Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X943Wbni5NOCNhmoXQi3V0KodZE.roa
File: X943Wbni5NOCNhmoXQi3V0KodZE.roa (raw, json)
Hash identifier: F8pwRKINTAuTU6lzWhrNIFZEgJNxVn0e9Ft+jc6+mfg=
Subject key identifier: 5F:DE:37:59:B9:E2:E4:D3:82:36:19:A8:5D:08:B7:57:42:A8:75:91
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01896DFBD04488561A7B19F18383C025CC28
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X943Wbni5NOCNhmoXQi3V0KodZE.roa
Signing time: Wed 19 Jul 2023 11:49:26 +0000
ROA not before: Wed 19 Jul 2023 11:49:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48300
IP address blocks: 2a12:bec0:400::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6d:fb:d0:44:88:56:1a:7b:19:f1:83:83:c0:25:cc:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 19 11:49:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fde3759b9e2e4d3823619a85d08b75742a87591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:74:74:e6:94:68:01:81:1c:44:81:f5:f6:
cd:cf:dd:aa:21:49:9e:de:cc:48:74:e1:87:46:d3:
d4:8a:d3:0a:d6:7c:8a:76:91:08:e3:5b:89:5f:c9:
a8:cf:17:3a:9d:de:8e:e4:f3:85:0f:c8:dc:b4:b0:
3e:f3:f2:d1:52:d2:cd:2a:61:e3:bc:f2:da:0e:11:
f6:c7:14:45:b7:1e:54:dd:f3:6d:48:38:1f:d6:51:
af:3a:d9:f5:cc:bd:22:60:55:5b:cb:d2:30:c7:10:
a2:78:cc:24:e9:27:38:ca:12:32:16:43:45:7a:25:
86:cc:30:35:b8:cf:c0:0d:df:7f:1e:39:30:3f:49:
41:1c:9c:1e:ae:bc:82:6c:33:82:f4:01:7a:43:1f:
0d:bc:7b:8b:5a:73:bd:f8:3a:35:8a:4b:f1:5b:58:
ad:72:83:1f:75:0f:12:b3:24:64:94:7e:da:0e:dd:
3e:a9:1e:a9:f2:28:09:85:35:a6:ae:44:a8:cb:90:
2f:85:c1:ef:66:4d:9e:8a:eb:10:a5:61:4c:e9:a7:
32:f6:a6:b6:95:ba:a0:8b:30:0d:ce:a0:b3:78:e7:
9e:71:4a:5c:2a:2c:be:63:ab:f2:07:8c:ab:6d:89:
ef:4a:24:af:b9:90:18:00:d6:c0:37:63:62:49:1a:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DE:37:59:B9:E2:E4:D3:82:36:19:A8:5D:08:B7:57:42:A8:75:91
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/X943Wbni5NOCNhmoXQi3V0KodZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:400::/44
Signature Algorithm: sha256WithRSAEncryption
af:16:5f:ca:c6:14:03:5c:f6:00:17:08:13:d1:2d:71:fb:94:
5c:f7:f4:bc:0b:c9:cf:57:2a:15:49:11:06:36:e2:74:ac:75:
8a:fa:3c:41:45:e2:09:f3:98:83:b3:43:0b:32:b4:6c:6c:76:
65:bd:20:1c:8f:19:0f:1c:cc:c5:56:16:76:41:17:74:cd:51:
44:bc:86:98:1b:a8:63:fc:cf:5a:57:9b:cd:83:35:98:e6:78:
77:1c:d2:d0:eb:9f:cc:5f:45:b7:76:04:1e:af:2e:15:26:1b:
f7:5c:08:4a:a6:45:d2:41:4b:af:a6:15:98:6f:8c:1a:74:2c:
a4:28:d3:b1:7c:5a:cc:25:e0:00:cc:98:e2:d1:fd:8d:bb:ef:
27:1e:39:c1:9b:04:d0:db:97:83:00:6f:0f:54:26:a6:e9:af:
c0:74:6b:51:db:51:46:90:62:95:75:0a:26:83:df:78:ae:85:
03:30:07:4b:9a:3c:96:ca:17:2d:c4:e8:e1:99:e7:23:8c:c2:
36:9e:da:4e:29:c2:78:99:40:ae:ac:88:1d:1d:43:02:3c:8a:
de:c7:2f:63:da:c0:c9:04:f4:0a:a9:1d:fc:72:81:2d:86:65:
cc:fc:b3:48:85:56:a0:cc:83:ab:5b:94:42:9b:f5:9f:3d:79:
a1:be:dd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org