Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/o66YEj8UyQXfYPRuL_G___nhPyU.roa
File: o66YEj8UyQXfYPRuL_G___nhPyU.roa (raw, json)
Hash identifier: L/IeX45ymmmCNc+mwm5QpIVRvxX0zJ5xBvejl/aAHo4=
Subject key identifier: A3:AE:98:12:3F:14:C9:05:DF:60:F4:6E:2F:F1:BF:FF:F9:E1:3F:25
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01905AB0DCC0D6C8057F2B945133E40B4FD6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/o66YEj8UyQXfYPRuL_G___nhPyU.roa
Signing time: Thu 27 Jun 2024 17:14:18 +0000
ROA not before: Thu 27 Jun 2024 17:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141780
IP address blocks: 2a12:bec4:13c0::/44 maxlen: 44
Validation: Failed, certificate revoked on Sun 30 Jun 2024 09:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5a:b0:dc:c0:d6:c8:05:7f:2b:94:51:33:e4:0b:4f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 27 17:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3ae98123f14c905df60f46e2ff1bffff9e13f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:ab:4f:b4:d3:4f:2f:69:15:0a:c8:4d:a2:
55:86:77:76:12:3e:82:2b:62:06:d3:92:15:4a:be:
6a:27:0b:37:0f:cf:43:b6:a6:c2:6d:d5:9f:8c:b3:
3c:f1:8a:7a:69:a6:fe:19:57:3d:02:c7:19:95:05:
00:e4:7b:6c:73:40:e8:27:00:07:f1:78:b7:6c:55:
a0:97:1f:ce:a8:72:b0:d8:81:55:58:98:09:41:6d:
de:16:b6:84:6f:0d:38:14:99:f0:6d:56:78:b9:bd:
4e:e2:f2:55:da:81:70:56:c0:43:16:4a:34:5f:6f:
22:48:52:79:0b:63:6d:9c:34:fb:91:36:87:e9:e2:
4a:e9:1f:c9:b0:37:75:5d:2d:f6:be:06:43:34:54:
9d:fb:15:cc:ab:dd:a5:51:6f:96:96:a9:d0:e7:65:
4f:6d:e4:c1:3e:5f:76:e1:8c:c9:1e:a4:7a:90:e7:
59:5c:99:ac:29:a6:ca:ef:e9:28:92:83:9a:e6:78:
a6:c8:01:7a:a3:7a:7a:8a:35:bc:69:d8:d0:d7:53:
ed:89:a9:85:20:e2:86:9b:f0:20:95:2a:61:a2:fd:
45:e2:ac:d3:a2:ad:77:6e:c2:4e:86:f4:60:0b:1f:
27:88:17:62:98:9d:15:ee:50:eb:29:06:98:63:65:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AE:98:12:3F:14:C9:05:DF:60:F4:6E:2F:F1:BF:FF:F9:E1:3F:25
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/o66YEj8UyQXfYPRuL_G___nhPyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:13c0::/44
Signature Algorithm: sha256WithRSAEncryption
93:4a:84:33:70:85:e3:10:bf:5d:fc:d6:2f:d3:79:06:8f:b6:
7f:6c:a7:84:b5:a8:ee:0d:9a:7e:da:e5:f0:e9:57:fe:25:02:
f7:8f:9a:d8:8d:6e:90:c1:9f:dd:41:6e:b9:5c:fb:3a:30:a3:
99:7c:b9:78:b4:9e:14:a6:e4:ce:0f:1c:ed:86:d8:03:a9:a6:
50:45:d6:3a:97:7b:1e:0a:d8:ed:14:78:a7:ee:7b:4f:cb:38:
60:9b:4a:9b:53:b0:76:4a:4b:68:c4:e2:6e:42:ca:4c:62:6f:
0f:fe:64:c9:3b:48:f7:3a:bd:2f:c5:ce:32:59:d2:77:9b:a3:
a8:1a:dc:cb:11:e9:35:55:fb:31:48:4f:f6:a4:a7:b9:9c:65:
84:6c:87:5d:b4:6d:69:a1:65:cf:b4:b0:e7:ea:0b:bb:08:bd:
43:2f:82:5d:7b:12:99:75:14:c7:1a:98:6a:59:64:e5:b5:03:
55:61:df:c1:47:fc:6e:3c:42:57:49:bc:52:88:53:a4:5a:13:
e5:74:21:63:42:a8:98:58:17:36:b0:77:3a:4f:d9:cb:a2:b1:
36:f8:f7:e4:6c:ce:20:7a:a2:af:18:68:6a:55:8a:c2:ee:c0:
f3:88:55:62:f2:ce:e7:23:8a:b6:43:66:f8:e4:60:e1:05:f2:
96:90:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 11:43:45 2024 by rpki-client on console-ams.rpki-client.org