Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/7glwI9M6cxo7oDXm96FNRI3MhWE.roa
File: 7glwI9M6cxo7oDXm96FNRI3MhWE.roa (raw, json)
Hash identifier: pqVtnTYJHPO0eqm+yPgHnnLWLW4L9xZSbeH6JNpiuaY=
Subject key identifier: EE:09:70:23:D3:3A:73:1A:3B:A0:35:E6:F7:A1:4D:44:8D:CC:85:61
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 018ED7BD8A211C85A87E14E0DE425CE94D10
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/7glwI9M6cxo7oDXm96FNRI3MhWE.roa
Signing time: Sat 13 Apr 2024 13:55:06 +0000
ROA not before: Sat 13 Apr 2024 13:55:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215186
IP address blocks: 2a12:99c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 May 2024 15:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d7:bd:8a:21:1c:85:a8:7e:14:e0:de:42:5c:e9:4d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Apr 13 13:55:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee097023d33a731a3ba035e6f7a14d448dcc8561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:96:87:c5:54:8e:49:12:a5:83:ef:e3:c5:
8c:49:bc:34:22:96:74:d9:b9:73:06:fc:6d:45:06:
df:3f:3b:94:09:9e:70:0e:db:02:51:dd:86:71:b5:
da:d5:de:49:98:d3:04:1b:20:01:c8:88:34:2c:b4:
70:e9:c9:df:e9:e0:3e:a8:8c:bd:c7:b4:94:61:96:
ae:10:0c:17:9f:d0:74:03:b3:e9:e2:d0:f2:8e:b8:
18:cd:48:50:c1:b1:84:5d:d7:a9:d7:91:fc:9e:f7:
8d:55:8c:c9:d0:93:9b:b1:db:2f:15:fa:07:bf:0d:
e2:f5:bb:20:63:9f:9f:a8:70:18:0c:a9:27:33:35:
87:6e:37:1d:e9:a1:63:85:0d:84:6f:63:b4:e5:91:
cd:7a:6c:40:fc:b1:10:02:63:a9:94:63:28:af:56:
44:c2:e7:08:95:25:94:22:9e:86:32:b7:2d:dc:9f:
47:1e:ea:5c:85:99:8c:b0:c2:05:f1:61:c8:d5:8d:
81:86:92:33:eb:2c:86:92:fd:c8:44:4a:ee:60:47:
c4:2c:68:47:65:9a:b5:5e:4b:c8:df:69:46:de:5c:
e8:d5:5d:1a:3f:22:ef:70:c6:24:15:5d:6a:3b:4b:
a8:a0:de:49:81:5c:24:f7:6f:3c:3c:21:8e:3a:b9:
93:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:09:70:23:D3:3A:73:1A:3B:A0:35:E6:F7:A1:4D:44:8D:CC:85:61
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/7glwI9M6cxo7oDXm96FNRI3MhWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:99c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:90:05:70:f1:8b:36:f1:35:ee:09:fc:25:c5:20:df:4a:09:
e7:e2:dd:e5:5e:1a:9f:da:01:1e:86:c9:be:eb:ee:a5:7a:89:
81:23:fd:dc:89:72:35:23:b5:f1:e2:29:3d:20:c3:fa:f8:68:
84:a0:01:ac:08:c4:94:16:c0:2b:b0:d4:51:fb:22:23:3c:ed:
94:ee:ef:f1:7d:d2:4a:c4:d1:22:3e:a6:b4:8e:28:ba:de:c5:
9d:94:06:b4:22:24:f7:46:f6:e0:67:45:1d:63:7c:e9:a5:70:
d1:c0:47:48:67:2a:38:39:8d:52:8f:1a:d1:0f:24:a6:93:dd:
89:2f:4a:c4:cc:fb:03:bb:05:90:40:96:0f:09:c6:87:41:67:
6a:cc:62:30:dd:66:e3:fb:34:f7:0b:28:b2:94:7f:d7:02:78:
2a:41:14:d2:f3:25:65:c8:13:be:ce:8d:07:f8:7a:2a:3a:03:
f4:50:14:28:a5:ef:86:45:ab:84:e7:c0:64:d8:c0:ec:77:d2:
03:3a:49:a6:6e:17:a8:b7:0e:d1:47:b8:18:f0:f8:52:d0:8b:
95:ce:9d:55:9e:fc:5d:20:27:46:44:38:a2:c0:30:33:aa:98:
23:9e:e6:37:a8:1a:28:d8:31:50:30:ed:fd:50:0b:e5:6b:86:
a0:70:2f:36
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY7XvYohHIWofhTg3kJc6U0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGMxYTgwMzJmNTdmMjJiMDE0NTRhNjVlZjMyZGVhNzc0
OTZkMGIwHhcNMjQwNDEzMTM1NTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTA5NzAyM2QzM2E3MzFhM2JhMDM1ZTZmN2ExNGQ0NDhkY2M4NTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp02Wh8VUjkkSpYPv48WMSbw0IpZ0
2blzBvxtRQbfPzuUCZ5wDtsCUd2GcbXa1d5JmNMEGyAByIg0LLRw6cnf6eA+qIy9
x7SUYZauEAwXn9B0A7Pp4tDyjrgYzUhQwbGEXdep15H8nveNVYzJ0JObsdsvFfoH
vw3i9bsgY5+fqHAYDKknMzWHbjcd6aFjhQ2Eb2O05ZHNemxA/LEQAmOplGMor1ZE
wucIlSWUIp6GMrct3J9HHupchZmMsMIF8WHI1Y2BhpIz6yyGkv3IREruYEfELGhH
ZZq1XkvI32lG3lzo1V0aPyLvcMYkFV1qO0uooN5JgVwk9288PCGOOrmTbQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFO4JcCPTOnMaO6A15vehTUSNzIVhMB8GA1UdIwQY
MBaAFLyMGoAy9X8isBRUpl7zLep3SW0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQt
YTU2NGVjMDExYzVkLzEvN2dsd0k5TTZjeG83b0RYbTk2Rk5SSTNNaFdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQtYTU2NGVjMDExYzVk
LzEvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhKZwDAN
BgkqhkiG9w0BAQsFAAOCAQEAMpAFcPGLNvE17gn8JcUg30oJ5+Ld5V4an9oBHobJ
vuvupXqJgSP93IlyNSO18eIpPSDD+vhohKABrAjElBbAK7DUUfsiIzztlO7v8X3S
SsTRIj6mtI4out7FnZQGtCIk90b24GdFHWN86aVw0cBHSGcqODmNUo8a0Q8kppPd
iS9KxMz7A7sFkECWDwnGh0FnasxiMN1m4/s09wsospR/1wJ4KkEU0vMlZcgTvs6N
B/h6KjoD9FAUKKXvhkWrhOfAZNjA7HfSAzpJpm4XqLcO0Ue4GPD4UtCLlc6dVZ78
XSAnRkQ4osAwM6qYI57mN6gaKNgxUDDt/VAL5WuGoHAvNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:07 2024 by rpki-client on console-ams.rpki-client.org