Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vQQ6bo9kBGrUtXPVKGOBxOoBEtc.roa
File: vQQ6bo9kBGrUtXPVKGOBxOoBEtc.roa (raw, json)
Hash identifier: dM1aiikn7swfr+pxHBynNmddbhwn7EOnRn1ve7CCOhE=
Subject key identifier: BD:04:3A:6E:8F:64:04:6A:D4:B5:73:D5:28:63:81:C4:EA:01:12:D7
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018AF59603FD966C4EE8E4132C8DC7209C67
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vQQ6bo9kBGrUtXPVKGOBxOoBEtc.roa
Signing time: Tue 03 Oct 2023 12:49:23 +0000
ROA not before: Tue 03 Oct 2023 12:49:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199765
IP address blocks: 2a12:bec0:540::/44 maxlen: 44
2a12:bec0:150::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f5:96:03:fd:96:6c:4e:e8:e4:13:2c:8d:c7:20:9c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 3 12:49:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd043a6e8f64046ad4b573d5286381c4ea0112d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:01:2a:67:36:b7:85:88:f9:0d:a3:02:71:
6e:9c:2a:f2:72:46:ec:98:59:0d:5c:39:a1:50:df:
c1:da:9d:bf:2c:40:87:5a:04:20:8b:ae:52:a2:18:
02:2c:10:a0:c7:60:ca:48:04:4d:46:59:ad:10:94:
37:4d:d9:da:88:1d:3d:2f:6d:05:e7:66:ba:57:eb:
59:a2:31:c8:51:10:e5:69:05:3c:0b:d9:1b:aa:6c:
09:23:98:5a:f3:c0:3c:c4:70:f3:1a:1d:75:28:ac:
5b:47:d5:fe:f2:e4:32:49:e4:21:2c:16:ca:88:16:
da:29:c1:87:8e:3a:6a:c9:e9:f0:02:d6:6b:a0:32:
f0:2d:de:e6:91:4e:3e:08:47:35:0f:d7:1d:81:1f:
db:2a:3f:53:9b:67:1a:73:09:04:c8:10:0c:47:8f:
e6:3d:cd:99:57:e2:43:8d:78:37:84:e8:7e:d2:6e:
73:be:13:39:18:c2:9c:c2:e6:52:5b:79:f8:72:b2:
76:39:22:c2:23:4e:f5:3c:9f:ca:37:07:9f:00:1e:
4c:a2:b4:e0:0a:5e:6b:c1:f0:f4:22:bd:1c:1f:67:
a5:03:38:a3:97:99:d1:7c:f3:6f:a0:98:a1:f3:7b:
2e:37:5d:c3:3e:df:e7:3f:c4:ec:62:b0:06:f2:8a:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:3A:6E:8F:64:04:6A:D4:B5:73:D5:28:63:81:C4:EA:01:12:D7
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vQQ6bo9kBGrUtXPVKGOBxOoBEtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:150::/44
2a12:bec0:540::/44
Signature Algorithm: sha256WithRSAEncryption
77:00:15:d8:1a:ea:b7:01:83:4e:6c:07:f5:17:7d:b6:0b:c6:
06:f5:0e:04:e6:fa:48:2c:f4:c6:d0:20:10:25:c1:61:f1:42:
1a:39:23:bf:34:1c:7b:d6:2b:de:aa:d3:9d:22:ca:3b:cc:9f:
da:08:33:ec:7d:8a:64:7f:27:85:d1:98:d5:12:52:70:30:0b:
e5:82:66:37:52:be:95:20:80:22:ca:af:18:f3:12:5c:72:35:
58:75:c5:76:8c:a5:bf:9c:fa:6f:fe:0f:8d:db:2f:ad:f3:b5:
cd:13:89:7a:e5:df:89:b7:4c:f4:41:da:2c:98:7d:bb:21:4a:
14:a6:a4:8b:b5:72:ba:3b:a8:91:e8:25:eb:74:41:ac:00:ed:
6c:96:cd:7c:84:9d:cb:8c:ad:93:2e:bb:90:d6:6a:80:7c:f9:
d7:fb:cf:a7:f6:8e:b6:cd:9c:e4:18:4a:07:0d:4a:2b:55:be:
77:87:8a:44:03:ff:97:99:71:9d:fa:3b:f0:92:72:36:c2:b2:
03:da:f4:7a:89:e9:19:d2:d1:49:af:9f:d2:82:e9:9d:29:c0:
5a:e2:5a:48:9e:15:2e:4a:04:e4:ec:88:2b:1e:24:3a:3f:96:
29:c6:5e:9c:39:50:6d:b7:09:c9:96:84:0a:75:0e:be:7b:36:
c7:f8:66:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org