Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/l6H3pmIRvcZ3j_7o6Zxj-i5trOY.roa
File: l6H3pmIRvcZ3j_7o6Zxj-i5trOY.roa (raw, json)
Hash identifier: Lfct3ZY6sizPTYI+ip2c+FHNxh2LcB2iERhgmHxfCU0=
Subject key identifier: 97:A1:F7:A6:62:11:BD:C6:77:8F:FE:E8:E9:9C:63:FA:2E:6D:AC:E6
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018ABC74ABA27B720CF3D2B945669DDA30F4
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/l6H3pmIRvcZ3j_7o6Zxj-i5trOY.roa
Signing time: Fri 22 Sep 2023 10:34:37 +0000
ROA not before: Fri 22 Sep 2023 10:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216270
IP address blocks: 2a12:bec0:460::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:bc:74:ab:a2:7b:72:0c:f3:d2:b9:45:66:9d:da:30:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 22 10:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a1f7a66211bdc6778ffee8e99c63fa2e6dace6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:19:03:86:ba:5b:b2:7a:c8:e0:e7:c0:b3:fb:
63:ba:02:ab:45:ef:40:4e:ee:20:59:41:f1:90:90:
5f:46:ea:cf:f9:94:bc:99:ca:70:17:b4:a9:72:30:
5c:da:75:30:09:ee:ff:a1:b9:49:d6:19:7f:42:0d:
1e:1e:8c:60:ee:97:cb:a5:4f:75:10:c2:d3:69:5c:
8b:06:7f:06:a0:88:22:c2:ea:72:41:30:c3:cd:25:
dd:af:01:1f:26:85:d1:64:2b:e6:95:e4:8f:80:a3:
7f:55:3e:a0:96:1b:f8:de:81:5c:54:b1:bc:67:b0:
55:cf:69:5c:b6:e7:2b:ff:a9:ec:f4:33:0e:84:b7:
97:fa:be:ce:e9:5c:0a:6c:89:19:9e:7b:ea:59:f6:
49:ad:b0:53:5c:fa:71:3e:ac:34:22:af:b4:e4:55:
8f:50:ad:d8:24:5a:1a:6b:80:ad:4d:c6:3f:ba:fb:
39:0b:e7:71:b7:c3:84:b1:a6:38:94:e9:dc:93:fe:
c9:ed:c4:93:54:a6:6c:42:7a:67:7e:17:e2:d3:c4:
4e:63:e6:17:e5:f7:71:1c:88:03:b9:18:a3:7a:34:
96:07:b6:d7:88:89:35:60:98:33:6a:2a:20:6b:26:
05:37:66:55:48:18:6a:56:49:78:2c:58:58:7e:07:
af:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A1:F7:A6:62:11:BD:C6:77:8F:FE:E8:E9:9C:63:FA:2E:6D:AC:E6
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/l6H3pmIRvcZ3j_7o6Zxj-i5trOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:460::/44
Signature Algorithm: sha256WithRSAEncryption
10:ae:3d:e2:8b:68:ec:ca:57:69:cc:3d:0f:e6:8d:0b:2d:2c:
3e:73:8d:b5:20:2d:2a:5e:40:d5:91:0c:de:11:12:d8:53:91:
e4:e8:ae:99:1c:07:a8:0c:04:c9:33:b6:77:f8:a4:5b:f9:c0:
4b:f2:28:a1:96:1d:1d:90:de:c7:8b:e5:97:39:b2:16:a6:3c:
01:e5:04:50:a9:28:f6:a7:02:b5:4a:34:a0:e0:b2:cf:5e:28:
d7:8d:f8:f7:91:2e:23:40:7d:b6:94:7e:90:e9:58:e0:b2:46:
2f:6f:17:32:8a:4a:72:0d:80:3f:84:cf:31:9d:3b:41:c4:97:
fc:a6:c5:0c:1a:1c:8f:28:53:84:85:09:0e:96:04:48:39:b7:
28:93:cc:46:b0:2f:21:54:94:76:19:90:b8:70:4e:d9:82:93:
40:e8:a1:1d:fb:7f:25:67:fb:58:ab:2f:54:10:de:6c:2e:46:
e1:fb:a4:56:7a:28:98:69:40:22:1f:60:03:a4:6b:6a:b9:c2:
7a:f5:e8:60:1d:6d:c5:9c:23:c2:a3:aa:bb:4c:8f:93:31:65:
9c:8d:73:4f:67:be:dc:13:3c:f4:aa:3f:ed:c8:8b:d1:e2:bc:
72:fb:2f:60:dc:e0:3c:7e:ee:78:74:b0:8d:bc:fe:c0:3b:25:
20:5f:ca:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org