Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iSc2SPi6zzNtVZozHJneXPRa2UI.roa
File: iSc2SPi6zzNtVZozHJneXPRa2UI.roa (raw, json)
Hash identifier: 5HpZDZdY0DL27bewJPoRgMXpEiFhslvey41CgGTImBk=
Subject key identifier: 89:27:36:48:F8:BA:CF:33:6D:55:9A:33:1C:99:DE:5C:F4:5A:D9:42
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01884ED0C4D046E653D13B77E5DCD1F9CD63
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iSc2SPi6zzNtVZozHJneXPRa2UI.roa
Signing time: Wed 24 May 2023 17:31:24 +0000
ROA not before: Wed 24 May 2023 17:31:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52181
IP address blocks: 2a12:bec0:300::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:d0:c4:d0:46:e6:53:d1:3b:77:e5:dc:d1:f9:cd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: May 24 17:31:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89273648f8bacf336d559a331c99de5cf45ad942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:97:ae:07:29:59:f0:d9:e6:ab:76:04:f8:9b:
b8:0a:e6:da:ef:a1:d9:ce:04:45:e1:2f:aa:4b:a7:
d4:4e:2e:e7:b7:cf:06:68:b3:03:bf:cc:96:2b:5b:
a0:e3:64:6c:69:3e:bf:84:09:a8:f4:03:72:c6:d2:
88:35:9d:49:ba:cd:98:bf:8e:1b:72:75:af:a1:5a:
df:95:1d:0b:fc:1d:e9:bf:c7:ee:77:ee:7c:46:15:
9c:7b:c8:18:49:c0:23:db:af:3b:bf:a4:e9:5f:f0:
c5:03:3e:fa:f6:42:3c:67:a6:3d:96:0b:e9:f5:30:
ef:61:54:0c:3a:85:70:8b:c9:34:77:d8:55:55:e6:
8c:4d:5f:ca:86:d7:7d:36:25:f4:76:f0:3f:0c:2b:
a6:a6:8d:27:0a:f0:8b:33:53:73:d3:6a:8f:07:4e:
23:92:91:39:ed:c9:66:48:bd:8f:3b:ce:9a:0a:55:
97:82:70:b0:0d:9d:89:ed:32:c2:ef:88:0d:58:3d:
5f:d3:f4:fb:43:06:e1:e2:a4:4f:f5:93:0a:b0:ad:
af:22:ee:72:b5:32:38:89:f1:88:fb:b2:ae:78:fb:
d7:04:9e:be:76:32:16:bb:1f:23:1b:de:c0:23:17:
7a:1d:f0:1b:32:c1:12:75:fd:ec:e9:9a:bd:4f:4d:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:36:48:F8:BA:CF:33:6D:55:9A:33:1C:99:DE:5C:F4:5A:D9:42
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iSc2SPi6zzNtVZozHJneXPRa2UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:300::/44
Signature Algorithm: sha256WithRSAEncryption
a4:06:22:91:0b:5d:18:94:7a:94:d4:9d:51:07:02:b6:83:7a:
0e:ed:70:ca:fd:97:d6:37:b8:73:48:fb:5a:8f:90:6b:04:1d:
0f:00:60:e0:21:72:a3:02:71:74:3c:da:a9:b8:2d:89:23:e7:
21:05:e4:85:a5:d1:db:fe:e6:d6:37:be:49:e8:dc:72:15:2c:
08:3a:59:59:e3:8f:10:b1:9c:41:6c:15:9d:97:1b:cb:01:dc:
18:9c:d8:55:4c:b8:7e:26:d7:ef:d3:5e:23:51:8c:ff:42:45:
e7:fe:78:8c:26:81:9d:98:d0:0e:5c:e1:ec:8c:a1:4b:7b:5b:
33:d0:91:ef:7d:41:48:a1:17:42:6b:c0:9b:31:09:55:4a:77:
50:2b:c8:17:e7:8f:bd:6b:b3:ad:dd:56:20:c8:db:00:66:59:
9e:27:ba:4e:4a:52:2b:bb:bb:08:d6:89:84:51:22:68:51:b5:
4a:63:67:fc:ab:6c:51:5e:d1:89:d4:25:ed:3c:e0:ff:cb:1d:
ab:e1:6a:65:64:0f:ed:cd:5f:75:fd:f9:96:df:8b:e9:a2:51:
3c:43:27:c3:e0:ab:23:59:a2:b4:d0:af:ba:c8:a2:00:83:cd:
1e:b6:78:22:c9:4f:1f:9f:92:9d:2f:49:3d:c4:58:f1:9e:60:
2c:2b:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org