Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/WF9FsL5C0t73Hgv2u5kh28d6CKU.roa
File: WF9FsL5C0t73Hgv2u5kh28d6CKU.roa (raw, json)
Hash identifier: YR2X8ZIefWuRLQ2NAOuJGo+MufIIVtjBgxp5q+VXpaI=
Subject key identifier: 58:5F:45:B0:BE:42:D2:DE:F7:1E:0B:F6:BB:99:21:DB:C7:7A:08:A5
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 018CC94E62F4FBFF53AADA202C36C803023D
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/WF9FsL5C0t73Hgv2u5kh28d6CKU.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 2a12:de42::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 28 Jan 2024 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:62:f4:fb:ff:53:aa:da:20:2c:36:c8:03:02:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=585f45b0be42d2def71e0bf6bb9921dbc77a08a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:b9:e3:65:6f:3f:e5:e4:0f:35:51:83:a8:
b7:79:f7:15:59:89:27:85:83:57:38:06:48:7f:2d:
52:ac:8d:b6:79:02:de:ab:bf:64:7c:3a:7c:42:84:
5e:d0:cc:4d:1b:d5:b9:d3:93:45:34:b1:53:e1:b6:
33:6f:62:e9:0d:44:c4:da:28:81:55:85:31:87:3a:
bf:ef:7a:72:13:4a:60:e4:43:08:68:e3:d2:f8:81:
9f:d8:ba:07:ea:c7:54:5d:e9:68:f7:5e:c5:0a:bd:
ea:96:95:b7:ff:64:8e:00:4a:ed:e4:32:48:9d:dd:
02:c2:82:f1:86:2a:e8:ce:27:5a:d4:e2:24:b0:af:
4e:2e:42:09:d7:69:57:4c:bd:c0:09:ca:6b:be:6a:
2e:dd:22:7c:7f:93:f2:07:36:77:87:96:c1:3b:9e:
00:11:e7:ad:0c:c7:43:e7:8a:f2:44:ca:9d:98:1e:
a8:89:f6:e4:4d:20:51:93:26:5d:53:5a:50:ae:09:
48:21:1a:b2:56:1f:9d:54:e1:a6:05:dd:8e:ce:70:
cc:60:ee:00:a5:d0:3a:0c:02:0f:f7:be:2f:6d:73:
22:1a:57:9a:f2:f0:12:0e:c1:78:20:f5:f0:c7:18:
ef:44:e2:9b:eb:60:f2:ba:18:4b:57:c0:bd:1f:0f:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5F:45:B0:BE:42:D2:DE:F7:1E:0B:F6:BB:99:21:DB:C7:7A:08:A5
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/WF9FsL5C0t73Hgv2u5kh28d6CKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de42::/32
Signature Algorithm: sha256WithRSAEncryption
b5:78:98:b4:a5:e5:36:e6:08:b1:81:9b:93:93:04:0a:7b:c7:
08:d5:e3:de:af:24:c5:22:2e:7a:0c:b6:d2:6d:b8:3e:c1:b4:
4c:c9:55:7f:65:2a:02:e1:34:ba:c0:06:59:d7:2d:40:4f:30:
70:e1:fc:15:a3:50:d4:48:ac:f1:b0:36:5f:80:26:f3:21:64:
32:12:af:be:40:f0:73:01:da:b3:33:ce:35:0a:00:16:e5:c6:
4e:db:64:d0:bb:57:d7:7d:fb:bf:c8:f8:9e:7b:08:fd:72:67:
b2:e1:2f:d8:91:b3:74:2f:96:d0:ee:c4:54:b0:cc:e1:e6:4a:
a4:6d:e6:88:d1:2e:b8:08:3f:cb:74:a7:64:67:9c:f7:c0:e7:
f8:51:fd:6e:bd:57:b1:af:27:1b:55:4e:cd:e2:97:01:c3:2f:
bf:c1:ef:eb:13:91:df:a1:43:f4:d5:cc:f8:59:32:3b:b9:61:
5c:b0:e2:77:2c:a7:01:04:b8:d2:77:73:62:4d:be:fb:11:c6:
d5:46:8d:bb:f5:df:be:31:8b:ce:66:c6:6a:cc:86:0c:b6:b3:
f4:e3:ce:95:4c:4f:d4:1a:48:fe:5d:fa:d2:66:cb:d1:32:47:
f1:a6:0b:8c:87:b0:4d:df:f0:6f:43:73:70:dc:46:1f:6e:b9:
e9:0f:3f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:01 2024 by rpki-client on console-ams.rpki-client.org