Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/EXZDE6wfS9upeJX47JHF1ZtNLic.roa
File: EXZDE6wfS9upeJX47JHF1ZtNLic.roa (raw, json)
Hash identifier: Oda2UKZYRKerBjG8FnE2nWTrLkKwy3Kx5wgrfqnWtSo=
Subject key identifier: 11:76:43:13:AC:1F:4B:DB:A9:78:95:F8:EC:91:C5:D5:9B:4D:2E:27
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01862B611B09E198177167A3E284F5EBE06B
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/EXZDE6wfS9upeJX47JHF1ZtNLic.roa
Signing time: Tue 07 Feb 2023 10:17:09 +0000
ROA not before: Tue 07 Feb 2023 10:17:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206216
IP address blocks: 2a12:de40:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 17 Oct 2023 07:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:61:1b:09:e1:98:17:71:67:a3:e2:84:f5:eb:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Feb 7 10:17:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11764313ac1f4bdba97895f8ec91c5d59b4d2e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:00:4b:d8:9e:fe:bf:1c:d4:a7:3e:0d:6c:10:
f9:b2:1b:3f:8b:01:6c:0c:d6:16:81:9a:37:f4:2a:
8e:ea:56:58:74:75:72:0d:0c:9d:de:04:98:e2:6d:
cb:b3:89:2f:40:4e:b6:bd:13:91:4e:f8:00:a3:90:
8a:d5:5e:e9:57:04:e2:67:d0:d5:ef:29:8e:46:60:
37:2a:fb:ec:a2:95:0f:51:d2:3b:1b:ec:f2:1e:6a:
9b:92:fb:bf:2d:50:27:fa:09:57:65:13:94:5b:b8:
c9:48:c7:b1:45:7d:79:3d:f1:a5:f0:8c:50:f5:98:
09:96:e9:20:ba:08:7b:6f:2c:32:79:40:62:52:3d:
9f:37:0a:5f:d1:f5:60:0f:31:5a:ba:bc:05:9a:eb:
c5:17:ad:d2:1a:95:53:e3:44:74:7d:d5:36:66:b5:
30:c1:9a:76:4f:16:d3:bb:07:89:0a:88:ec:d4:73:
41:42:f7:46:c4:31:46:ed:a5:50:61:07:de:97:e5:
ef:43:8d:8f:c0:68:18:d7:1e:d0:cf:2c:b1:78:8b:
3b:87:eb:f6:a4:bd:58:0f:31:02:a4:de:50:3d:eb:
df:d9:15:f6:f7:89:7e:2b:3a:3d:58:f6:d1:59:88:
1b:0e:e0:73:81:7c:b0:ee:30:35:37:de:db:e9:bd:
75:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:76:43:13:AC:1F:4B:DB:A9:78:95:F8:EC:91:C5:D5:9B:4D:2E:27
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/EXZDE6wfS9upeJX47JHF1ZtNLic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:8::/48
Signature Algorithm: sha256WithRSAEncryption
7f:3c:20:94:75:f2:71:59:41:94:17:b3:ab:b5:45:31:86:3a:
eb:ad:79:bf:6f:91:4c:27:cc:b3:7d:11:4c:51:d6:ba:61:ca:
a6:49:2e:fc:8c:67:46:a6:0b:16:9e:e5:54:60:59:81:d8:d7:
b4:07:89:88:5e:30:e8:05:4c:0a:b6:83:71:f3:60:29:d0:c7:
04:08:3d:ee:2c:f5:af:d9:e1:97:22:fb:31:e1:93:3f:5b:94:
91:f2:d9:3f:7c:a7:90:a2:1b:16:f3:3f:ba:7a:b6:28:ec:c0:
17:5d:f3:82:d3:90:ac:44:db:11:04:9e:02:58:ac:89:a3:a8:
e9:2e:f3:7a:5e:fc:c6:77:01:ce:e0:0d:0f:c7:66:4b:23:92:
0e:7b:a2:cb:e9:4d:67:50:86:29:27:4b:ee:a5:3b:5a:d6:bc:
01:52:6f:17:4d:e8:d9:8e:44:ba:b9:ec:78:b3:64:9b:3d:3c:
fe:e4:b3:e1:4d:26:1e:4a:aa:41:1e:bf:fe:e4:a3:dd:95:51:
11:83:39:a8:e6:f1:12:03:69:2e:08:63:17:f0:14:9c:8f:c1:
c8:83:a6:49:bd:94:89:bf:43:5f:cf:15:e1:fa:91:95:00:6a:
64:1d:a4:ce:a4:8c:12:aa:0b:c8:d9:92:bb:68:12:43:0c:34:
fe:96:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org