Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/v4pJW5maxi863U-tgZ5U61ClJXg.roa
File: v4pJW5maxi863U-tgZ5U61ClJXg.roa (raw, json)
Hash identifier: WbkHwI19M0Je1+lQZd7LlmbZVqQihGCF+eDJTste1Us=
Subject key identifier: BF:8A:49:5B:99:9A:C6:2F:3A:DD:4F:AD:81:9E:54:EB:50:A5:25:78
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F300DE65571F73A3A7A8D714A7251EC20
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/v4pJW5maxi863U-tgZ5U61ClJXg.roa
Signing time: Tue 30 Apr 2024 17:29:28 +0000
ROA not before: Tue 30 Apr 2024 17:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 2a12:62c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 May 2024 12:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:30:0d:e6:55:71:f7:3a:3a:7a:8d:71:4a:72:51:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: Apr 30 17:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf8a495b999ac62f3add4fad819e54eb50a52578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:76:90:c9:6e:32:cd:b9:39:1b:90:7d:1e:
aa:c8:35:84:be:67:5c:32:f6:84:f3:5e:45:1e:e4:
97:dc:5f:0d:14:6b:3b:7b:72:fa:19:4a:ed:7a:c6:
c3:81:de:19:c7:6f:43:29:cb:bc:c5:6a:5f:a6:a9:
2f:c0:d4:59:c0:15:a9:3f:26:fe:02:64:f1:1b:6d:
90:ae:dc:aa:31:dd:c0:da:d8:a9:6e:29:c0:61:db:
df:3c:1d:f2:e4:52:d8:2d:db:f1:f8:8f:25:1e:91:
d7:81:28:c5:18:3e:de:9e:34:da:f2:a9:e7:ec:9b:
8f:90:4b:2a:dc:2c:d7:32:79:f4:c5:b5:2f:ee:5a:
08:d1:54:61:3d:42:92:46:86:bc:a1:db:8f:83:23:
b6:37:19:95:9f:e5:de:be:24:54:f0:8b:c0:fe:ad:
3b:52:4c:f2:3f:fd:13:2a:97:e5:eb:e1:b8:5c:92:
f3:a1:eb:e6:5d:de:df:b0:08:1e:4d:01:b4:4b:c1:
db:3a:4b:9f:c6:f1:5a:ab:81:4d:11:d0:f0:b8:98:
6c:bd:80:14:a7:cb:b0:23:23:32:c3:42:84:e9:dc:
41:ed:8f:dd:a7:18:48:9f:1c:32:af:66:7c:ca:32:
8b:d3:55:0d:39:10:04:05:03:31:96:e5:43:dc:60:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8A:49:5B:99:9A:C6:2F:3A:DD:4F:AD:81:9E:54:EB:50:A5:25:78
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/v4pJW5maxi863U-tgZ5U61ClJXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:0b:62:ea:d8:1e:0f:30:ff:3d:14:a7:88:99:41:12:bc:5f:
0f:06:6b:6f:a9:73:47:5e:ac:db:94:bc:93:59:de:19:e4:79:
fe:a5:eb:9c:c9:79:5c:14:b5:3c:6b:55:41:d5:8c:d8:09:40:
f5:15:22:ee:81:b0:c3:b4:42:b8:15:2b:0e:db:c3:96:ab:ee:
47:d4:05:00:d6:e4:9c:d9:1e:dc:df:24:46:8d:68:c1:6d:4f:
00:a2:b1:45:7e:df:68:7c:3e:17:b8:54:91:63:b2:6c:b6:f7:
67:35:59:61:95:0b:0c:42:d5:90:10:ed:bd:f3:d4:93:91:e9:
23:16:be:47:f2:c6:f9:78:2a:93:a1:59:57:70:f9:a8:1a:4f:
fb:58:6e:19:62:f9:cd:2d:2a:2a:91:65:27:bd:e3:ec:57:e5:
b6:af:fd:71:db:8a:a5:b4:cf:62:ef:04:bb:08:d9:38:69:94:
a8:dc:4c:bb:97:3a:fb:af:f3:3b:e0:f4:6a:3c:b2:a2:f9:40:
6d:af:01:10:6e:c1:68:80:ba:76:9a:11:f6:5e:25:34:d2:a2:
9a:28:32:b0:de:d4:0c:92:15:0e:e6:b0:ad:4f:57:63:88:b9:
04:e2:73:40:c3:e4:c2:17:d5:64:80:0a:4e:ad:4f:12:c8:2b:
cf:a6:56:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org