Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/jPsm-Y1tLawijbZmOeaBqilE1WA.roa
File: jPsm-Y1tLawijbZmOeaBqilE1WA.roa (raw, json)
Hash identifier: uCC0lPNAZOi7bCfTMXahKNabdhOQ9JYq8j3ORYufit0=
Subject key identifier: 8C:FB:26:F9:8D:6D:2D:AC:22:8D:B6:66:39:E6:81:AA:29:44:D5:60
Certificate issuer: /CN=3026806a6b8dac68c2a32b65849229524fc33da7
Certificate serial: 01856D7897D1C55002B4FB3FCAA515D76C83
Authority key identifier: 30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/jPsm-Y1tLawijbZmOeaBqilE1WA.roa
Signing time: Sun 01 Jan 2023 13:14:57 +0000
ROA not before: Sun 01 Jan 2023 13:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47536
IP address blocks: 2a12:79c0::/32 maxlen: 128
Validation: Failed, certificate revoked on Mon 06 Feb 2023 07:15:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:78:97:d1:c5:50:02:b4:fb:3f:ca:a5:15:d7:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3026806a6b8dac68c2a32b65849229524fc33da7
Validity
Not Before: Jan 1 13:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cfb26f98d6d2dac228db66639e681aa2944d560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:5e:ce:67:d1:e0:ab:12:92:02:27:8e:8e:
98:72:c3:f0:b1:ae:f9:d7:00:8e:5a:c5:96:b5:ad:
69:98:47:17:2c:68:8d:2f:63:f0:20:79:27:11:19:
93:2c:9e:53:c9:e9:95:2b:01:41:22:a6:66:eb:fc:
15:00:79:7b:b1:a3:bb:6a:4c:71:86:af:6b:26:c2:
2d:05:b7:b7:bc:06:37:92:ec:6c:5d:90:57:98:66:
01:8f:80:b0:35:6f:ef:52:cf:ea:81:8f:37:93:73:
8a:12:b1:3d:c5:4c:3f:74:4a:f8:5e:c3:98:11:9a:
96:79:12:33:b1:a4:62:6f:dc:b4:16:41:c8:30:5d:
a0:b9:91:8a:78:71:5a:24:d0:3e:f9:61:c4:21:40:
7a:e9:36:54:ee:31:57:63:8f:c7:00:ef:1b:77:ba:
5e:07:8f:4e:b1:f9:69:58:b9:e4:e1:de:2b:db:4b:
27:ae:06:f6:5d:b5:7e:74:4b:91:38:32:bb:d1:97:
d8:8b:a9:7b:a7:70:1c:ac:cb:b1:fa:27:04:c1:06:
4a:22:66:73:b8:47:55:1d:e1:4c:64:1b:c8:4c:e3:
00:f3:08:36:ec:8c:dc:9c:29:3b:0b:ca:aa:a8:fa:
ff:9b:cf:70:eb:87:d6:eb:09:18:e3:81:ce:f0:a3:
4c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:FB:26:F9:8D:6D:2D:AC:22:8D:B6:66:39:E6:81:AA:29:44:D5:60
X509v3 Authority Key Identifier:
keyid:30:26:80:6A:6B:8D:AC:68:C2:A3:2B:65:84:92:29:52:4F:C3:3D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MCaAamuNrGjCoytlhJIpUk_DPac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/jPsm-Y1tLawijbZmOeaBqilE1WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9dca0e-a41b-4972-bbb5-08e2b1017927/1/MCaAamuNrGjCoytlhJIpUk_DPac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:79c0::/32
Signature Algorithm: sha256WithRSAEncryption
84:46:bc:f6:99:42:59:e1:9a:0b:10:b3:5b:d3:c6:48:b3:78:
78:22:fe:09:89:e5:be:d4:33:94:ae:94:1f:19:ca:5f:48:3f:
2b:f8:6b:fa:8d:94:fb:8d:6c:23:10:7c:1f:89:fd:34:cb:32:
47:a8:aa:4f:30:76:30:70:29:bb:71:cb:a8:ed:df:7f:bc:a5:
ec:9d:e8:31:84:fd:8a:55:b5:5e:32:40:15:5e:c4:f8:46:44:
40:cf:53:df:40:7b:3f:fb:ea:5a:84:e8:71:7c:68:83:ad:fe:
50:c5:97:12:ae:7d:58:96:51:a2:70:e2:98:76:96:ce:3d:20:
bf:2f:d6:d2:3a:d5:7d:1a:ef:b3:e3:95:9f:5c:87:80:58:04:
07:9a:61:8f:27:36:c7:ed:fd:76:b4:3f:3b:65:5a:ec:27:d1:
fb:c5:96:7a:66:94:8c:ca:92:61:8d:b3:37:92:4d:2a:c9:d5:
37:0e:23:b3:bc:31:c1:a5:19:81:76:04:fb:2b:4e:56:39:a8:
b7:c9:c2:e2:bf:ea:ee:b5:75:72:26:75:ea:3a:39:be:2e:eb:
32:f1:c9:bc:80:79:d1:1a:25:c3:2a:b1:58:53:d1:b3:0c:36:
9e:fe:f8:eb:d9:0d:40:d8:cd:25:12:ed:6f:4b:1a:f5:7e:53:
a4:bb:a7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:14 2024 by rpki-client on console-fra.rpki-client.org