Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f92IzdeFL-wDJqZOlxTrF3u8F0E.roa
File: f92IzdeFL-wDJqZOlxTrF3u8F0E.roa (raw, json)
Hash identifier: QJesbl1vkOTG/LOQyRCoWpTlvoATKx2bTTArffHYsLQ=
Subject key identifier: 7F:DD:88:CD:D7:85:2F:EC:03:26:A6:4E:97:14:EB:17:7B:BC:17:41
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186A69CEBF427B1D8CB6052DD350D9D23C0
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f92IzdeFL-wDJqZOlxTrF3u8F0E.roa
Signing time: Fri 03 Mar 2023 08:35:47 +0000
ROA not before: Fri 03 Mar 2023 08:35:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199671
IP address blocks: 2a12:bec0:190::/44 maxlen: 44
Validation: Failed, certificate revoked on Fri 03 Mar 2023 22:52:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:9c:eb:f4:27:b1:d8:cb:60:52:dd:35:0d:9d:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 3 08:35:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fdd88cdd7852fec0326a64e9714eb177bbc1741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:db:58:44:5b:a6:35:63:7b:1c:7c:83:5c:
d3:03:78:3b:50:b2:81:79:6d:92:af:71:92:c0:3b:
20:40:ed:c2:c2:c5:2c:f0:7a:a2:b6:cf:30:fa:2e:
ac:a4:8d:e6:67:96:cd:25:d0:39:c1:73:09:6e:61:
a7:31:df:07:ed:21:cd:ee:11:f1:ab:83:d0:a5:ba:
d4:e1:b2:c4:f8:7d:a1:4a:83:1b:65:18:cb:fa:8e:
9d:93:f2:48:bb:05:53:2e:62:e1:c1:04:bd:cf:0b:
8d:b1:d5:bd:1c:a4:ec:12:a6:7c:23:98:0e:db:34:
3b:d9:5f:b4:5f:d1:4e:a2:d6:d2:ea:7c:ca:4a:09:
3a:1d:22:b8:41:9b:e1:1b:38:b8:cb:07:fb:6a:2c:
50:6f:21:64:d5:08:62:7f:6b:5c:53:45:49:77:45:
e3:0e:1d:f6:8f:33:28:52:fb:48:05:c1:13:2c:9c:
96:f3:95:d2:18:29:a4:6a:bf:54:3a:09:8c:82:29:
d6:0c:bc:fd:ba:da:97:f7:f0:03:40:4d:20:4f:51:
01:a6:5d:c9:86:3a:3f:e9:55:88:f1:21:e9:3a:36:
e3:59:e1:95:22:c4:cf:e1:f0:49:4b:34:bc:b5:64:
12:92:56:55:22:c8:5d:e3:1c:94:e1:9a:7a:96:a5:
f7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DD:88:CD:D7:85:2F:EC:03:26:A6:4E:97:14:EB:17:7B:BC:17:41
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/f92IzdeFL-wDJqZOlxTrF3u8F0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:190::/44
Signature Algorithm: sha256WithRSAEncryption
08:47:c6:00:4b:1d:ce:49:e4:89:70:54:61:5c:ae:58:2b:7f:
53:0e:ce:5d:75:bd:c3:c4:21:59:ae:3e:82:2b:0d:ce:33:58:
09:45:18:46:20:c4:15:dd:ef:47:f5:67:9b:cd:2e:79:1a:f7:
6e:f7:1b:23:0d:b7:19:3e:fa:cb:01:67:cd:68:22:97:6a:4a:
a5:4c:d3:d5:bc:1d:7f:98:1c:e0:d8:d4:1b:d3:28:15:1c:a5:
79:bf:b6:0c:71:27:d0:f0:64:54:4c:3a:23:01:8c:c0:59:44:
86:b2:2d:fe:14:a2:94:11:86:85:e7:ed:22:87:db:50:b6:b2:
8b:2d:c5:fd:05:3a:11:92:34:17:92:07:79:85:46:0b:cc:ba:
07:2d:8e:6b:e1:f0:07:33:fd:1b:70:3a:1d:3c:dc:9b:1e:29:
bd:19:af:b2:c2:85:93:22:55:dc:da:10:b8:a4:04:5f:d3:9b:
e1:71:6f:47:71:e4:37:24:2e:c3:44:44:05:11:65:ce:e4:fc:
21:a7:e3:02:ba:81:12:71:75:da:9b:65:29:56:29:e5:88:93:
de:a6:d9:93:91:d2:62:fa:5e:df:d2:20:f8:10:57:7a:17:bf:
46:36:a9:6f:18:81:54:4b:40:cc:e7:b1:c9:f8:bc:64:5b:cb:
8f:25:ba:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org