Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/bY0sFqCiGorRvwwVsAFgw7dTdAk.roa
File: bY0sFqCiGorRvwwVsAFgw7dTdAk.roa (raw, json)
Hash identifier: luOWlfNihdCFuRQJnbOiiPSDQaLPKazIHiISKWBhK6k=
Subject key identifier: 6D:8D:2C:16:A0:A2:1A:8A:D1:BF:0C:15:B0:01:60:C3:B7:53:74:09
Certificate issuer: /CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Certificate serial: 0187C7093346058D44AA013D80393A1EF97E
Authority key identifier: E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/bY0sFqCiGorRvwwVsAFgw7dTdAk.roa
Signing time: Fri 28 Apr 2023 08:44:41 +0000
ROA not before: Fri 28 Apr 2023 08:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 2a12:5940::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 28 Apr 2023 17:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:09:33:46:05:8d:44:aa:01:3d:80:39:3a:1e:f9:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e69f2b69f4a95a521e18fb33e6793f467e031bc1
Validity
Not Before: Apr 28 08:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d8d2c16a0a21a8ad1bf0c15b00160c3b7537409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:8c:88:3b:cd:38:c7:c9:d6:ff:28:46:d3:
99:55:ec:38:cc:87:c1:eb:db:d5:9d:87:bf:a6:21:
2f:6d:95:e7:b0:20:ee:37:36:f5:f2:0c:a3:b9:f5:
78:5f:cb:85:fd:38:10:ee:fb:da:08:47:a3:68:9d:
05:9e:dc:58:2d:50:9f:9c:48:fd:73:4f:5c:be:45:
14:a8:06:a2:7b:3b:98:9d:a9:15:21:21:44:36:9d:
7f:08:9f:3c:c0:c4:5c:28:87:1c:db:92:79:80:bc:
2a:28:53:e7:70:8b:94:28:46:24:ab:32:9e:63:8e:
7a:7c:d6:c5:14:f1:70:72:07:b9:9b:cb:18:4c:de:
c1:20:85:91:ec:2d:c6:a0:7a:8d:8e:59:06:f2:44:
c5:5f:b4:91:7b:0a:46:4e:65:4a:28:1e:7d:70:c9:
36:e5:31:12:db:7e:50:a1:89:7e:09:d0:be:3f:a0:
b7:cf:48:b7:d8:8c:ae:e0:8f:a7:f3:60:63:1c:02:
4c:12:5b:2d:84:10:d8:bd:42:cd:af:27:97:7b:3c:
6a:59:ce:63:e6:c1:3c:e7:31:0a:46:2b:01:c1:d4:
c0:6f:be:9d:72:3c:c5:22:76:09:9e:68:ba:91:eb:
50:0f:31:ce:4e:16:9a:12:12:ec:bd:48:ca:7c:f4:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8D:2C:16:A0:A2:1A:8A:D1:BF:0C:15:B0:01:60:C3:B7:53:74:09
X509v3 Authority Key Identifier:
keyid:E6:9F:2B:69:F4:A9:5A:52:1E:18:FB:33:E6:79:3F:46:7E:03:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p8rafSpWlIeGPsz5nk_Rn4DG8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/bY0sFqCiGorRvwwVsAFgw7dTdAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/37eab0-7f53-4b62-b5d4-78006e078171/1/5p8rafSpWlIeGPsz5nk_Rn4DG8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5940::/32
Signature Algorithm: sha256WithRSAEncryption
aa:e5:24:66:cf:95:3a:b1:49:fb:83:03:1e:89:a9:ca:3a:01:
f3:6a:01:75:2c:06:e0:45:82:47:e1:14:5a:b6:09:2e:41:f5:
9c:4f:08:86:73:d4:97:71:fd:d7:e6:06:02:e3:2b:76:03:8f:
a3:79:76:17:f9:b6:19:62:1e:99:69:27:25:a5:29:1a:7b:02:
5e:18:53:d7:2b:0a:80:c4:11:7c:a0:3d:e2:ac:12:7a:89:b0:
87:49:27:4c:28:60:43:6a:7f:52:63:e3:e1:75:f1:13:19:f5:
71:04:77:fd:ba:66:3e:e7:55:66:e4:3d:66:05:a5:5e:20:50:
df:3b:e9:06:f4:58:b7:42:50:06:35:81:88:dd:ac:09:7d:27:
49:c5:e2:bf:c0:97:3c:4c:e2:0e:49:f2:19:30:a4:7b:74:88:
08:ea:be:36:d3:88:39:76:c2:ec:8a:aa:d0:0e:4d:b7:32:cd:
6e:2c:52:3c:d2:2f:e6:04:bc:0d:9e:1d:43:c5:72:67:48:a2:
6f:09:ee:fc:c9:a0:ca:dd:a1:32:20:81:97:e2:5e:69:79:9b:
ff:4a:75:14:da:fc:fa:b5:db:bc:18:70:ad:93:33:8a:77:65:
64:52:f9:32:0d:9e:be:1f:0c:eb:d2:90:49:f1:42:7a:f4:a0:
6d:df:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:54 2024 by rpki-client on console-fra.rpki-client.org