Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kkH2Up3b039PGFo6bwCc9DAacks.roa
File: kkH2Up3b039PGFo6bwCc9DAacks.roa (raw, json)
Hash identifier: WQxqd+tKUwxtD+OP5gblnoAtneXgOJSKZ6vFH5rURf8=
Subject key identifier: 92:41:F6:52:9D:DB:D3:7F:4F:18:5A:3A:6F:00:9C:F4:30:1A:72:4B
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018A9E30C1E383EEF64D5EACEB4AB29FD0A4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kkH2Up3b039PGFo6bwCc9DAacks.roa
Signing time: Sat 16 Sep 2023 13:31:50 +0000
ROA not before: Sat 16 Sep 2023 13:31:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216327
IP address blocks: 2a12:bec0:450::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9e:30:c1:e3:83:ee:f6:4d:5e:ac:eb:4a:b2:9f:d0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 16 13:31:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9241f6529ddbd37f4f185a3a6f009cf4301a724b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:59:17:05:31:5a:7b:22:6d:a3:03:9f:b1:ea:
d2:e9:5d:9e:0a:50:f4:0a:6e:43:0f:8a:57:f6:88:
d2:d9:6b:31:ac:2e:ab:20:fe:b6:ec:c5:e9:c7:c3:
20:6e:95:9f:48:1b:c3:2d:71:9c:15:39:22:1d:4a:
35:de:d9:de:11:fd:64:8a:90:f0:2b:98:a4:49:f6:
54:70:3f:01:f5:c1:ac:2e:ec:c5:4f:f8:44:ad:ca:
29:df:50:35:33:f6:ff:c1:33:7b:8e:aa:47:7c:64:
0a:7c:62:78:49:c6:5b:cb:34:2b:6a:ec:87:da:ee:
ae:6a:65:12:e1:d2:d0:06:2e:20:47:41:fd:fb:55:
52:68:59:93:1f:57:35:f8:75:a2:42:1d:2f:ae:db:
c7:1b:32:b0:f0:e4:38:94:b7:ee:1d:ef:e8:5c:fe:
d7:c7:e3:d6:e0:68:93:07:80:d9:f5:0c:54:4a:d7:
5d:95:63:65:34:b1:49:17:39:67:26:eb:77:9b:fd:
44:60:2b:7c:ff:0a:05:6d:64:99:fe:8f:a6:e4:9d:
b8:2e:89:f0:3d:a2:f7:a9:66:94:4b:d3:2b:2f:bc:
ca:78:80:19:f8:ba:5d:bd:bf:ca:6f:07:0d:d2:b1:
bc:95:f9:49:f8:50:4b:96:a3:60:27:59:6d:dc:bd:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:41:F6:52:9D:DB:D3:7F:4F:18:5A:3A:6F:00:9C:F4:30:1A:72:4B
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/kkH2Up3b039PGFo6bwCc9DAacks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:450::/44
Signature Algorithm: sha256WithRSAEncryption
1d:fa:5a:46:d2:62:f5:7e:f1:a9:e9:25:66:a0:f8:47:c9:08:
f4:29:28:99:49:57:29:c4:3e:fc:6e:2d:6e:ef:2a:6c:08:91:
dd:16:72:25:67:91:c8:27:53:fe:97:d8:8e:e7:ad:15:f5:64:
82:46:52:39:f4:5c:27:a7:c0:85:df:f9:7f:88:cc:6f:82:d5:
e3:1c:3f:91:bf:fa:92:80:99:d8:26:65:4d:30:83:4b:c6:41:
e6:c3:0c:56:4e:9d:82:ac:bf:90:42:82:ce:e0:e4:23:bb:b6:
1c:a9:78:bd:50:51:ab:db:bf:46:dc:99:05:54:e4:40:03:de:
a5:4a:01:8b:0d:91:74:8d:a0:68:62:21:ea:03:10:61:0f:39:
06:64:91:be:47:2a:9c:1b:f9:70:7f:1f:94:89:a6:f2:8a:75:
20:97:dd:29:2f:29:b6:94:71:99:c6:3f:aa:a9:13:e2:b6:eb:
85:8f:5b:f5:e1:7b:ab:2f:7f:2c:ef:a2:85:25:e1:53:21:89:
e4:b9:f3:2e:8e:49:33:a1:91:f4:20:78:21:18:74:77:61:d3:
61:79:63:ce:4f:2a:b6:b3:d6:3b:17:68:c9:e9:9b:ae:5e:15:
fe:b5:9d:1a:f0:ce:81:78:92:97:f1:56:cc:72:0c:f9:5a:e4:
9d:a6:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org