Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/V0_Zya7NpNa8Nc8M8fJwiulXPO8.roa
File: V0_Zya7NpNa8Nc8M8fJwiulXPO8.roa (raw, json)
Hash identifier: 8LL95ct1b3mDDAoFvZC9VD52HZg6j7MljZycFrLh1p8=
Subject key identifier: 57:4F:D9:C9:AE:CD:A4:D6:BC:35:CF:0C:F1:F2:70:8A:E9:57:3C:EF
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 01913239A717D17D69D41AC0C72C89E5989C
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/V0_Zya7NpNa8Nc8M8fJwiulXPO8.roa
Signing time: Thu 08 Aug 2024 13:42:04 +0000
ROA not before: Thu 08 Aug 2024 13:42:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 2a12:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 09 Aug 2024 17:10:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:32:39:a7:17:d1:7d:69:d4:1a:c0:c7:2c:89:e5:98:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Aug 8 13:42:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=574fd9c9aecda4d6bc35cf0cf1f2708ae9573cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:61:e7:4b:cd:71:b4:e9:4d:89:de:9d:a3:48:
ae:2a:40:21:61:0d:8c:f1:4f:cb:46:77:41:0c:ef:
94:d0:a9:3b:1b:56:9f:d2:f6:49:4c:36:87:c0:50:
33:ad:b6:83:60:66:32:bf:8a:80:b7:cd:ce:3f:d3:
9d:9c:9f:81:13:21:74:57:4d:83:f1:f7:ce:89:5a:
e5:e0:f2:1c:7c:62:01:e6:8c:46:a3:d0:20:ab:d6:
d6:b9:f8:f0:06:89:77:d2:32:da:4f:24:7e:d9:ef:
28:2f:5a:37:11:64:1c:6c:df:fe:67:fe:cc:98:90:
4e:9f:44:90:ef:49:4f:0d:be:7f:dd:7d:63:3b:60:
87:77:69:7e:d5:cb:7d:7b:66:80:22:5c:14:af:e4:
ce:e1:89:1a:ea:33:5a:62:91:26:ca:e4:48:cb:bc:
08:e5:c2:6f:c0:90:c2:9f:2d:0a:7b:4c:fa:e3:0f:
60:b9:34:70:c5:fd:fc:0b:a9:56:92:2c:32:e3:27:
38:d8:a8:8e:5b:71:53:af:4d:32:1a:81:f5:29:d9:
b1:10:41:2e:83:e8:0a:e9:ee:c6:17:f4:d0:72:00:
ad:27:32:52:2c:cf:5b:da:d2:ca:4c:4e:ed:5f:a7:
cb:51:68:27:5a:ea:c1:81:a2:74:9a:4c:de:a0:8d:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4F:D9:C9:AE:CD:A4:D6:BC:35:CF:0C:F1:F2:70:8A:E9:57:3C:EF
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/V0_Zya7NpNa8Nc8M8fJwiulXPO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5940::/32
Signature Algorithm: sha256WithRSAEncryption
96:05:0e:0a:2f:a1:67:dd:44:84:d2:bb:b8:2b:ec:78:cb:8d:
5f:97:e5:b5:59:92:50:cf:e8:1e:40:83:bf:c6:2f:17:7a:a9:
d6:9d:19:5c:6f:3c:9e:42:3f:7b:13:a4:dc:80:24:8e:31:c1:
72:11:5c:da:18:42:bd:88:68:74:6b:04:9d:dc:88:49:e3:53:
e3:5e:21:5e:a7:b2:fa:83:42:84:a4:09:89:06:0d:94:6d:1b:
1f:3f:cd:9f:f4:c7:a7:ef:ff:3c:22:a9:16:80:5a:09:77:7d:
ff:18:50:9d:69:f3:e7:84:ec:df:81:3d:e6:e3:36:32:ba:0e:
0c:78:2d:66:f3:56:02:16:9c:41:b1:bb:7b:af:8b:8e:85:14:
3e:45:87:fa:a8:7a:61:13:e4:d9:1f:7e:5e:90:c2:cc:28:33:
7c:d9:a5:d0:83:e5:e0:6f:f9:40:10:38:4e:9d:34:b0:db:83:
41:64:58:cb:26:92:30:33:a3:b3:c9:fb:99:fa:88:63:3c:61:
c5:ef:0b:c6:81:87:36:a2:4b:36:67:13:1c:55:53:c5:fe:37:
b4:66:dd:db:54:7a:5d:2d:14:8a:56:bb:3e:a8:88:24:2c:3d:
23:57:47:1e:f6:27:c7:14:78:ac:c9:20:f9:2e:f6:fd:05:88:
2b:c0:fe:34
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 9 19:01:25 2024 by rpki-client on console-fra.rpki-client.org