Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f7FqT4G-PvGt_pXcInGZp64Tlto.roa
File: f7FqT4G-PvGt_pXcInGZp64Tlto.roa (raw, json)
Hash identifier: 2/HdfFzRwQFYEpQMxoICc1UKSyQnmDcYI+WVAxCC5CA=
Subject key identifier: 7F:B1:6A:4F:81:BE:3E:F1:AD:FE:95:DC:22:71:99:A7:AE:13:96:DA
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018C62E41E195DDF14B078A8E14CC98F55EA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f7FqT4G-PvGt_pXcInGZp64Tlto.roa
Signing time: Wed 13 Dec 2023 11:16:06 +0000
ROA not before: Wed 13 Dec 2023 11:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2a12:bec0:5df::/48 maxlen: 48
2a12:bec0:230::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:e4:1e:19:5d:df:14:b0:78:a8:e1:4c:c9:8f:55:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 13 11:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fb16a4f81be3ef1adfe95dc227199a7ae1396da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3d:38:9d:99:b0:d5:fa:85:91:4b:b6:f9:97:
ba:78:a8:ec:1b:66:5e:a6:42:58:13:19:f4:85:f0:
e3:e2:76:a3:cf:ca:ce:54:25:89:5e:27:df:df:26:
47:24:49:21:dd:d5:64:4f:22:53:0b:0c:51:9f:50:
cb:d1:5b:4a:21:56:ee:42:6d:c8:82:4c:f7:dd:11:
81:c5:1c:69:8a:64:f3:36:b7:6d:6e:79:d8:e9:d7:
f4:bd:44:33:b0:4f:5b:d1:ee:56:d1:63:ed:d1:03:
65:04:5c:20:2d:83:31:a6:1c:73:60:1c:98:e8:da:
2d:03:b9:eb:38:5f:54:10:bd:c6:3d:d8:8d:4e:7e:
00:89:8e:95:f1:56:bb:ab:66:1c:f8:45:04:6b:e5:
34:28:92:1d:3d:e9:78:de:8c:33:09:c0:4a:ea:f2:
58:ec:8b:1f:aa:c0:0d:16:5c:60:19:0d:d6:d7:39:
fd:00:5a:d3:94:7d:8d:cd:36:b4:16:a8:3d:2e:99:
27:c2:9d:87:76:6c:45:d7:42:20:c2:1f:f7:b4:6d:
f6:fd:48:66:09:59:4b:7e:aa:0c:d0:bf:08:06:ec:
12:e1:7c:30:bd:7e:aa:86:e4:fd:ca:e0:56:06:9a:
b6:44:ac:aa:2f:33:0d:9b:b9:4c:ba:87:ae:77:a2:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:6A:4F:81:BE:3E:F1:AD:FE:95:DC:22:71:99:A7:AE:13:96:DA
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f7FqT4G-PvGt_pXcInGZp64Tlto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:230::/44
2a12:bec0:5df::/48
Signature Algorithm: sha256WithRSAEncryption
39:29:7c:c7:ab:5a:fa:d2:23:cd:54:f4:8a:bd:90:4d:cb:7e:
b4:9c:79:b3:89:d1:66:66:8e:a6:c1:23:5b:1f:b4:e6:a6:3e:
55:47:95:28:e1:9e:a7:c0:a0:3e:96:76:37:e2:43:20:6c:a1:
1d:95:c6:4d:ef:27:25:c5:6d:45:07:07:3b:3c:4c:de:90:ff:
46:73:2c:93:af:87:d9:13:ec:c1:94:16:87:53:fe:4f:ae:86:
2f:bc:71:2b:30:1a:70:6b:fb:38:4c:ed:f7:02:fd:25:b9:0d:
67:e0:6b:a8:0b:94:9a:d0:83:fd:c9:8d:ae:14:9e:d4:26:a8:
30:79:7f:2e:2a:29:bc:43:2f:3b:1b:47:90:4e:81:0e:9e:7c:
d3:06:2e:cd:8b:c3:fb:03:05:ba:4d:d3:52:c3:1a:2b:bc:14:
15:8f:47:22:92:68:65:8f:5f:19:5c:94:f5:08:d8:10:99:ed:
dc:68:78:8f:9f:9b:7b:fa:ba:e7:69:d9:0d:7d:e8:b2:e3:b2:
d5:dc:46:62:9d:d8:0d:34:4d:12:e3:31:12:79:a3:56:bd:ab:
24:a4:68:8b:fa:56:41:65:08:42:a6:e1:43:b7:03:e4:a6:e0:
6f:ad:c6:d1:31:8d:1d:00:14:9e:ab:82:ef:31:07:7e:39:43:
c6:ab:86:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org