Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/rhD6MuZXivXmDtZEKc6SLe1JChE.roa
File: rhD6MuZXivXmDtZEKc6SLe1JChE.roa (raw, json)
Hash identifier: 2Y4M1nSJ3iKDW9/VfB/eHx5wqIXeq0BOScRycT9ZKz8=
Subject key identifier: AE:10:FA:32:E6:57:8A:F5:E6:0E:D6:44:29:CE:92:2D:ED:49:0A:11
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01902C6684C50F1BC9E34FD9C4975BA75791
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/rhD6MuZXivXmDtZEKc6SLe1JChE.roa
Signing time: Tue 18 Jun 2024 17:30:34 +0000
ROA not before: Tue 18 Jun 2024 17:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 2a12:ec0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 18 Jun 2024 19:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:66:84:c5:0f:1b:c9:e3:4f:d9:c4:97:5b:a7:57:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 18 17:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae10fa32e6578af5e60ed64429ce922ded490a11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bf:31:10:9a:cf:ff:a2:1f:58:ff:05:53:13:
e9:0a:c3:eb:23:ae:e7:77:f4:1a:43:11:fc:74:d0:
df:33:fd:cf:53:3a:41:5c:bd:d0:2a:cc:fc:e2:5f:
4a:c8:38:b1:79:82:ce:3a:5b:c7:5b:4f:c5:81:b4:
eb:ed:0f:70:c8:75:87:f7:d2:60:2c:0e:6d:65:56:
8e:f7:53:89:87:1d:05:1b:f3:54:85:6c:74:77:14:
69:d1:32:ca:27:68:a1:69:b1:97:80:f1:4c:15:60:
81:59:3b:fb:95:f5:f3:c5:ed:68:b7:83:1e:95:1e:
62:87:31:d7:8a:89:86:1d:50:61:75:95:12:ed:b2:
6c:7c:ed:59:3a:01:65:82:28:95:d6:3b:66:d9:a3:
17:3c:c3:df:19:8b:7c:95:10:50:05:70:92:64:a5:
90:7d:bc:e1:1c:31:0a:e2:b6:23:57:be:aa:51:14:
80:ea:80:99:a3:af:55:a8:5b:01:2c:98:a7:9b:3b:
e1:4b:67:2e:61:3a:f6:81:35:26:16:e4:9e:63:bb:
1e:dc:73:c4:2d:aa:de:a4:75:29:38:b8:98:ce:be:
6c:3a:62:e2:5c:d1:4e:28:b7:5f:e4:f7:c8:4a:42:
f3:0b:cd:98:6d:2e:7a:6a:1f:47:4a:2a:d5:b1:6b:
05:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:10:FA:32:E6:57:8A:F5:E6:0E:D6:44:29:CE:92:2D:ED:49:0A:11
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/rhD6MuZXivXmDtZEKc6SLe1JChE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:ec0::/29
Signature Algorithm: sha256WithRSAEncryption
20:a6:a8:70:d2:24:c1:1a:cb:6f:9a:6c:f5:f1:07:71:fc:71:
e0:83:d9:e1:20:a9:c7:da:95:76:29:a2:34:fb:c1:e4:a5:ff:
6c:ce:7f:d9:f9:22:4c:40:41:86:1c:64:9a:41:9b:ff:25:f3:
55:c8:d2:6e:88:7e:1b:c7:d3:54:ac:5e:2d:40:f4:1c:d2:8d:
f1:e0:2a:82:c4:4e:81:35:11:fd:bc:47:2d:4f:05:07:ba:58:
9f:22:db:60:a6:05:a3:fd:64:f3:0c:f2:d5:cf:b4:fb:20:bc:
59:cf:86:2a:a5:c0:54:5b:38:18:92:9c:b9:1b:28:0b:43:6b:
ac:8c:24:f1:17:6c:74:e0:e1:e8:a2:94:46:4f:bd:75:c0:a2:
d5:bc:01:19:6d:b4:cf:ea:10:3e:56:3b:1d:ec:9a:9d:7c:da:
29:df:1a:a4:1d:a7:ba:33:f8:42:00:3f:11:16:fb:cb:21:28:
ad:ae:95:0d:80:f5:67:37:85:89:40:8a:56:21:06:c3:c5:d4:
d6:0b:7b:96:90:34:e5:ea:ff:fd:64:d7:29:01:7f:5c:a8:f0:
5a:0f:19:8c:17:03:a3:4c:a4:8e:7e:aa:3f:76:ca:fe:14:2e:
c5:d4:40:39:ac:4a:fa:37:6a:0e:33:48:40:2c:e2:33:14:60:
da:6a:0b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 07:20:08 2024 by rpki-client on console.sobornost.net