Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/6kt_aSyTBDuABaBJ_ajAwSkdFGY.roa
File: 6kt_aSyTBDuABaBJ_ajAwSkdFGY.roa (raw, json)
Hash identifier: ExonXoKaBBnX3/oRp7lFxZ6BxHccZo73bCf6KliA01I=
Subject key identifier: EA:4B:7F:69:2C:93:04:3B:80:05:A0:49:FD:A8:C0:C1:29:1D:14:66
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 018DADE23DFE87349494332985DF85D2BA1D
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/6kt_aSyTBDuABaBJ_ajAwSkdFGY.roa
Signing time: Thu 15 Feb 2024 17:48:21 +0000
ROA not before: Thu 15 Feb 2024 17:48:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:1780::/29 maxlen: 29
2a12:8dc0::/29 maxlen: 29
2a12:9780::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 21 Feb 2024 13:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:e2:3d:fe:87:34:94:94:33:29:85:df:85:d2:ba:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Feb 15 17:48:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea4b7f692c93043b8005a049fda8c0c1291d1466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9f:ff:1c:e8:94:29:2a:e4:22:e5:c2:1a:a8:
d4:16:b1:20:34:f1:92:be:11:1c:34:da:62:03:c2:
85:00:bd:5c:89:6c:a2:06:09:12:6c:47:aa:e7:47:
77:8a:62:d2:82:0a:fb:b7:e3:52:da:cb:f6:17:c8:
2a:ac:31:9e:3e:9e:d0:04:cc:9e:1d:2a:d4:e7:ef:
45:02:fd:be:45:f8:6e:bb:5d:b8:c2:cb:04:c9:49:
ea:0b:6d:cd:18:e3:d2:48:45:72:d0:8f:84:f3:74:
e0:c5:1d:1a:b1:5c:c2:b8:75:77:4e:f5:bf:db:72:
50:bf:3b:b9:38:e4:96:32:eb:fa:db:12:e0:84:3d:
65:fe:3e:cf:f3:99:70:fc:2a:90:27:14:71:5d:85:
5f:fa:ef:45:a9:f2:61:b3:06:08:e0:4f:79:3f:c5:
6e:bb:9b:94:de:7d:40:08:19:a9:80:91:4a:d6:30:
95:fa:35:93:20:f8:ba:5d:5f:dd:7c:3e:03:6e:06:
39:6d:78:8e:d3:d4:84:98:20:92:c9:90:e3:d6:76:
00:8d:66:17:9a:be:22:5f:a7:e0:66:9f:c3:70:cb:
0b:ce:10:61:9e:9e:31:e3:5a:8c:76:65:a7:b1:fe:
4c:08:88:5a:63:10:fe:d5:eb:c3:2b:cc:07:a4:d6:
06:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4B:7F:69:2C:93:04:3B:80:05:A0:49:FD:A8:C0:C1:29:1D:14:66
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/6kt_aSyTBDuABaBJ_ajAwSkdFGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1780::/29
2a12:8dc0::/29
2a12:9780::/29
Signature Algorithm: sha256WithRSAEncryption
9a:b2:1e:51:39:5c:b7:81:53:ed:d5:b4:5f:e7:ce:d5:05:16:
67:40:0e:b8:46:42:4e:87:36:f0:52:ff:2c:24:ee:2b:ba:9b:
ac:8c:e1:5d:d3:d6:6d:c9:d2:da:7e:91:45:7a:94:40:54:39:
f2:ae:d7:ad:f8:3c:6e:d8:81:cb:cf:5a:51:bc:14:9a:97:cf:
37:12:b8:27:ed:97:04:ae:56:a5:a4:1b:ef:94:13:2f:47:a8:
39:26:f3:40:61:b9:37:53:32:ca:3e:e4:cf:96:40:bb:5d:c4:
a4:df:3e:1f:f3:fa:fa:61:83:ed:e7:cc:b3:d8:4b:3c:b7:94:
8d:1d:ad:9b:da:2f:4b:82:7f:88:30:f4:63:88:6d:e7:ee:21:
1c:a8:84:ac:63:34:7a:e5:f0:d2:4b:10:41:0a:3d:f1:44:34:
16:7c:20:d9:2d:45:98:70:a3:73:eb:5e:6b:63:bd:62:cf:0a:
e9:4f:59:4f:4a:fa:99:51:e4:cc:b2:04:4d:bd:92:d6:5d:6d:
5a:02:25:b4:fc:39:19:8d:fb:82:2e:21:29:5b:3b:8d:18:be:
60:1c:2b:ad:f4:99:a7:06:56:bf:1e:54:16:e4:76:cf:e6:fe:
0c:2d:f2:1a:43:dd:24:c9:f7:d9:54:17:e6:1f:9e:67:08:45:
ed:95:09:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 16:51:07 2024 by rpki-client on console-fra.rpki-client.org