Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eQ71723q2x5go0wJmpklbrVGBRE.roa
File: eQ71723q2x5go0wJmpklbrVGBRE.roa (raw, json)
Hash identifier: SXhR98/2Ys5Qk7l8CxfZDFvsC9N/gd7W1M/QLuryLK0=
Subject key identifier: 79:0E:F5:EF:6D:EA:DB:1E:60:A3:4C:09:9A:99:25:6E:B5:46:05:11
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC649FDE4FE3E392CB9C119A796088A63
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eQ71723q2x5go0wJmpklbrVGBRE.roa
Signing time: Mon 01 Jan 2024 18:29:47 +0000
ROA not before: Mon 01 Jan 2024 18:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197860
IP address blocks: 2a12:bec0:390::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Feb 2024 14:37:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fd:e4:fe:3e:39:2c:b9:c1:19:a7:96:08:8a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=790ef5ef6deadb1e60a34c099a99256eb5460511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:87:f4:2a:02:7a:ac:13:eb:54:5f:64:30:af:
7f:e6:b9:eb:27:f4:40:ac:b2:30:10:02:b4:a0:59:
f3:21:3f:a8:8d:25:be:f2:05:c0:b4:4c:9b:2c:4e:
91:7e:53:58:0e:d7:e6:90:15:0f:cc:a6:b5:4d:a1:
5a:99:ce:8b:33:64:c6:7b:8c:a4:8d:4f:0d:e5:1c:
96:6e:1c:78:fc:54:df:3e:4d:72:65:6c:b2:2f:8e:
2e:3b:dc:72:5b:48:d2:46:d1:59:17:44:98:a6:da:
ed:9b:42:88:75:19:90:5b:36:57:4f:89:27:cb:cf:
2d:77:ec:6a:40:ea:7c:a4:35:b2:36:60:c4:4e:1d:
6d:76:c3:a5:37:c4:39:25:71:5a:e9:d2:31:75:23:
ea:cb:51:f6:9f:1a:42:64:82:77:94:16:d0:13:99:
98:86:c5:b8:18:ba:ed:0d:af:d3:16:ea:af:32:c1:
56:44:36:a3:ad:0d:34:96:34:c9:98:9b:b7:39:ac:
a5:06:2a:68:e6:42:b7:38:67:87:88:31:1f:c3:32:
ba:3f:46:0d:50:f3:d4:da:11:f2:1e:a5:3d:2e:f7:
da:e5:03:79:33:38:31:c4:72:6e:bc:7b:d3:20:af:
39:0c:43:14:ce:3d:12:de:b1:48:fc:3e:d3:3c:cf:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0E:F5:EF:6D:EA:DB:1E:60:A3:4C:09:9A:99:25:6E:B5:46:05:11
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eQ71723q2x5go0wJmpklbrVGBRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:390::/44
Signature Algorithm: sha256WithRSAEncryption
23:b4:58:d8:99:f9:c6:61:b3:da:c9:aa:68:65:94:87:f1:42:
f5:b9:35:6b:0a:bb:0b:83:1c:74:7b:c7:53:0c:b5:e4:12:95:
88:bf:18:97:05:53:1a:20:31:2f:50:53:50:62:e9:c5:5e:56:
bf:f7:cc:e3:2e:de:e2:e7:ba:2d:24:04:93:cf:19:74:8f:c6:
aa:54:07:7e:59:f2:5c:89:e6:76:c9:66:2d:74:b6:78:d6:db:
3a:e6:41:df:a4:62:53:7c:fd:59:23:7e:ae:ce:15:32:d8:7a:
7a:40:3a:27:44:e1:e0:0c:0e:8c:ff:36:16:f2:dc:39:b8:29:
d5:95:40:4c:95:13:2b:2d:5d:de:9a:fe:ec:26:7a:95:ea:16:
39:ac:d4:46:08:fb:30:06:55:2a:23:57:6a:bb:0b:79:39:84:
93:ca:05:f0:3b:80:49:85:76:df:ab:4f:27:03:c2:51:74:55:
f1:19:42:d0:25:e2:00:f4:85:db:84:36:f2:c4:8b:90:5d:5c:
e8:ef:98:ef:79:74:7f:1a:e5:bb:ea:53:dc:ce:87:26:29:cd:
71:91:88:44:25:1e:1b:a1:fc:c5:74:1a:6c:7b:3a:85:e6:e9:
ff:b0:93:86:c1:29:28:71:51:24:ed:32:fc:58:bd:c9:33:77:
24:91:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org