Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/sDjtFu9zkrvKugtLM6mvR6JhZZg.roa
File: sDjtFu9zkrvKugtLM6mvR6JhZZg.roa (raw, json)
Hash identifier: nUozgYuxM3Ha/yFy2UCLwFeiU/fSbAP+O/J77u5DSFw=
Subject key identifier: B0:38:ED:16:EF:73:92:BB:CA:BA:0B:4B:33:A9:AF:47:A2:61:65:98
Certificate issuer: /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial: 018CE449742576BA57E6678F900097E697B2
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/sDjtFu9zkrvKugtLM6mvR6JhZZg.roa
Signing time: Sun 07 Jan 2024 14:17:48 +0000
ROA not before: Sun 07 Jan 2024 14:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202685
IP address blocks: 2a12:2640::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 07 Jan 2024 19:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e4:49:74:25:76:ba:57:e6:67:8f:90:00:97:e6:97:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Validity
Not Before: Jan 7 14:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b038ed16ef7392bbcaba0b4b33a9af47a2616598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1d:2f:68:5a:9f:9d:f5:ad:2e:20:a0:82:ea:
ba:94:a1:17:7c:b9:5b:d9:54:29:b5:45:0b:69:15:
48:b7:83:cb:6d:6a:ee:12:c1:eb:4e:13:da:9f:46:
75:8a:9d:af:2d:a8:2f:e5:90:4d:47:21:42:b1:c5:
0a:a8:49:f8:54:2c:bc:f2:88:ea:78:2d:a1:69:91:
80:bc:63:64:0f:12:8b:b3:ae:ce:a2:ca:0a:f2:8a:
59:7b:fe:03:4f:4b:b3:d3:3d:ea:ab:da:70:1b:1e:
03:76:08:33:f7:fb:90:c6:17:3a:e9:9e:de:21:11:
42:84:27:a6:c0:1a:78:de:cd:be:83:f6:e4:53:82:
47:b4:fb:0d:8e:5a:8a:9e:cd:5c:17:78:cf:f1:65:
7e:e0:0b:b5:02:ac:f3:d3:7e:5c:7e:f0:e1:63:24:
9a:6b:9a:82:6e:d8:e0:f4:44:4e:a3:f2:d9:e1:8b:
e0:70:0e:f4:5d:af:e7:d6:7b:49:ea:a3:29:a2:c4:
5e:1f:dd:14:70:56:86:0d:86:ee:da:8a:7d:49:96:
5f:d6:be:b7:8e:49:cc:ed:60:87:c6:7d:d5:09:29:
64:c2:63:c5:ed:fb:96:03:13:c3:66:bb:37:ed:ae:
aa:90:d0:4e:4e:21:19:27:e2:2d:2f:b7:70:ff:8e:
82:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:38:ED:16:EF:73:92:BB:CA:BA:0B:4B:33:A9:AF:47:A2:61:65:98
X509v3 Authority Key Identifier:
keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/sDjtFu9zkrvKugtLM6mvR6JhZZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:2640::/29
Signature Algorithm: sha256WithRSAEncryption
79:00:78:23:ea:bc:4e:b0:f1:a2:04:34:ad:23:1f:38:1c:92:
5c:61:3e:80:91:d8:77:c6:37:a7:37:e7:6d:28:ed:fc:8f:88:
de:3a:50:6f:19:e1:1d:c0:68:fd:cf:00:48:43:1f:16:a6:89:
bd:64:31:da:8e:00:bb:51:7b:5a:a3:19:e5:30:0e:bf:2b:14:
c9:e5:54:06:2c:e2:7c:f0:5d:ab:70:47:56:ff:7e:84:18:5d:
91:74:c3:21:0b:92:32:b3:b0:c9:41:be:c7:24:b1:e7:d6:b0:
5a:48:4e:f8:7d:24:2f:3a:4d:ee:84:c6:bc:1d:76:20:1a:4f:
53:0d:af:e2:0a:63:e4:67:2a:73:0b:0b:0f:4e:0e:9a:83:6f:
04:45:97:be:d5:1d:ca:e5:14:a0:44:c6:a3:56:ee:97:1e:13:
2d:87:7e:a0:55:55:7d:6d:ee:b2:a5:9c:c4:d5:15:16:17:4b:
ea:58:70:9c:10:fb:a8:12:f5:9c:3d:b3:c9:bd:a4:dc:70:4d:
c5:a4:01:1b:94:9f:4c:d6:4b:d0:97:e8:3f:90:5d:8d:84:50:
74:87:2f:41:d8:c1:b2:72:a1:1c:33:f7:bc:bb:7d:66:d9:54:
fe:2e:6f:35:a0:af:ab:fe:f1:3a:2f:9b:a6:9c:ea:a2:01:c4:
8e:20:c6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 7 21:53:17 2024 by rpki-client on console-fra.rpki-client.org