Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/v7sLL_zu6-LRK5n-KbiNb-YGqos.roa
File: v7sLL_zu6-LRK5n-KbiNb-YGqos.roa (raw, json)
Hash identifier: +Q95/fMrdiGXav99BDOWfE6wVveG5MdAI5sj6H8Fom4=
Subject key identifier: BF:BB:0B:2F:FC:EE:EB:E2:D1:2B:99:FE:29:B8:8D:6F:E6:06:AA:8B
Certificate issuer: /CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Certificate serial: 018CCA2A088ECECCD2EB8C38719382A35E11
Authority key identifier: 79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/v7sLL_zu6-LRK5n-KbiNb-YGqos.roa
Signing time: Tue 02 Jan 2024 12:33:21 +0000
ROA not before: Tue 02 Jan 2024 12:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53358
IP address blocks: 2a12:c044::/30 maxlen: 30
2a12:c040::/30 maxlen: 30
Validation: Failed, certificate revoked on Mon 18 Mar 2024 09:34:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:08:8e:ce:cc:d2:eb:8c:38:71:93:82:a3:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79a304ba34b61a15e3797ffd4d1ae8c218c1c7bf
Validity
Not Before: Jan 2 12:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfbb0b2ffceeebe2d12b99fe29b88d6fe606aa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7f:e1:ce:9f:34:59:03:bc:d8:b9:8d:21:e7:
71:5a:b0:e0:1b:6c:59:08:e1:eb:a3:4c:da:ea:2e:
ed:9d:fd:4d:7b:bc:68:ec:11:c2:24:fb:a4:dd:c4:
49:7b:34:93:d4:49:e9:81:89:4c:48:fd:28:ae:c7:
9c:8b:d2:0a:38:59:53:38:c0:06:65:b4:b6:0b:6c:
57:54:fe:56:1c:b0:c5:f1:74:8d:17:f4:a5:74:2f:
86:14:23:2f:71:c8:39:15:b9:10:c4:35:31:db:a2:
15:92:28:41:3f:55:1a:a7:fb:43:6d:ba:ec:65:2c:
50:62:6d:ed:ad:6a:e9:17:78:45:f8:36:4c:b2:5e:
0a:5b:0c:58:41:14:69:98:76:3a:75:b5:84:8f:db:
d9:9d:90:0d:bc:be:f2:de:c7:fb:27:68:11:30:fc:
22:06:bc:76:8c:3d:0c:f9:1c:e0:b5:89:68:96:0d:
5a:b9:42:4d:5d:c1:d5:40:36:76:34:46:89:42:84:
d3:cb:44:51:f3:64:7b:5c:cc:34:48:52:88:22:3d:
db:b5:25:69:0c:56:9b:de:65:64:f9:07:e3:f6:38:
40:e9:74:bb:12:83:2f:6e:1b:91:ee:8f:2d:32:70:
4e:a2:f9:51:e8:59:7e:ac:83:22:80:1c:5c:c3:31:
2e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BB:0B:2F:FC:EE:EB:E2:D1:2B:99:FE:29:B8:8D:6F:E6:06:AA:8B
X509v3 Authority Key Identifier:
keyid:79:A3:04:BA:34:B6:1A:15:E3:79:7F:FD:4D:1A:E8:C2:18:C1:C7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaMEujS2GhXjeX_9TRrowhjBx78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/v7sLL_zu6-LRK5n-KbiNb-YGqos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e60107-19f3-4194-bc2f-99a0d29ba563/1/eaMEujS2GhXjeX_9TRrowhjBx78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c040::/29
Signature Algorithm: sha256WithRSAEncryption
01:c1:62:25:dd:0c:e1:13:c1:2a:8b:fe:ba:b5:86:43:af:e7:
da:04:3b:e7:f1:58:2d:3b:59:79:75:75:48:6d:51:c2:d4:e0:
e6:82:3d:e9:30:c0:c9:88:0d:76:03:7c:d3:02:a1:43:f8:f3:
63:0d:f9:22:58:3f:90:fe:10:6a:4e:24:0a:d7:4f:c7:53:f7:
fe:60:76:c8:95:44:62:8c:10:94:96:fa:15:ac:df:d3:33:aa:
bd:10:97:62:8a:75:ed:85:4e:ed:fe:7b:8d:42:e1:08:11:d1:
e1:5d:f9:66:11:b6:c7:7d:be:0c:c2:20:44:08:f2:0d:c1:37:
97:18:8e:f8:37:c0:99:2e:3a:86:74:bb:cb:c1:23:6e:1f:1f:
74:62:57:9e:76:5b:d9:12:d2:38:0c:13:7f:cc:18:05:53:12:
61:12:1f:89:2f:1e:d3:08:67:ac:b2:a6:20:ef:8f:11:fd:70:
9b:e7:f6:e9:ae:b4:f3:aa:68:7c:71:66:6a:b3:57:d1:6c:82:
48:6d:db:7b:32:d8:2d:c3:e1:88:19:66:6a:87:06:f8:6a:ad:
fb:5e:9c:a1:e4:bd:47:ca:ce:a2:50:40:23:92:fc:7b:8d:db:
5e:df:00:b5:0f:dd:18:ca:f3:0f:21:d4:87:40:7f:50:ae:cf:
92:72:63:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:18:12 2025 by rpki-client