Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aaiy8rVlPkfzllydKb6sb-kF00s.roa
File: aaiy8rVlPkfzllydKb6sb-kF00s.roa (raw, json)
Hash identifier: QDGvf2bc5HM7nQBomAq2+vsqsrsdy/WRK5l0K7/yyaQ=
Subject key identifier: 69:A8:B2:F2:B5:65:3E:47:F3:96:5C:9D:29:BE:AC:6F:E9:05:D3:4B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A0E5EC1642C88E7B86ABD3DCDC370
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aaiy8rVlPkfzllydKb6sb-kF00s.roa
Signing time: Mon 01 Jan 2024 18:29:51 +0000
ROA not before: Mon 01 Jan 2024 18:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215842
IP address blocks: 2a12:bec0:5d0::/47 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Jan 2024 03:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:0e:5e:c1:64:2c:88:e7:b8:6a:bd:3d:cd:c3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69a8b2f2b5653e47f3965c9d29beac6fe905d34b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:97:d0:bd:d9:f7:28:9f:c9:20:21:e9:b1:02:
d5:1e:fd:97:cc:eb:da:a3:38:fe:89:10:cf:89:66:
cf:93:67:ed:6d:e3:50:61:e8:c7:cf:13:d5:ea:af:
32:89:b1:c7:4e:c9:2e:15:9b:86:49:28:98:2f:e8:
b9:8c:7d:b0:a2:de:62:f3:46:ca:e2:45:7a:cc:51:
5b:04:fa:5f:16:95:fc:d8:45:9b:0e:03:70:f8:b9:
7e:b9:1f:75:ae:cf:01:46:14:52:56:70:4a:5e:14:
f0:67:9c:a8:28:e7:82:1f:7b:06:bf:5e:f7:27:85:
f8:90:04:cc:8c:3e:9e:78:d5:6a:47:8a:03:58:b0:
50:de:01:77:b0:41:d6:71:98:16:fe:4e:d7:58:0f:
d5:9b:80:8a:94:cc:77:91:a8:5a:26:79:16:3d:f2:
11:5a:15:c1:4a:d8:f1:fa:9c:52:c6:1a:34:1a:53:
b6:3f:04:f0:0a:c5:40:af:7e:5c:a7:f4:98:d1:e5:
b6:43:3e:ab:d0:27:d3:bc:66:8b:cf:a3:a5:b1:da:
df:47:65:58:45:d9:8e:55:5b:41:5c:97:37:55:f2:
70:ef:93:90:fc:29:42:57:cf:c6:9c:80:71:9d:b3:
b6:6c:83:1e:c9:25:2e:d7:28:49:5d:b2:cc:56:57:
f2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A8:B2:F2:B5:65:3E:47:F3:96:5C:9D:29:BE:AC:6F:E9:05:D3:4B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/aaiy8rVlPkfzllydKb6sb-kF00s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:5d0::/47
Signature Algorithm: sha256WithRSAEncryption
bb:b5:3b:79:fc:fc:6c:db:f1:38:02:b4:7e:c8:87:76:05:3f:
2d:3f:e9:d0:55:6c:8f:b9:ec:b3:1c:05:b6:c8:e2:95:6b:4d:
d3:ab:ce:0e:61:0f:f2:5a:f3:13:21:de:41:76:c9:61:2e:35:
1c:33:32:55:55:85:42:c0:41:a8:21:10:b5:76:0b:e0:fe:ad:
e1:be:17:1c:70:da:3d:e2:83:39:7c:71:7a:52:02:c6:ee:94:
c0:a1:77:a6:6a:e0:f4:3a:ca:68:af:53:bf:f8:0c:93:90:f3:
4b:b7:8d:ec:e0:bc:1a:69:9c:41:35:46:49:25:f2:69:49:c7:
06:9f:a8:a6:17:8a:ec:c6:68:7b:11:98:5b:ca:f2:85:88:72:
ac:e9:f4:fd:68:8a:74:9c:84:b4:a7:41:79:a0:8a:3d:08:82:
8c:99:61:8b:89:cb:48:8d:e9:40:2e:2b:b2:d6:f9:49:a7:ae:
03:64:3b:4a:ee:1c:94:5f:95:e3:a5:56:d5:a9:8c:cd:03:ef:
b2:7f:2c:0f:06:9b:1a:dd:df:e0:cd:bd:77:dc:e5:2c:9c:1e:
7f:b9:56:9f:c4:76:82:a1:d9:bb:80:8f:9d:ce:98:57:7f:33:
cd:f3:9f:7c:d2:87:c4:f4:db:ea:a1:7c:40:72:ba:25:28:8f:
87:71:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org