Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pmcT3ohgXmDSpMXXSVnD_jB9mvU.roa
File: pmcT3ohgXmDSpMXXSVnD_jB9mvU.roa (raw, json)
Hash identifier: 1zo2UZ2KEox+hFF1TtTx1EfifU5PMIoUnIWmkN3joXE=
Subject key identifier: A6:67:13:DE:88:60:5E:60:D2:A4:C5:D7:49:59:C3:FE:30:7D:9A:F5
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018794AF7F94C8545C1A5A8FA691EA1E4974
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pmcT3ohgXmDSpMXXSVnD_jB9mvU.roa
Signing time: Tue 18 Apr 2023 14:05:41 +0000
ROA not before: Tue 18 Apr 2023 14:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56655
IP address blocks: 2a12:bec0:2ce::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 22:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:af:7f:94:c8:54:5c:1a:5a:8f:a6:91:ea:1e:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 18 14:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a66713de88605e60d2a4c5d74959c3fe307d9af5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:04:9a:af:19:60:b4:c5:dd:1a:b8:2a:2d:1a:
cf:5d:b8:04:95:1c:f6:2b:e2:7a:88:ab:85:57:47:
9b:5c:2b:57:25:a3:d2:f1:16:3e:db:11:42:3f:a9:
7b:ac:4e:30:27:43:a0:4b:50:e5:b2:12:4d:00:d8:
5b:29:66:d2:1b:ee:e7:a1:58:5d:7a:a5:e2:4a:0f:
df:ca:d9:9b:d9:96:e0:8f:5e:07:b8:42:17:d3:e0:
1d:95:bb:55:07:f1:fa:7e:19:fb:f3:0a:2a:82:b3:
08:4b:f2:77:13:36:67:7a:b5:6d:b2:a4:8d:30:94:
b0:15:07:17:ed:f8:e9:f6:fc:cc:c4:9c:97:4c:95:
25:e1:f9:c6:d1:24:c9:b1:93:ea:b2:59:b6:d1:ed:
d1:ac:b6:71:d7:5c:d7:4f:7d:6b:46:3b:d5:47:4d:
e8:21:19:35:9f:15:9e:46:8c:39:d6:c3:88:d2:d6:
f9:82:cc:cc:f1:7d:bf:6f:09:f4:61:7d:2b:10:7d:
36:fa:24:8d:a4:0a:46:cb:f3:b0:fa:73:06:d8:c5:
df:6a:8d:03:fb:2b:fd:26:73:61:cb:9e:cc:ec:91:
46:29:6b:a2:0d:e0:69:24:de:ce:bc:bd:5d:31:ee:
6c:a7:d0:4e:91:43:36:60:74:4b:61:df:de:37:26:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:67:13:DE:88:60:5E:60:D2:A4:C5:D7:49:59:C3:FE:30:7D:9A:F5
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/pmcT3ohgXmDSpMXXSVnD_jB9mvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2ce::/48
Signature Algorithm: sha256WithRSAEncryption
2f:45:fa:8d:ff:6e:47:c9:78:58:27:18:bc:ea:88:10:70:70:
61:c2:b9:d5:b4:c6:63:fb:69:ee:31:fe:eb:31:24:a9:49:08:
1b:15:be:28:a7:71:c3:ff:6b:6a:06:25:84:a8:b9:89:51:2c:
4d:74:fd:ea:62:59:03:63:ea:25:e4:57:7c:51:0c:6a:69:18:
a8:8a:00:17:e5:9c:3a:f0:73:0c:3f:8d:1b:b2:24:db:70:b3:
91:05:1e:1e:e7:4c:64:f7:3d:ca:0c:99:3e:d2:d1:c1:30:32:
a9:af:ab:ab:e4:4c:b2:e4:75:78:67:4d:63:d8:46:cf:34:66:
42:08:24:fd:fb:2d:dc:89:e3:43:fc:56:f5:ac:a9:c5:69:a2:
aa:f6:1d:d8:f2:fc:ac:e5:4a:d5:54:28:b3:0d:35:ed:b6:38:
08:52:5d:d0:89:3a:7e:5c:52:30:2f:6f:80:9e:e5:3d:3f:4a:
7e:e5:ce:3b:02:5a:4e:aa:6c:85:52:13:84:17:59:f3:9c:99:
aa:0d:58:aa:9e:dc:38:73:1b:24:15:11:72:d1:90:62:b5:05:
a9:a3:9f:4d:8b:bf:96:a7:58:f7:52:19:34:12:76:68:0e:13:
74:ab:0d:a0:a9:92:e9:a4:c8:c7:1d:a8:01:76:69:67:d7:0a:
60:b2:f0:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org