Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/cWBR9jWDDG7ARUJlxplMlFa0NP0.roa
File: cWBR9jWDDG7ARUJlxplMlFa0NP0.roa (raw, json)
Hash identifier: zCgIppt/WC9r6O/8X9oEipXFWVe8WCIns5z4zczX8D0=
Subject key identifier: 71:60:51:F6:35:83:0C:6E:C0:45:42:65:C6:99:4C:94:56:B4:34:FD
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 0191D001530D674B65C0C1C48334537AE791
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/cWBR9jWDDG7ARUJlxplMlFa0NP0.roa
Signing time: Sun 08 Sep 2024 05:00:33 +0000
ROA not before: Sun 08 Sep 2024 05:00:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214998
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 10 Sep 2024 05:44:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d0:01:53:0d:67:4b:65:c0:c1:c4:83:34:53:7a:e7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Sep 8 05:00:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=716051f635830c6ec0454265c6994c9456b434fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:01:b8:5c:31:f2:2b:38:ac:ab:27:52:71:
16:61:4b:b2:23:35:80:e8:86:9f:03:b6:6e:c5:02:
ff:d3:58:59:a4:39:51:c0:45:af:96:67:46:33:2e:
08:10:86:af:28:0f:d3:ba:b0:6b:35:6d:c8:73:a5:
fb:b8:00:bc:4b:ec:2b:7c:7f:f3:89:8c:5f:65:a6:
49:90:b1:28:dc:6f:5a:b8:8c:a6:e4:15:cf:bf:1d:
13:2f:22:60:cb:ab:2f:49:40:f6:c0:cb:af:fe:14:
4c:41:a7:2b:3b:2e:d0:44:0d:86:f9:52:0b:c0:16:
19:11:d2:f6:f2:59:9c:d6:6e:63:88:a3:58:0a:3e:
75:22:0a:92:96:ee:3f:67:a0:5d:63:ec:ef:cd:61:
c7:49:b0:4a:71:f4:a3:21:52:88:9c:0f:03:fd:8f:
ad:31:04:6c:58:2b:f7:3e:c6:ac:d7:75:cb:1d:36:
d2:ac:b6:8b:f1:6a:9e:0d:42:bc:6f:51:50:af:9f:
f4:62:5d:25:22:a8:3e:fa:37:d1:69:c4:7d:9d:d4:
58:e2:40:98:fa:04:14:c0:92:0f:5c:38:04:bc:6a:
65:ce:ff:83:64:b1:61:b7:46:ee:1d:4c:b5:4d:dd:
86:75:22:cb:9a:b9:c4:7a:a6:81:8f:d9:d3:5e:f7:
a0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:51:F6:35:83:0C:6E:C0:45:42:65:C6:99:4C:94:56:B4:34:FD
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/cWBR9jWDDG7ARUJlxplMlFa0NP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:15:69:ac:ea:cd:5b:0d:65:d0:d5:16:cf:6e:41:bd:e2:5f:
63:61:68:f9:3e:aa:b9:fb:aa:83:22:6d:aa:71:dd:6f:1e:5b:
d3:9e:13:5f:87:94:d9:4c:14:a5:b1:b3:a1:c0:52:bf:8a:a7:
47:b1:49:ec:8c:00:4c:cc:4b:71:a5:92:1f:17:00:1b:d9:d9:
e6:b8:d0:eb:d6:a5:f7:83:d9:1e:75:f5:e5:84:51:78:00:36:
7b:e7:76:9c:c6:8a:09:10:f9:25:12:a2:a1:65:bc:20:7c:06:
24:cf:0b:09:da:40:ae:c1:52:42:1b:7e:9b:48:4a:6c:f7:c7:
7a:dd:2e:1c:5e:31:0d:e1:33:36:eb:e9:26:e9:70:7c:c2:4f:
ad:66:fb:12:b8:f9:85:25:2c:75:43:28:5b:9a:7d:20:c5:ba:
92:c2:62:ce:5e:69:bc:3d:6e:44:af:60:10:45:48:69:f8:ca:
14:e1:09:27:64:0f:a5:06:d3:29:8f:c5:f9:b6:6b:ea:c5:fa:
c2:f1:9a:9d:3c:17:ca:45:39:a7:1e:cf:e0:f8:8d:29:ed:61:
3a:a1:fe:e3:58:fd:52:52:37:fa:e7:a7:aa:e7:4c:7a:ff:70:
66:a7:42:52:e4:d8:ec:0c:d2:97:6d:26:ee:4d:e3:9a:1f:1f:
1a:68:3e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 10 07:06:41 2024 by rpki-client on console-ams.rpki-client.org