:3d:a9:38:93:4e:
c6:df:d9:c4:33:d1:65:c8:ce:58:c1:0c:c2:d1:e6:
6a:7d:65:67:12:22:c7:e1:cb:26:ce:9c:77:24:46:
0c:8c:98:72:ea:d8:c2:f1:1c:0c:7b:43:e0:a5:a2:
40:07:c7:1d:5f:1e:76:7f:c8:f7:82:cc:94:e1:18:
13:96:0a:8b:80:10:f5:0f:ad:61:6d:02:92:30:65:
d4:58:9e:77:47:b7:99:a0:66:a3:cd:fa:4d:3f:e5:
b6:a6:ed:c7:23:49:a1:16:85:7a:8f:6a:6e:82:8b:
b1:a8:8b:65:4c:dc:b4:2e:83:ae:52:98:d4:15:07:
fa:39:8c:fe:f3:77:86:cb:ee:10:13:0a:1f:a4:e5:
da:45:a3:4b:4e:a8:5d:f2:39:f8:2c:db:88:e8:3b:
c4:09:7c:9c:41:0a:44:5a:71:f4:ef:5f:68:94:b9:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C8:C9:F6:E5:75:AD:75:B4:92:35:F3:DB:C8:D6:91:52:E8:7D:6F
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WcjJ9uV1rXW0kjXz28jWkVLofW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:230::/44
Signature Algorithm: sha256WithRSAEncryption
40:9f:3b:dc:72:c4:ec:37:f0:b1:b5:2d:e4:6e:f1:32:c9:ef:
cc:53:bd:db:10:05:ff:d5:4a:bc:e5:9a:46:f7:f0:2a:a9:ae:
c4:fa:1e:ce:b9:14:c4:e7:ac:dd:dc:66:61:45:d9:c6:bd:b0:
e9:2d:3c:8a:29:f1:6e:3e:a2:c6:e6:9f:15:7d:f7:ee:61:40:
29:ea:ac:4f:db:a2:d7:6c:88:95:36:df:2c:9a:ba:da:b6:77:
13:0c:d3:d9:70:04:54:92:60:80:7d:32:99:b8:08:ac:16:eb:
ff:16:03:cd:34:d2:98:9a:e3:d8:71:da:24:d2:e2:33:61:e2:
5c:bc:34:38:03:bb:65:8f:8f:d4:da:5a:56:cf:d2:d8:09:a1:
8d:8a:a4:3e:71:f4:14:78:ed:91:ec:01:17:78:e5:28:b1:75:
88:64:9a:ad:38:ad:4a:70:3c:df:10:1a:3f:ed:b5:32:45:a6:
a8:65:d4:20:b8:87:db:60:b1:af:73:a2:6b:3a:ac:07:5a:80:
ce:4e:1f:4a:0d:bf:52:71:e7:e3:80:1e:0c:e2:b6:7c:a3:06:
68:93:73:4d:fd:1e:0d:46:43:68:ae:67:9a:12:01:bc:ea:d3:
00:ac:e1:6e:8f:9b:81:20:1d:99:59:fc:e3:a7:6b:a8:4c:4b:
12:63:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org