Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/januphFvVLKtyusMOGBcIQx3Fyk.roa
File: januphFvVLKtyusMOGBcIQx3Fyk.roa (raw, json)
Hash identifier: 1hbt1a1skafDauOOkGVhR4fra4PVQ/fvTJFhPolwL3Q=
Subject key identifier: 8D:A9:EE:A6:11:6F:54:B2:AD:CA:EB:0C:38:60:5C:21:0C:77:17:29
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 018805820DB53FC4BCE849DBFC743D2D0895
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/januphFvVLKtyusMOGBcIQx3Fyk.roa
Signing time: Wed 10 May 2023 11:53:09 +0000
ROA not before: Wed 10 May 2023 11:53:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43641
IP address blocks: 2a12:de42::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:05:82:0d:b5:3f:c4:bc:e8:49:db:fc:74:3d:2d:08:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: May 10 11:53:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8da9eea6116f54b2adcaeb0c38605c210c771729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:92:de:ac:c5:eb:28:9f:a5:3f:b8:26:ce:31:
5c:08:9b:d6:01:d0:a7:04:7f:2c:40:e7:5b:fb:80:
ad:fc:a0:4d:fb:96:b2:f0:df:ba:78:c6:c4:db:a5:
ca:f6:34:74:7d:b7:89:a5:3b:ba:81:74:0a:3a:7f:
89:c7:e5:52:d1:97:bf:4e:81:d7:17:98:65:fe:ca:
a0:d3:5a:29:d0:d8:a7:41:85:00:07:89:69:16:e5:
54:28:50:c3:ca:34:99:f3:2f:ab:6e:81:cf:a4:31:
b8:00:69:f1:4a:3d:95:ee:5d:eb:60:c7:0b:fe:2e:
35:f6:9f:97:8b:99:e6:28:93:83:8a:6d:b1:68:6b:
c8:a3:57:ff:0b:1e:c0:d2:73:b2:99:19:f1:b6:c7:
85:fd:5b:1b:38:96:61:66:cb:2f:6c:04:cf:69:a5:
6b:cf:67:77:de:1c:76:9a:59:a3:c3:ed:36:ca:29:
f9:0e:8b:21:55:f1:04:ec:36:22:01:de:a3:6e:bc:
c9:ff:e4:c9:4b:26:ed:d2:d4:5d:88:70:52:b4:c0:
41:ba:33:f4:b3:ab:ca:16:d7:18:a3:11:30:3e:27:
66:6a:1b:2b:3a:b0:79:b2:c2:ef:42:e5:0c:8f:5a:
00:2d:97:fc:d2:11:35:f4:44:90:2a:a2:8a:d3:c5:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:EE:A6:11:6F:54:B2:AD:CA:EB:0C:38:60:5C:21:0C:77:17:29
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/januphFvVLKtyusMOGBcIQx3Fyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de42::/32
Signature Algorithm: sha256WithRSAEncryption
46:1c:a9:da:4b:40:b5:0c:f4:2d:46:3f:85:79:a8:41:51:86:
7b:33:76:f5:8c:0b:9c:3a:b7:69:a4:6f:e5:06:44:8c:52:94:
37:8e:44:a9:6c:1e:b9:6f:73:52:55:57:0c:95:8f:b4:ac:10:
a3:05:89:c5:5e:46:34:6c:85:78:71:6b:51:be:b9:fe:b2:a0:
e8:ce:f6:f2:5f:60:23:75:de:53:95:89:d6:eb:7e:de:cf:7d:
54:63:12:da:67:d1:6e:ec:2a:b3:b1:db:c4:da:2b:45:7c:95:
e0:9e:d6:d0:d9:cd:19:66:03:28:4c:b8:9d:8f:e6:a3:22:85:
e5:4d:a6:2e:ce:68:61:34:d3:3c:29:35:85:98:20:18:42:b1:
d0:d8:52:8b:8c:a1:a0:e6:c1:ae:77:10:df:5e:38:e2:90:c1:
ed:bb:32:43:6a:06:6f:0c:81:61:3f:b0:c9:39:19:ff:ab:79:
5e:51:dc:e2:36:7e:99:75:69:cb:7c:e7:57:0d:21:12:6c:64:
af:e6:21:cd:06:d6:c6:76:83:38:34:1d:c8:e6:0b:9c:17:9a:
9f:b5:fc:6e:43:c7:0a:42:a1:04:d2:1b:ea:82:83:b1:35:4b:
6a:c5:42:62:ff:42:8c:b6:af:5d:b5:5d:c0:49:87:7f:ed:14:
7a:c9:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:39 2024 by rpki-client on console-fra.rpki-client.org