Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f33b5p6dy-h8wTOd0BuNDU5Nx-I.roa
File: f33b5p6dy-h8wTOd0BuNDU5Nx-I.roa (raw, json)
Hash identifier: wB6Dm9a60AkfR/4eaa2LZoIWe1qhes4Hg2N6NNOfu6U=
Subject key identifier: 7F:7D:DB:E6:9E:9D:CB:E8:7C:C1:33:9D:D0:1B:8D:0D:4E:4D:C7:E2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0190E9D4A28FF39D6EF6D6BF6FB7AF191532
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f33b5p6dy-h8wTOd0BuNDU5Nx-I.roa
Signing time: Thu 25 Jul 2024 12:19:04 +0000
ROA not before: Thu 25 Jul 2024 12:19:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215303
IP address blocks: 2a12:bec4:10f0::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 25 Jul 2024 14:57:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:e9:d4:a2:8f:f3:9d:6e:f6:d6:bf:6f:b7:af:19:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jul 25 12:19:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f7ddbe69e9dcbe87cc1339dd01b8d0d4e4dc7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:9f:ca:28:fb:46:3b:c6:11:3d:31:15:84:
a7:65:b9:f1:89:55:24:bb:20:91:25:3b:5f:6b:4c:
52:70:aa:89:f8:8d:b1:74:66:1b:c3:6e:dc:a8:74:
b9:e3:8f:95:fc:ea:f0:57:e7:79:74:e9:3d:14:c7:
47:8f:f6:32:43:1a:33:d5:9c:92:3c:a6:aa:3b:e2:
e6:63:4e:57:26:c5:d0:ea:4f:f2:cb:08:bb:3c:de:
6a:59:77:8f:32:0c:e3:d2:cc:ea:fb:27:f4:1b:b9:
1c:0c:d8:60:b2:a9:05:b9:b0:cc:5d:2a:ef:52:e8:
c3:90:fd:0d:86:27:fe:03:13:4c:e9:0d:de:97:2b:
99:cb:5e:5d:61:55:21:74:9d:5d:e4:21:83:18:94:
86:b3:34:55:b8:68:a6:f2:30:4c:fb:96:9c:00:ad:
e2:52:ac:71:b0:40:05:76:ca:d1:fc:43:9e:5f:56:
9d:d8:1a:e4:c2:f0:4e:70:23:69:6e:1f:77:d2:78:
ec:c8:ad:68:65:65:d9:b1:1e:96:61:e6:a9:b1:19:
76:19:12:b0:6a:07:ba:9f:b4:a8:ea:da:00:e7:fd:
a7:dd:a8:7d:32:69:23:6e:54:35:85:2c:9b:c6:fc:
e5:c0:ab:c4:86:01:d1:84:67:89:6a:e4:4d:ff:d5:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7D:DB:E6:9E:9D:CB:E8:7C:C1:33:9D:D0:1B:8D:0D:4E:4D:C7:E2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f33b5p6dy-h8wTOd0BuNDU5Nx-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:10f0::/44
Signature Algorithm: sha256WithRSAEncryption
b8:72:e1:04:d1:e3:2a:2f:f5:12:5b:1c:5b:7d:97:04:08:b4:
8e:2e:b0:42:e9:48:27:ac:06:df:27:39:37:cb:a9:09:2f:b3:
f5:fc:c6:af:e0:fb:ca:c9:67:16:b9:23:03:17:1c:75:fd:4f:
b0:f2:71:90:57:29:10:d6:98:eb:b8:70:0a:68:58:19:bf:4b:
ec:a0:2b:db:7b:a2:6c:34:8d:66:88:03:10:d9:18:71:e4:22:
65:10:a4:9f:a5:21:ad:f1:28:2c:14:8c:82:39:26:1c:7e:68:
b8:d2:7b:35:a0:9c:2d:e0:c8:f0:81:41:df:7c:41:6a:fa:19:
af:a8:14:45:a2:3c:0e:c3:65:ee:c9:71:cf:f5:51:0e:bc:a9:
bd:c9:62:5f:3f:7a:5c:89:33:c5:00:57:4d:15:98:9b:20:ac:
7e:17:3f:56:46:a2:2c:cf:b8:0b:54:b7:bb:c8:16:9c:6d:36:
5e:de:03:b3:4b:78:1e:07:a6:ec:6e:6d:19:77:52:bb:df:3d:
4b:3f:79:66:6b:8b:21:0e:86:3f:2e:46:17:10:e3:62:71:f1:
76:d4:67:5f:d4:02:50:ca:f4:6a:55:94:32:79:c1:d3:5e:d8:
42:6b:98:ba:e8:01:4f:e3:99:44:e9:7c:b2:3b:76:fe:bb:c8:
b8:72:e8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:51 2024 by rpki-client on console-ams.rpki-client.org