Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iNUyakVMb9TPtdumh8TqTW6HrBI.roa
File: iNUyakVMb9TPtdumh8TqTW6HrBI.roa (raw, json)
Hash identifier: +agzhe/tUyIGf9w4GWNTS0lNnKRkqmpq+xM4hWBMBnU=
Subject key identifier: 88:D5:32:6A:45:4C:6F:D4:CF:B5:DB:A6:87:C4:EA:4D:6E:87:AC:12
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01870DBFCE87ECD6821ADA23953CB66142BF
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iNUyakVMb9TPtdumh8TqTW6HrBI.roa
Signing time: Thu 23 Mar 2023 09:14:46 +0000
ROA not before: Thu 23 Mar 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199187
IP address blocks: 2a12:bec0:1c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:bf:ce:87:ec:d6:82:1a:da:23:95:3c:b6:61:42:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 23 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88d5326a454c6fd4cfb5dba687c4ea4d6e87ac12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0a:5b:78:c8:a8:78:e2:7e:ad:32:d7:d7:18:
26:cb:cc:8d:8d:b3:45:fd:50:a8:a5:d7:ef:a6:ca:
5f:f6:6c:7e:76:a5:ed:a2:f8:13:34:46:44:ff:6a:
5e:41:72:62:8d:79:aa:34:99:11:1f:dc:25:6c:5d:
f8:63:fe:4e:e1:db:85:b8:c9:c6:f3:ab:c9:f2:ff:
45:d2:46:32:3d:e5:2f:40:a2:e9:41:24:f5:a9:29:
47:c5:a3:99:e6:84:9f:61:36:df:af:07:ad:f7:55:
e4:75:6d:24:d6:79:95:b0:68:09:5f:09:e4:6e:67:
e9:41:b3:fb:54:d1:52:5b:d8:a1:58:90:39:93:eb:
ef:b4:8a:ff:46:c5:44:51:34:d8:ff:0d:c0:ec:05:
11:9d:cf:14:89:2f:49:fe:9d:26:e0:b1:7d:1b:11:
d4:96:db:c1:4f:48:f0:6d:85:fc:56:a5:dc:0e:d6:
4c:8e:60:59:89:8a:d2:7f:8d:0e:dd:70:c1:34:61:
10:63:12:f7:2b:f5:4e:61:19:69:59:01:4c:ba:1d:
7a:65:52:db:3e:34:93:ab:70:3a:dd:98:75:61:28:
ce:37:73:f2:10:70:4d:da:9c:49:fe:eb:54:e5:23:
23:87:8b:c2:33:0b:a3:58:76:21:76:66:d3:7e:59:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:32:6A:45:4C:6F:D4:CF:B5:DB:A6:87:C4:EA:4D:6E:87:AC:12
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iNUyakVMb9TPtdumh8TqTW6HrBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
b7:dd:69:1b:30:8a:5c:82:5a:81:89:f2:3f:56:b2:42:0a:43:
cc:97:0b:f5:49:ec:5e:6d:68:50:d7:76:2e:65:d8:21:08:11:
89:7d:e1:ab:5e:40:1d:49:72:c7:10:be:bb:44:23:03:9f:06:
52:83:8a:2c:0c:8d:ad:25:2f:a0:ea:a0:8d:d9:67:56:40:07:
fa:a1:22:d0:7b:ad:c7:8b:3a:df:6d:1c:02:f5:cc:a0:67:80:
d1:12:70:d3:c1:47:3f:fc:a3:7f:45:47:a8:68:bd:b8:31:fd:
f1:52:bd:04:9a:85:b1:15:02:ed:96:d8:76:de:e7:33:e0:b0:
59:12:bc:4a:a5:b8:ce:93:07:ef:56:de:f7:86:50:7e:92:a6:
4a:ac:ea:25:b5:b1:4c:c0:da:ad:26:56:bc:6e:a7:30:62:9c:
06:15:fe:75:af:7a:e8:54:8f:bb:e8:56:54:5c:e9:1b:fa:4b:
ae:d7:bf:d1:32:cf:86:eb:37:e9:86:59:95:21:a7:72:c2:11:
3b:73:0b:9f:73:96:4c:2d:e4:a1:a5:f4:ee:61:91:cf:6c:ce:
41:ac:50:de:72:33:a5:70:7d:d2:e4:11:92:b3:b5:7f:bf:d0:
96:ec:a8:bb:01:f0:0d:ea:31:85:c2:95:0f:50:2a:5e:c1:0f:
c9:d4:f7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org