Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/ZHAGkCR8otKtmOqFM8_ByD5J8SA.roa
File: ZHAGkCR8otKtmOqFM8_ByD5J8SA.roa (raw, json)
Hash identifier: V5dm3FTayI4CqCIBKEumLhnPRuTyAxVskH7fYk4OIeo=
Subject key identifier: 64:70:06:90:24:7C:A2:D2:AD:98:EA:85:33:CF:C1:C8:3E:49:F1:20
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 0187F69DBD41422F8FA69A92BD8CFA7E78EB
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/ZHAGkCR8otKtmOqFM8_ByD5J8SA.roa
Signing time: Sun 07 May 2023 14:29:05 +0000
ROA not before: Sun 07 May 2023 14:29:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:de40::/29 maxlen: 29
2a12:de41::/32 maxlen: 32
2a12:de40::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 May 2023 07:36:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f6:9d:bd:41:42:2f:8f:a6:9a:92:bd:8c:fa:7e:78:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: May 7 14:29:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64700690247ca2d2ad98ea8533cfc1c83e49f120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:84:df:c2:69:13:df:d4:61:9c:e4:db:53:ee:
e0:ed:c4:51:11:57:11:41:e3:61:a3:bd:f5:cc:24:
88:dd:67:07:f7:9a:bb:af:5d:60:bb:5f:ea:0a:3a:
26:38:ae:b8:28:34:42:77:ca:56:34:9b:6f:a7:0a:
87:f1:c0:5b:d3:69:ea:88:d7:ff:30:ee:85:0d:24:
ce:25:75:a3:ed:47:0f:11:95:46:d1:86:81:70:55:
60:f3:e9:5d:77:e1:75:82:44:78:85:f2:42:68:b8:
cc:8c:61:96:0a:e3:54:56:1f:b5:e1:31:64:3d:fe:
fc:44:50:dd:04:1a:6b:82:9d:aa:e2:cc:c7:41:b2:
2c:23:8e:94:20:3b:6a:13:fd:2f:44:14:e6:3c:95:
0d:d2:fb:c5:76:92:81:c8:a6:24:93:6b:5a:32:16:
6c:3f:74:d0:ad:c1:c6:9d:7e:03:9d:f7:f1:f3:bf:
e6:52:5f:85:2f:5a:03:18:fd:9c:c2:25:63:d8:6d:
86:a4:db:ed:15:59:80:72:04:96:5a:2c:f8:b2:62:
99:20:2a:02:c2:f0:33:c6:82:83:0c:68:01:00:c2:
2f:4e:35:70:0e:cc:0b:a2:ab:59:3d:3e:dc:e2:a5:
4c:5e:8a:03:34:60:b5:f2:7d:b4:2f:09:3b:4a:90:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:70:06:90:24:7C:A2:D2:AD:98:EA:85:33:CF:C1:C8:3E:49:F1:20
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/ZHAGkCR8otKtmOqFM8_ByD5J8SA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40::/29
Signature Algorithm: sha256WithRSAEncryption
b4:26:06:c5:21:e9:b9:06:68:18:b6:8d:15:27:1a:6c:0d:1a:
97:01:48:2e:57:50:99:fb:ff:2a:51:e3:8d:2a:0b:cf:f7:c3:
05:82:4c:61:fc:94:e0:0b:90:4b:6b:a1:78:f9:d7:91:11:61:
5c:01:e9:a0:f8:ff:a5:dd:4a:3d:b5:4e:72:a0:88:7f:b8:54:
e1:3b:86:fb:0e:1a:f1:22:ca:80:f0:c6:27:0a:bc:d0:ad:96:
5d:33:88:b7:26:64:a0:6b:c0:94:75:64:d0:e0:ea:70:4b:77:
46:de:01:27:33:59:98:f4:96:7f:38:30:e3:11:64:f1:07:a3:
57:30:85:ad:91:be:19:3a:04:95:4b:14:08:d5:c7:9f:aa:14:
ca:9f:5b:52:92:11:66:f7:28:bd:f2:f8:f0:23:f0:da:1c:5d:
3c:51:9a:62:bb:29:81:be:68:56:b0:b8:11:45:fc:08:d1:cc:
07:33:b9:b2:34:72:86:b5:97:3e:27:d2:80:e5:4a:b0:19:1a:
fb:38:43:ec:f8:ea:3e:86:6b:55:de:f5:2b:09:4b:14:d3:05:
bd:bc:3d:10:80:88:c4:e3:81:66:c5:4f:8d:52:ff:f5:f5:85:
56:4b:f4:83:ea:d4:8b:e2:c0:b8:14:12:5d:00:b9:de:2b:c8:
07:ce:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:01 2024 by rpki-client on console-ams.rpki-client.org