Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kd54ihwU42-A4_D51GhAreDAVmE.roa
File: kd54ihwU42-A4_D51GhAreDAVmE.roa (raw, json)
Hash identifier: P7DGKzHy7eQf2QZmwWDfi26RKPp9eP7zE1DpNJnTqmM=
Subject key identifier: 91:DE:78:8A:1C:14:E3:6F:80:E3:F0:F9:D4:68:40:AD:E0:C0:56:61
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0186A9ACD0A0D7323BC589B04696BDF185F3
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kd54ihwU42-A4_D51GhAreDAVmE.roa
Signing time: Fri 03 Mar 2023 22:52:00 +0000
ROA not before: Fri 03 Mar 2023 22:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199671
IP address blocks: 2a12:bec0:190::/44 maxlen: 44
2a12:bec0:190::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 Mar 2023 21:33:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a9:ac:d0:a0:d7:32:3b:c5:89:b0:46:96:bd:f1:85:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 3 22:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91de788a1c14e36f80e3f0f9d46840ade0c05661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d8:67:38:24:d8:d6:fd:72:b0:b0:92:d0:a2:
5f:1b:10:15:3b:f2:46:60:2a:d8:42:e0:d8:94:f0:
55:e3:5b:f8:1e:f6:6d:1e:25:e3:2c:ac:11:17:fc:
2a:1c:d1:4b:47:bc:68:55:d0:0f:85:4d:7d:4a:3f:
62:f9:3c:65:f6:b5:27:d4:98:01:26:d2:9b:f4:41:
11:1e:c8:0a:61:7a:dc:fb:e1:cf:63:ef:07:a0:2a:
9a:29:d4:19:4b:e1:e6:62:fa:1e:68:41:52:16:2c:
d1:1a:eb:7c:a5:5c:1f:54:db:22:1b:4c:60:39:4f:
e5:39:ef:6f:b9:80:f4:88:41:ec:bd:5e:c7:e4:0e:
ca:61:74:47:aa:01:58:5c:24:f2:4b:a7:27:d9:8e:
2f:02:2c:83:ad:d3:06:d1:19:d0:22:ff:f9:a4:81:
d5:fb:77:a7:bb:ff:e9:b0:1a:95:66:7b:cf:fa:fc:
ae:53:c9:08:c8:c6:ba:7e:55:c4:f0:68:72:fd:c3:
98:e6:ca:77:86:9c:1d:78:a8:1b:53:ca:cd:86:34:
de:3c:32:b8:fa:b3:ab:67:5d:32:8e:eb:ef:a2:b6:
55:41:9d:f0:30:13:82:12:13:88:ae:f6:62:cd:93:
f2:ef:11:89:a3:84:eb:27:c6:c2:cd:a4:cb:cd:e2:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DE:78:8A:1C:14:E3:6F:80:E3:F0:F9:D4:68:40:AD:E0:C0:56:61
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kd54ihwU42-A4_D51GhAreDAVmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:190::/44
Signature Algorithm: sha256WithRSAEncryption
84:90:19:96:3f:28:76:82:0a:6b:7a:31:0b:9b:ca:78:09:5c:
97:5e:0a:4d:c5:99:d2:c2:a8:27:75:38:eb:56:65:d7:7a:46:
f9:c3:c7:2e:73:e5:1d:ed:40:59:c6:9b:8d:e9:81:b8:d1:e8:
7c:38:39:6d:5e:20:9d:74:78:18:80:09:5d:ae:5d:f9:45:b6:
77:5d:50:ac:1d:15:cf:dd:8f:6c:d5:5f:7c:a8:7c:54:40:f0:
f7:bc:61:0f:a7:bb:c2:b7:1c:14:cc:7f:13:66:fd:1d:7e:a5:
c2:fc:5f:8d:30:4c:dc:a2:84:e3:a8:8c:8d:69:bd:56:fb:8f:
93:19:22:9a:e2:84:25:db:d7:f8:77:ab:a5:01:67:c9:9e:34:
14:b7:c1:72:58:c3:a1:58:a5:6b:49:d7:48:2b:fd:dc:6d:41:
25:a7:94:81:69:37:80:55:d2:14:96:da:74:34:99:0c:34:fc:
92:87:8c:62:ca:aa:fe:4d:07:55:6b:00:4b:27:cc:19:79:b8:
a1:5a:f9:01:96:da:7f:27:9a:ce:c0:3e:d3:c7:cf:3a:bb:b0:
d0:9a:a1:5b:8a:d3:cf:0f:ce:20:9f:5f:23:9d:19:40:49:cc:
51:31:91:bc:4d:7f:58:54:25:bc:bf:88:06:e3:bc:d5:bd:54:
10:4e:38:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org