Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wxUXy6BWgvjXNVPEaxQYC-ZhS04.roa
File: wxUXy6BWgvjXNVPEaxQYC-ZhS04.roa (raw, json)
Hash identifier: G+ILBDYiDRLOgQZB4Hv6bkbkDnX8EQldNm55AYWo+II=
Subject key identifier: C3:15:17:CB:A0:56:82:F8:D7:35:53:C4:6B:14:18:0B:E6:61:4B:4E
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019000E99AD5EF597B5F6C5DC967AE89B68C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wxUXy6BWgvjXNVPEaxQYC-ZhS04.roa
Signing time: Mon 10 Jun 2024 06:50:27 +0000
ROA not before: Mon 10 Jun 2024 06:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214891
IP address blocks: 2a12:bec4:1280::/44 maxlen: 44
Validation: Failed, certificate revoked on Sat 07 Sep 2024 19:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:e9:9a:d5:ef:59:7b:5f:6c:5d:c9:67:ae:89:b6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 10 06:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c31517cba05682f8d73553c46b14180be6614b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d0:27:50:aa:fd:1f:f5:9c:0c:ca:50:44:fd:
22:02:33:2b:5c:cd:9b:64:ac:27:12:77:47:8e:96:
09:55:22:d4:14:f9:89:db:04:bf:52:9c:ce:05:f6:
3e:de:4e:6c:5e:02:f0:d0:ae:31:35:dc:ed:75:0d:
93:c4:7a:13:bc:a0:2e:9d:5c:fc:75:49:74:ee:4a:
87:e7:08:be:dd:d1:4e:f6:39:c3:a2:fc:53:f2:7f:
c4:1a:4e:26:57:63:3e:92:a9:f3:26:3e:99:03:a4:
69:86:ff:ee:fd:78:3a:60:26:96:e1:d8:8a:8f:13:
46:30:f0:cc:50:d3:7a:dc:be:0c:19:60:b9:29:e4:
22:67:94:65:d5:20:8d:6b:89:b8:1b:76:e6:93:9d:
14:16:47:c3:a2:59:f6:dd:a2:a8:17:ef:e7:07:b4:
06:57:be:57:cc:08:e3:59:f4:6d:d5:6a:86:72:dd:
7b:a5:b3:95:c7:fc:80:a6:3d:d5:ee:8f:56:2b:ed:
cc:8f:70:77:76:6e:c9:80:ee:73:21:ca:ed:52:db:
dc:f1:9c:19:cb:bc:9c:ff:8a:6d:cb:d6:b5:51:f2:
e9:1d:6a:13:16:db:06:7b:6f:3c:69:f5:64:7a:0e:
7c:06:ff:65:0e:83:86:ad:70:67:59:0d:ec:2c:4d:
d2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:17:CB:A0:56:82:F8:D7:35:53:C4:6B:14:18:0B:E6:61:4B:4E
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/wxUXy6BWgvjXNVPEaxQYC-ZhS04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1280::/44
Signature Algorithm: sha256WithRSAEncryption
31:95:13:5f:b3:4b:3e:73:3c:da:84:da:5e:52:3b:d6:98:cc:
f0:54:26:c0:35:dc:28:22:83:86:6b:05:22:73:5b:96:fc:e4:
cd:16:6f:b5:d5:6c:ac:a8:40:7a:93:20:b2:f4:42:b2:4a:39:
39:9d:a8:62:87:9e:f5:c1:ff:f4:cc:62:7b:d2:7d:1b:50:16:
66:96:3f:21:9c:e5:c5:c9:e2:5a:0b:e0:27:18:51:e6:21:ec:
0d:f7:1b:3b:ed:27:6f:e2:18:5c:00:4e:dc:73:fa:68:a3:b6:
56:6c:0c:13:59:49:70:47:19:5b:ca:e6:73:5f:1a:42:db:06:
98:df:f1:27:f0:78:6b:c6:6a:38:be:4e:de:0c:9b:3c:c8:f7:
c0:82:82:06:b5:f7:2c:cd:ff:df:77:ac:d2:4e:f7:36:9b:3b:
1a:bd:16:d1:4c:2e:5e:18:54:51:ed:89:9b:14:8c:2a:75:1e:
a7:83:e0:ea:e3:5b:44:3a:18:5b:e2:55:65:d7:cb:04:12:cb:
16:de:19:ae:e4:bc:7a:79:87:9d:14:64:b1:91:82:7d:cf:39:
82:62:34:b1:b7:0b:3e:8c:35:71:e2:e3:1a:d9:80:e7:06:2c:
61:2c:29:70:4c:24:fb:21:fd:9a:e6:9b:6a:b2:ac:d3:36:dc:
52:6f:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:23:41 2024 by rpki-client on console-ams.rpki-client.org