Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/nvCYhZ_Khf_F4vGUrDvWuG-U1C4.roa
File: nvCYhZ_Khf_F4vGUrDvWuG-U1C4.roa (raw, json)
Hash identifier: sU/L0Wupw0timDwgFu0Eol9uuqG+QY0g6DwvPoOf7N4=
Subject key identifier: 9E:F0:98:85:9F:CA:85:FF:C5:E2:F1:94:AC:3B:D6:B8:6F:94:D4:2E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01870AE1D456669EAC245F6AB4807502182E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/nvCYhZ_Khf_F4vGUrDvWuG-U1C4.roa
Signing time: Wed 22 Mar 2023 19:53:04 +0000
ROA not before: Wed 22 Mar 2023 19:53:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2a12:bec0:230::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Dec 2023 11:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:e1:d4:56:66:9e:ac:24:5f:6a:b4:80:75:02:18:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 22 19:53:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ef098859fca85ffc5e2f194ac3bd6b86f94d42e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:e2:3e:12:43:17:64:5d:30:36:57:4b:b8:
03:e8:0a:de:7b:53:90:88:3d:36:53:b8:78:64:16:
11:b1:79:9e:5d:68:46:79:6a:ea:24:28:a7:4f:2f:
c9:0b:e0:0d:98:e1:5c:bc:2d:6c:33:9f:3d:fa:2d:
5f:a3:b1:ed:9d:4b:f0:d0:4a:2e:82:fb:0d:a7:ee:
83:9e:9b:0f:41:6f:96:c8:a3:9a:20:4f:c1:65:de:
e8:70:0f:3a:3a:26:79:bd:dd:b2:57:e5:41:2d:9d:
83:9a:37:d3:3f:7a:4d:4f:27:8c:b2:9a:a5:5d:7b:
c3:5d:47:d3:14:e2:f4:d6:c3:c3:6c:0d:ae:90:a8:
a7:eb:70:f5:43:01:83:5f:9e:d3:83:51:ba:36:49:
72:16:bd:11:d6:7f:d9:0a:1d:15:dc:63:61:17:b6:
d2:a2:1d:96:63:67:ea:db:0b:ab:be:7e:17:5e:91:
17:d8:94:ef:11:71:fa:d8:d7:48:ed:2f:aa:70:99:
2b:dd:b2:e8:10:55:d7:bf:8f:22:d6:08:a8:f4:da:
97:17:98:2a:e6:79:48:a9:03:24:c1:da:e1:1e:52:
1e:2d:8e:5c:1d:d2:3a:a3:aa:31:bc:6d:22:7e:6e:
b3:62:ff:c9:e9:3a:dd:92:01:6f:c3:72:46:af:62:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F0:98:85:9F:CA:85:FF:C5:E2:F1:94:AC:3B:D6:B8:6F:94:D4:2E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/nvCYhZ_Khf_F4vGUrDvWuG-U1C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:230::/44
Signature Algorithm: sha256WithRSAEncryption
38:88:03:7c:00:18:90:ea:9c:ec:f2:b0:8c:93:83:54:06:82:
87:99:67:d3:8f:ac:1b:80:bb:02:59:92:5a:64:16:ed:07:dc:
af:39:e4:4f:5f:4e:86:c5:b8:95:48:ee:6c:64:a8:a5:5d:7b:
dc:9b:e8:d9:6b:66:a7:1d:81:50:70:cd:6f:af:fb:49:cb:f6:
f3:ef:7f:d3:13:5e:2a:d3:c9:06:47:a6:51:2d:2b:a1:d1:df:
ee:d0:9b:e2:f0:6a:1a:dd:81:3b:03:86:04:e0:e7:6c:33:e2:
c1:70:a8:09:f7:f6:d3:c9:9e:dc:71:10:23:69:99:32:6c:8f:
bf:c3:3e:50:21:74:a9:ae:7c:61:ef:6c:fd:08:dc:9f:30:68:
18:eb:9b:2b:51:df:4d:00:f0:ab:4c:b3:b2:81:75:0b:6a:3b:
b0:3f:c6:22:12:fd:2d:5f:61:96:7d:d0:cc:38:48:37:29:fd:
a8:1e:c7:41:2c:6d:18:cc:b5:1e:48:9b:16:40:44:2d:3d:0d:
26:3d:25:f9:b8:31:4d:c3:a3:e3:47:b2:40:b8:bc:dc:ac:fc:
fd:dc:a2:eb:c9:48:8b:75:8e:33:90:dc:cf:ee:88:5f:23:4f:
3b:ff:95:38:00:7d:34:db:85:61:ad:96:6d:3e:1d:88:96:16:
d5:e6:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org