Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/jQayDkJt-M93Q3je1fF-Fhpy-rc.roa
File: jQayDkJt-M93Q3je1fF-Fhpy-rc.roa (raw, json)
Hash identifier: uafjwTCw3QPxTCwY0wwGuVTixTRKG/kSrU51UIKyTfA=
Subject key identifier: 8D:06:B2:0E:42:6D:F8:CF:77:43:78:DE:D5:F1:7E:16:1A:72:FA:B7
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 019320FBE956612891C294701908B6C48013
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/jQayDkJt-M93Q3je1fF-Fhpy-rc.roa
Signing time: Tue 12 Nov 2024 15:26:40 +0000
ROA not before: Tue 12 Nov 2024 15:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214998
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 16 Nov 2024 07:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:fb:e9:56:61:28:91:c2:94:70:19:08:b6:c4:80:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Nov 12 15:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d06b20e426df8cf774378ded5f17e161a72fab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a5:c2:1a:04:4f:af:46:3c:6d:62:b8:71:7d:
07:c4:5d:0a:7d:19:f1:16:70:59:91:89:a3:b0:3f:
3a:c6:b9:7c:62:93:d5:64:c6:64:22:23:ea:2d:07:
ea:2b:e9:63:01:84:0b:60:73:1a:36:27:80:0a:d4:
b0:b9:a6:8a:da:19:fd:8a:1b:a8:7f:72:77:22:6d:
9a:70:61:34:ad:ab:c2:c0:43:74:d2:51:e1:31:92:
40:4f:68:67:36:92:8d:57:3a:11:b4:c4:c9:39:a3:
dd:e8:83:53:19:dc:12:df:7b:b2:9e:e9:49:c9:26:
8a:b8:1b:2a:a0:c2:c5:c9:f9:28:6f:11:1f:80:58:
dd:9b:b5:18:25:ad:3a:dd:c7:02:5b:49:2a:f5:4a:
3d:10:69:ba:00:e6:67:32:10:e1:25:81:c1:d7:06:
10:a7:0d:36:43:83:43:c8:91:10:d7:3e:5c:fb:ef:
31:6e:32:3e:72:2b:2b:02:ef:19:53:01:64:5d:61:
55:f8:b9:44:4d:a8:46:88:25:c6:07:c8:41:83:87:
1f:0a:a2:5c:36:eb:3e:e6:49:e7:8f:72:bc:8c:7a:
d3:7a:05:8c:8e:50:5f:ea:26:a8:55:08:92:ba:03:
fb:94:9c:61:a5:78:f6:02:67:2c:66:15:86:3c:6f:
96:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:06:B2:0E:42:6D:F8:CF:77:43:78:DE:D5:F1:7E:16:1A:72:FA:B7
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/jQayDkJt-M93Q3je1fF-Fhpy-rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:c2:72:65:d3:7b:29:ee:13:65:98:62:be:14:d5:24:bd:21:
5f:66:41:29:85:82:a7:c3:95:e0:03:67:27:c6:43:6c:f6:3c:
91:4d:89:89:45:a3:75:0f:80:3b:48:6e:6c:61:05:99:49:5b:
0b:b0:73:3e:a1:cf:be:88:52:59:a2:52:93:eb:9c:d4:2e:fc:
50:0e:1f:48:9a:62:6b:07:26:82:20:ab:bd:62:a8:be:e4:ce:
63:bd:68:c2:9b:61:bf:0e:11:7b:4a:08:57:a9:23:32:a3:26:
0f:ae:87:6c:1a:8c:a6:4d:72:59:ea:0d:0d:85:2b:6c:f6:fc:
4a:b2:8e:84:1f:c6:a7:bf:b7:ed:5a:f1:86:4c:cc:7e:36:08:
fc:2d:39:12:77:42:7a:c2:f5:82:9c:f8:dd:f0:33:c7:62:3a:
cb:2c:b1:e2:29:03:9b:4a:22:f3:4b:8d:0a:04:5d:e7:ea:85:
29:c2:52:48:0f:8b:3b:ff:0c:b6:32:38:0f:50:6f:6d:78:be:
34:d9:7a:3c:ab:40:13:6c:dc:4a:a9:a3:eb:49:d3:6f:ad:73:
cf:cc:94:04:2a:ff:89:38:15:af:77:91:05:d5:70:02:1e:da:
ce:1b:66:25:50:93:4a:98:78:dc:93:99:ec:7c:8e:15:6a:04:
e4:88:d8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 09:30:36 2024 by rpki-client on console-fra.rpki-client.org