Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eY-PYKWL2mBqDmWy0mkyxiSxSUc.roa
File: eY-PYKWL2mBqDmWy0mkyxiSxSUc.roa (raw, json)
Hash identifier: CcgekIRRW5K1VIP1YKmPwD6DyNOu2vS8Rk+j1bRxAvA=
Subject key identifier: 79:8F:8F:60:A5:8B:DA:60:6A:0E:65:B2:D2:69:32:C6:24:B1:49:47
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A118B3DDF7AD2A99AC26F0A7E1A45
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eY-PYKWL2mBqDmWy0mkyxiSxSUc.roa
Signing time: Mon 01 Jan 2024 18:29:52 +0000
ROA not before: Mon 01 Jan 2024 18:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216253
IP address blocks: 2a12:bec0:480::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 29 Mar 2024 18:58:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:11:8b:3d:df:7a:d2:a9:9a:c2:6f:0a:7e:1a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=798f8f60a58bda606a0e65b2d26932c624b14947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ba:b6:fe:82:2a:97:9b:61:79:a3:af:57:4a:
d5:30:d7:f9:d6:5b:f4:85:73:7c:fa:b6:39:61:92:
28:6b:50:fb:d0:9d:51:16:f0:6f:3c:f5:21:75:18:
42:a1:61:22:ee:8c:32:53:c7:34:c0:35:d9:61:56:
c6:82:b6:20:9d:d9:53:80:5b:4f:11:ea:90:73:2f:
0f:01:ad:a0:95:b2:e2:16:ea:60:7b:cb:e6:36:fb:
a4:03:b3:30:4a:53:06:32:d5:3c:4f:07:e2:8e:1e:
1b:3d:cd:52:98:28:5b:d3:30:38:ea:77:6a:9b:71:
10:3c:51:86:15:b6:34:0d:af:0f:c2:11:48:c7:c9:
b8:fe:5b:08:0b:e6:c8:3a:c1:6a:c0:76:61:fa:69:
b6:e7:9d:65:dd:00:6b:95:fb:99:6c:b9:0a:05:58:
80:d8:fb:2a:10:30:ce:05:b2:e3:ce:79:31:b1:bd:
45:2b:d3:8b:b2:dd:db:f9:96:b9:25:dd:cb:06:62:
b4:53:19:46:6b:e4:a6:21:ca:13:85:2f:93:77:49:
4c:40:14:ba:02:0e:a8:82:59:87:c8:09:d5:9e:03:
92:93:96:ac:a1:4c:87:a8:39:8d:6c:14:81:b7:6b:
9c:93:27:c8:05:85:ab:42:68:d9:7a:27:7a:d0:47:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8F:8F:60:A5:8B:DA:60:6A:0E:65:B2:D2:69:32:C6:24:B1:49:47
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/eY-PYKWL2mBqDmWy0mkyxiSxSUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:480::/44
Signature Algorithm: sha256WithRSAEncryption
a3:99:60:67:e5:a3:a9:fe:15:89:ed:cc:78:49:98:69:4a:d1:
6a:0e:6a:a0:a1:c1:08:42:48:e2:10:4d:7d:33:41:7d:da:c3:
99:6a:56:07:70:e2:0b:2a:84:cf:43:9b:de:87:a3:98:dd:3b:
d9:56:7e:85:ea:50:1f:f0:c3:98:85:b1:25:51:53:79:e2:9c:
b0:af:49:b4:1b:42:0f:21:e1:48:71:c0:2c:96:0f:19:4e:90:
b0:1b:51:07:ec:fe:32:18:60:17:6e:73:5f:84:06:37:12:f2:
31:72:84:99:1f:00:dc:99:e1:08:54:d2:be:96:df:b5:88:ff:
cc:4e:04:39:86:6a:98:0e:26:88:ef:73:86:9c:d9:d2:72:77:
48:b8:a6:9c:f6:5f:3c:8f:33:26:60:37:69:bd:e0:b7:55:3f:
d7:7d:2f:8c:47:71:13:90:2f:9b:19:32:35:ba:21:d0:a8:7f:
4b:dd:9d:5a:c9:73:46:ff:53:33:9f:d6:77:ac:6a:c8:77:85:
86:7d:a2:ec:20:66:75:9d:a4:53:29:8c:b8:3c:0b:33:c9:51:
71:ad:c0:23:cc:20:a1:53:bd:e8:91:e3:24:fa:30:54:5e:01:
76:16:0a:f9:8f:b7:22:cc:bb:88:c5:22:9a:eb:1c:1d:b8:a5:
39:72:9e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org