Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/JcklyuZzNTVo9VsRw33abp-CZTU.roa
File: JcklyuZzNTVo9VsRw33abp-CZTU.roa (raw, json)
Hash identifier: baqaoz5bEwb2CgOQEOivcBwv+3xa8VidMr5tvl1s6Rk=
Subject key identifier: 25:C9:25:CA:E6:73:35:35:68:F5:5B:11:C3:7D:DA:6E:9F:82:65:35
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 0186259508840FAF72300D033925789034B5
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/JcklyuZzNTVo9VsRw33abp-CZTU.roa
Signing time: Mon 06 Feb 2023 07:16:09 +0000
ROA not before: Mon 06 Feb 2023 07:16:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47536
IP address blocks: 2a12:79c2::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 06 Feb 2023 19:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:95:08:84:0f:af:72:30:0d:03:39:25:78:90:34:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Feb 6 07:16:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c925cae673353568f55b11c37dda6e9f826535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:97:d2:f2:9d:95:f0:39:dc:37:37:56:78:
73:b2:e0:a5:cb:35:60:e0:01:26:15:07:44:60:01:
f6:f2:0c:07:ac:72:26:3a:cf:0b:66:ca:96:4e:e0:
c1:0a:9a:37:1f:53:0f:d7:16:73:dc:2a:f1:82:bd:
59:3b:bc:09:bc:b2:eb:53:73:b3:53:fc:9c:7e:96:
c7:76:b4:15:31:cc:a9:95:14:fa:71:53:de:8b:d7:
cb:ae:bc:03:1b:26:e2:34:d9:65:ea:55:b4:02:21:
02:86:69:69:fe:4c:4a:6a:1e:9f:e9:9a:a2:ff:ad:
1c:2a:bd:b3:92:3a:03:61:6e:d4:b3:a3:bb:ba:5e:
6d:75:7d:86:69:29:1d:d4:96:e4:d6:b4:f5:3d:0d:
7b:5b:b5:69:e4:00:77:8d:12:5f:18:28:08:db:c2:
6c:a8:4f:4e:83:25:3b:f5:83:a0:46:37:56:5b:db:
3e:53:68:8a:3d:bf:a1:ba:d2:02:92:17:fd:a4:e2:
7e:ac:b4:5b:db:da:38:b1:12:9c:ac:eb:7f:bf:87:
8c:cc:4f:af:f8:84:84:44:65:2a:a7:e7:1e:27:9d:
64:29:ee:95:df:f2:9f:2d:eb:60:19:8c:62:b6:02:
fb:31:43:99:64:06:48:1e:ba:db:c7:05:2f:7f:02:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C9:25:CA:E6:73:35:35:68:F5:5B:11:C3:7D:DA:6E:9F:82:65:35
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/JcklyuZzNTVo9VsRw33abp-CZTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:79c2::/32
Signature Algorithm: sha256WithRSAEncryption
2f:23:4f:95:7d:3d:8b:62:4a:75:37:0a:bf:0e:a2:e6:c0:84:
95:e8:c0:32:9f:66:60:84:f9:4b:3a:a4:2f:ff:48:95:8e:2a:
12:d3:6b:b7:40:da:c1:13:b3:17:a5:39:44:15:1a:be:17:ed:
37:bf:3a:9f:26:23:a6:35:0c:d0:22:6d:1c:a2:df:29:b5:bb:
be:6e:0f:d9:ec:4b:0e:60:42:1e:3f:d9:ab:e0:e6:61:49:81:
15:e4:4e:d6:36:3f:d1:e9:05:2e:09:37:aa:e9:00:86:19:04:
de:79:88:a4:da:e4:5c:6e:48:50:42:02:95:68:ab:1a:f6:e4:
43:a1:29:2a:3f:13:50:b6:c7:2f:5b:99:08:b1:b0:44:30:2b:
95:ef:dd:fb:65:4d:c9:a3:f1:fd:22:91:52:4f:ce:94:8e:21:
7e:b2:e2:f1:d1:86:dd:66:fa:1d:c3:7d:fb:e1:19:9c:10:99:
2f:73:0e:40:3e:26:89:aa:a7:74:8b:8f:3c:7e:a2:a6:ec:ec:
2a:46:8b:b6:6f:05:3d:ff:9f:2c:4a:e7:e9:24:6b:fe:87:da:
88:e1:95:c1:ee:47:ea:22:09:c1:e0:7a:d8:12:e7:94:ce:d4:
b7:5a:53:09:08:16:25:8b:cb:cf:68:a4:c4:c5:8d:78:97:13:
b5:88:fa:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org