Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lB5q6CgCrD5Q7iK4_cAZL9SwQq8.roa
File: lB5q6CgCrD5Q7iK4_cAZL9SwQq8.roa (raw, json)
Hash identifier: hh/uuKzdo/Y6hppveNQksJaJq0tt69Y7n0B9zhA9hT4=
Subject key identifier: 94:1E:6A:E8:28:02:AC:3E:50:EE:22:B8:FD:C0:19:2F:D4:B0:42:AF
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018E7BA2B72A047B9AD546F1FADECAD2E375
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lB5q6CgCrD5Q7iK4_cAZL9SwQq8.roa
Signing time: Tue 26 Mar 2024 16:40:45 +0000
ROA not before: Tue 26 Mar 2024 16:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215225
IP address blocks: 2a12:bec4:1120::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 15:16:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:a2:b7:2a:04:7b:9a:d5:46:f1:fa:de:ca:d2:e3:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 26 16:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=941e6ae82802ac3e50ee22b8fdc0192fd4b042af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:66:cd:33:e1:07:01:f3:1d:6c:5c:f7:0b:6e:
0d:29:c0:bb:72:1b:1b:36:c3:2c:16:1d:1b:62:04:
9a:cd:b1:0b:34:1a:e7:f2:78:7b:be:da:dc:6b:36:
86:2c:a5:33:43:28:cf:b5:4f:55:56:f5:12:2c:ff:
25:80:d5:d9:9f:6d:c0:dd:ad:5e:f7:2b:d1:7d:14:
ca:70:b2:cf:6e:a3:25:25:d2:e5:3d:51:18:59:38:
2a:19:10:16:ee:6d:11:3b:34:ea:48:89:1e:0b:b2:
e4:20:f1:7f:ac:b5:b8:93:d3:65:1d:28:8b:32:1b:
4e:85:b8:19:3f:3a:af:72:67:c8:fa:86:94:39:f5:
3d:a7:56:2d:95:35:77:72:da:fc:a8:e0:e6:a4:08:
fb:50:40:49:48:07:5a:95:ec:62:20:21:93:aa:c3:
ba:bd:61:3c:5d:c1:e7:66:3c:2e:10:a7:2c:8a:23:
68:ca:a6:8f:8a:be:0a:4d:e3:4d:fc:3c:fa:83:9f:
0d:31:4e:3b:9f:31:22:bb:9f:21:87:0a:16:a6:77:
59:bc:bb:aa:86:9b:f9:cd:0e:a9:a2:7c:ec:a4:87:
6d:13:ad:00:57:ac:83:90:8b:02:d2:6e:2c:f2:fc:
b0:82:ee:ae:99:08:90:95:4b:f0:2a:e9:3c:db:09:
70:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1E:6A:E8:28:02:AC:3E:50:EE:22:B8:FD:C0:19:2F:D4:B0:42:AF
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/lB5q6CgCrD5Q7iK4_cAZL9SwQq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1120::/48
Signature Algorithm: sha256WithRSAEncryption
14:54:62:14:1e:67:ad:99:64:20:d9:54:8d:ba:6f:8d:4f:99:
e1:50:d4:0c:e8:f3:32:5b:7a:e7:d5:08:b8:f0:c7:8c:0d:46:
1d:d2:fe:66:e7:67:0e:65:24:51:50:df:04:b3:21:27:54:24:
dd:36:6e:ae:b5:65:45:07:04:1e:b0:23:e6:4b:ce:dc:ad:46:
8b:e1:00:a8:12:8a:8a:64:cf:7e:ce:1e:97:5b:90:b2:59:2f:
86:d0:48:e4:4b:59:2e:2b:40:99:e5:9c:11:64:0d:b3:21:72:
15:15:47:3c:e0:35:64:db:72:50:ab:f9:bb:a0:47:f0:fd:42:
40:2e:92:df:03:1b:d1:6a:f9:13:70:4a:65:f5:4e:02:a9:d2:
6e:6c:df:7e:71:b6:89:ce:80:58:dc:30:7e:af:0c:d5:40:3e:
01:dd:09:72:a7:66:24:43:71:08:ad:dd:ce:3c:81:46:a5:ca:
66:db:f0:1d:ce:6a:c3:9a:a5:60:db:4f:17:56:cb:a7:cf:83:
25:8b:72:e8:77:9f:21:aa:ec:43:0b:14:1e:ed:8c:01:04:78:
b4:fa:d8:65:bd:e4:31:16:27:b5:26:38:4f:fa:ee:2c:5e:ae:
59:6d:33:a4:1f:ec:ff:30:8e:72:0b:75:66:3e:4e:5b:16:9f:
f7:50:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org