Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cyCv6MJmeknPKRCMxr3boeq38WY.roa
File: cyCv6MJmeknPKRCMxr3boeq38WY.roa (raw, json)
Hash identifier: VTxO6Mx+hf1QPdV3gobGlx3x7vIyR3ITood38ul0r2Y=
Subject key identifier: 73:20:AF:E8:C2:66:7A:49:CF:29:10:8C:C6:BD:DB:A1:EA:B7:F1:66
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018C7BD6D623847A44FE77479AA49DD67026
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cyCv6MJmeknPKRCMxr3boeq38WY.roa
Signing time: Mon 18 Dec 2023 07:32:06 +0000
ROA not before: Mon 18 Dec 2023 07:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215842
IP address blocks: 2a12:bec0:5d0::/47 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7b:d6:d6:23:84:7a:44:fe:77:47:9a:a4:9d:d6:70:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 18 07:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7320afe8c2667a49cf29108cc6bddba1eab7f166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d9:2a:f4:91:da:14:b8:e4:dc:9f:e4:f5:a1:
46:85:b8:86:00:52:c4:f8:e6:fa:54:f0:38:09:38:
7c:34:74:96:b2:7b:c2:dd:ef:d4:ef:9c:b1:a8:10:
3e:7b:e8:e6:55:3a:f5:eb:08:9b:c8:d7:e8:a7:3e:
da:40:8c:75:30:78:92:b4:54:9b:89:d5:e3:b5:98:
9f:5b:2c:ed:c2:be:a3:cd:ca:07:13:b0:9a:46:a4:
4e:c4:8c:35:9d:17:21:a2:0d:4e:fb:3f:33:5c:00:
5c:13:42:2d:62:75:15:ae:b4:1e:a7:3e:59:30:77:
55:b0:85:1a:8a:55:c6:db:97:1f:67:33:93:af:aa:
6f:a5:ba:ee:66:d8:97:c5:82:5b:88:b1:64:61:0f:
69:9a:4b:d7:5f:b1:cd:9b:cd:a9:44:04:83:ab:f9:
d0:d2:2c:41:65:06:e7:8e:30:9b:f5:41:dd:f6:3c:
c9:1d:6e:6f:c1:2e:59:3e:30:a4:1b:20:68:0f:09:
50:ab:40:53:d9:ba:2e:ac:cb:30:62:bb:d4:ce:56:
8b:d9:46:c9:02:6b:f6:e3:e8:14:cb:a2:c3:73:79:
28:b5:85:77:e9:52:35:36:34:fc:e4:c8:90:5d:0e:
c7:e5:ba:73:08:bb:1c:6f:7e:45:ab:9e:33:bd:04:
e0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:AF:E8:C2:66:7A:49:CF:29:10:8C:C6:BD:DB:A1:EA:B7:F1:66
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/cyCv6MJmeknPKRCMxr3boeq38WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:5d0::/47
Signature Algorithm: sha256WithRSAEncryption
38:5b:0a:38:e3:9a:a7:ce:29:fe:2f:e2:4c:b3:0e:32:cd:fa:
55:5b:99:ee:a9:15:5f:33:dc:b1:28:d7:df:38:55:76:7a:96:
90:d8:0f:09:a9:c6:91:bb:dd:d1:58:92:05:3d:9c:4f:b4:32:
f3:61:a8:42:e6:a2:52:8e:cb:cd:25:ce:a9:e7:a6:e5:55:66:
27:84:6e:ea:8d:40:a8:0b:1a:c0:09:d3:21:72:67:f1:f2:b7:
c9:3c:14:f1:07:5a:d2:7d:72:f9:91:5f:3b:f9:65:9c:67:f5:
5e:da:cf:94:31:2b:ef:df:8e:2c:c1:57:fa:c7:72:02:49:18:
ae:5c:64:da:4c:0d:d4:07:71:d0:c9:46:43:d8:cb:8c:68:74:
49:8e:36:f5:be:c5:0f:67:1c:6c:d0:1c:96:9f:31:be:c8:1e:
75:f7:d9:b9:d8:60:2d:9f:d8:75:56:22:e8:d3:f0:ac:b5:7d:
ea:60:a8:df:76:b2:9c:68:23:6b:ab:6a:f7:1f:e6:46:1b:c7:
5b:99:14:5d:ce:78:c4:b3:6c:4c:8e:e3:24:2f:43:23:b9:50:
88:91:3f:78:c5:c5:18:eb:7d:d5:3f:f0:9f:81:12:c7:91:be:
44:52:6a:00:37:d4:f1:11:c1:e4:3a:98:ef:88:92:7c:f8:a6:
a9:da:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org