Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/MLWgA5rT6l6CiCRRnLGwVGald5E.roa
File: MLWgA5rT6l6CiCRRnLGwVGald5E.roa (raw, json)
Hash identifier: rJJvKXl5OYi6Qz2X616OO4SQ99cTzo5Aq37UW/BYm9Q=
Subject key identifier: 30:B5:A0:03:9A:D3:EA:5E:82:88:24:51:9C:B1:B0:54:66:A5:77:91
Certificate issuer: /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial: 01888C79FFA2437D2D04C67F8DDA146F4E69
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/MLWgA5rT6l6CiCRRnLGwVGald5E.roa
Signing time: Mon 05 Jun 2023 16:53:05 +0000
ROA not before: Mon 05 Jun 2023 16:53:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:1780::/29 maxlen: 29
2a12:8dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8c:79:ff:a2:43:7d:2d:04:c6:7f:8d:da:14:6f:4e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Validity
Not Before: Jun 5 16:53:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=30b5a0039ad3ea5e828824519cb1b05466a57791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2f:50:18:b0:31:e5:0d:01:d8:63:ff:01:bb:
cb:d4:78:fa:66:d9:04:2b:8a:44:34:63:0e:e7:7b:
20:0a:68:14:01:22:87:b0:ba:6c:e0:8f:e5:b1:7a:
ab:19:d9:95:5e:cf:dc:e7:bb:ec:5b:37:58:93:42:
8d:ef:9d:5b:25:ef:5a:ad:f2:b9:c5:78:41:eb:51:
d2:b5:29:d0:b8:09:ed:08:ec:ac:01:fa:c0:2b:06:
53:53:02:ab:6b:28:88:7e:9f:4a:49:9b:d8:04:20:
18:7c:34:35:d3:c6:ab:15:51:4a:6f:1b:f9:02:b8:
20:83:dd:4a:51:d8:e9:72:37:a7:00:78:88:9b:94:
99:13:a9:b9:a3:a1:b3:ad:da:5c:05:c2:5c:6b:aa:
ad:f5:81:2f:df:9f:b5:a8:8d:87:14:7b:f6:28:6a:
bc:99:d1:39:87:3a:a1:8e:7a:a9:24:4c:5c:2c:2c:
62:3d:8e:01:72:c7:05:53:14:b4:77:d6:b6:80:66:
a8:b0:90:c8:65:fa:dd:67:05:b3:b0:82:7a:97:50:
6b:d6:b0:e7:07:72:aa:63:3f:38:b5:7c:06:42:fd:
b1:a9:70:f0:b2:97:4f:e4:08:ca:54:5e:17:41:36:
7d:34:10:e4:90:bb:49:56:55:75:fa:47:50:cc:73:
7d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B5:A0:03:9A:D3:EA:5E:82:88:24:51:9C:B1:B0:54:66:A5:77:91
X509v3 Authority Key Identifier:
keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/MLWgA5rT6l6CiCRRnLGwVGald5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1780::/29
2a12:8dc0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:42:13:1b:03:f8:5e:b6:54:8d:0c:6e:bf:0e:b8:c4:4c:c9:
80:54:a4:05:e0:94:35:5f:dc:34:e0:12:59:59:5a:84:19:b9:
ee:9a:0c:a9:ba:6f:73:fa:ab:77:69:ad:85:82:7b:67:a0:d6:
5b:9e:00:05:e8:bf:1d:e0:75:08:46:0a:90:f0:87:62:69:af:
18:bc:c1:8e:32:72:bc:af:a6:0f:7e:99:52:a8:ad:c6:4f:61:
9d:08:1e:93:3d:58:87:ec:50:53:04:49:c2:11:58:23:91:74:
85:3f:10:ff:e0:63:33:bd:b4:bb:2e:1a:c2:42:bb:fa:8c:cd:
b7:a1:a4:f7:bb:8b:c2:85:fb:52:02:39:be:3e:4a:d7:97:21:
12:a1:5f:49:5a:8d:24:ae:7c:fb:e2:75:7e:0e:b4:99:ee:8f:
c1:de:af:2f:26:2b:03:46:f5:d3:31:b7:66:ed:8b:25:6c:80:
bf:0b:16:e4:c3:3f:87:06:0a:52:0e:e4:c0:31:36:49:52:46:
3f:c7:38:11:91:3b:79:78:0c:7b:16:87:08:49:1f:93:b1:dd:
25:91:b7:f4:0e:8f:a1:eb:70:19:6d:6a:dd:a6:dd:dd:e2:04:
95:1e:ce:d5:3b:3d:84:24:dd:4f:17:9c:c2:b4:84:ed:83:a5:
0a:03:92:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org