Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/C_bbp7eA-YvR1eWZMNWdecikxpU.roa
File: C_bbp7eA-YvR1eWZMNWdecikxpU.roa (raw, json)
Hash identifier: 2jsfQhcNarM0uj7cziE6FqFAdv659OsJw+Raf48XqsY=
Subject key identifier: 0B:F6:DB:A7:B7:80:F9:8B:D1:D5:E5:99:30:D5:9D:79:C8:A4:C6:95
Certificate issuer: /CN=24954f608ac12b684ef865f39af0e94e250b9454
Certificate serial: 0185718335C63A68FB0C9076826906D79E5C
Authority key identifier: 24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/C_bbp7eA-YvR1eWZMNWdecikxpU.roa
Signing time: Mon 02 Jan 2023 08:05:02 +0000
ROA not before: Mon 02 Jan 2023 08:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207108
IP address blocks: 2a12:ab46::/32 maxlen: 32
2a12:ab47::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Mar 2023 19:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:83:35:c6:3a:68:fb:0c:90:76:82:69:06:d7:9e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24954f608ac12b684ef865f39af0e94e250b9454
Validity
Not Before: Jan 2 08:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0bf6dba7b780f98bd1d5e59930d59d79c8a4c695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4d:83:3c:cd:b6:28:ca:f6:52:a2:23:8c:a9:
2f:06:ed:60:9e:64:a7:70:30:f1:bf:7a:f6:a5:51:
6a:61:27:b9:c1:6f:42:31:53:46:6e:58:b1:44:40:
12:bc:b4:4d:f6:09:b9:42:b8:78:a2:14:e1:be:71:
30:31:ed:c4:01:7e:4c:14:99:37:58:a5:52:50:1e:
88:5c:9b:6f:94:3c:b2:29:96:b8:30:0f:4e:f2:6b:
6f:d2:ad:7d:46:84:a4:af:43:f8:e5:bb:b0:27:27:
0d:d9:40:ac:c9:91:15:0d:75:de:bf:40:6b:7a:40:
eb:a2:82:16:85:c4:24:54:93:ef:6b:ae:d4:87:a2:
8b:e7:a5:61:9e:27:47:4f:b9:ee:28:63:80:02:c8:
2d:1f:ed:41:60:db:cc:13:00:16:fd:3a:60:7e:db:
5e:f7:6f:f6:ad:8c:3e:6e:6b:13:44:01:a8:97:d0:
b9:a1:32:0b:50:0a:8f:d9:be:2f:af:d1:79:17:fd:
cd:4f:6b:d8:5a:14:63:c0:3f:5d:f8:fd:f4:f2:fc:
9c:8a:9b:f6:89:a3:de:4e:61:cf:84:a6:2c:c1:53:
f8:93:c1:50:2d:06:a2:51:fb:5e:ca:f5:9d:16:9f:
d8:62:fc:b2:a8:77:27:13:2b:de:c3:7a:8d:f4:64:
97:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F6:DB:A7:B7:80:F9:8B:D1:D5:E5:99:30:D5:9D:79:C8:A4:C6:95
X509v3 Authority Key Identifier:
keyid:24:95:4F:60:8A:C1:2B:68:4E:F8:65:F3:9A:F0:E9:4E:25:0B:94:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JJVPYIrBK2hO-GXzmvDpTiULlFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/C_bbp7eA-YvR1eWZMNWdecikxpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4ddd75-3160-4065-bb69-bb17875db323/1/JJVPYIrBK2hO-GXzmvDpTiULlFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ab46::/31
Signature Algorithm: sha256WithRSAEncryption
7c:b4:9b:24:dd:22:8c:09:fa:ab:c0:4a:b5:19:6c:76:66:29:
8e:32:0c:3b:99:c0:f4:d8:43:20:4c:04:d3:6b:0f:5f:47:3a:
6f:c7:10:80:0b:a4:d0:bb:28:46:05:b8:0d:56:5e:34:ed:5b:
4f:f1:db:28:e3:63:96:f9:4e:44:16:5f:14:61:08:73:f5:de:
fc:e0:fc:54:9d:6c:da:bc:dd:ac:76:bb:45:35:96:5f:b1:8a:
9a:48:6f:fb:fb:4b:38:f5:4e:8e:17:92:3e:e9:b8:19:f0:1a:
94:94:1f:ad:ae:89:90:4e:ad:c0:95:d8:95:5e:89:e2:bc:97:
65:c3:fc:1a:49:5e:43:83:bf:05:36:6d:3b:d8:1a:e3:32:78:
c0:f8:a2:97:69:3a:6e:22:23:92:12:58:5c:86:c4:5e:9c:d3:
06:1e:f3:e1:a6:59:21:5d:c8:1d:6d:2a:13:8f:83:dc:37:24:
3e:90:bf:73:4f:d7:fe:ee:26:bf:4d:80:ec:96:aa:ab:75:14:
ed:27:5b:9e:bd:a8:83:b8:e4:57:b9:b1:36:e9:35:53:d7:b7:
22:e3:46:78:19:f8:e5:f6:37:60:db:34:67:62:ce:41:1a:a9:
8c:72:5b:13:bb:07:a1:bd:46:98:67:c8:92:d2:6a:51:34:95:
b0:09:20:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:33 2024 by rpki-client on console-fra.rpki-client.org