Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/14A16HBCmyJD4SQTm2f5kDbt9TA.roa
File: 14A16HBCmyJD4SQTm2f5kDbt9TA.roa (raw, json)
Hash identifier: JG8oixRR4KJTM8kjPgSzuiCZzS+DTwfUuV8B017rF8M=
Subject key identifier: D7:80:35:E8:70:42:9B:22:43:E1:24:13:9B:67:F9:90:36:ED:F5:30
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018ED035710B0CCECFD2410EBF7225E03476
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/14A16HBCmyJD4SQTm2f5kDbt9TA.roa
Signing time: Fri 12 Apr 2024 02:49:06 +0000
ROA not before: Fri 12 Apr 2024 02:49:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215589
IP address blocks: 2a12:bec0:506::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Apr 2024 05:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d0:35:71:0b:0c:ce:cf:d2:41:0e:bf:72:25:e0:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 12 02:49:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d78035e870429b2243e124139b67f99036edf530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:cb:de:8a:de:06:d9:8a:0b:f3:e4:5d:ea:
76:cd:0b:98:fd:22:e9:60:01:4f:95:23:7a:76:f8:
5a:ce:df:a5:c7:6a:21:15:69:c3:f0:c7:27:67:fd:
e5:90:04:a1:41:8b:6f:72:be:0f:6a:8e:09:4d:9b:
4b:22:d3:16:14:66:b6:26:1d:bc:7b:20:cb:a7:a9:
7d:14:e4:2e:b2:02:cf:fb:ba:36:8f:ff:09:32:1f:
a2:31:37:06:f0:1c:04:ef:d7:21:08:fe:26:12:e6:
ab:71:78:6d:4d:17:96:6a:8d:5a:8d:15:5f:6e:91:
b5:93:3c:ab:50:0a:db:0c:99:19:61:00:c2:e9:25:
58:78:cd:72:f4:5d:7b:09:29:7e:85:43:57:38:d4:
84:f0:0b:11:4a:6d:97:31:0b:16:44:04:52:09:53:
22:1c:64:8a:3d:84:04:fa:ab:a4:80:03:6e:ce:63:
7e:12:e8:1f:8d:cb:cd:ba:5a:27:a0:62:c4:3e:df:
5b:6f:cc:e5:dd:4f:8b:53:3f:44:cb:98:2c:61:7e:
54:cc:8a:04:b2:68:77:54:dc:28:83:27:c4:54:02:
6c:f1:1d:73:e4:ad:45:60:b7:42:31:93:21:99:8c:
63:91:2a:20:f4:80:37:f0:7c:21:37:f7:70:24:05:
e8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:80:35:E8:70:42:9B:22:43:E1:24:13:9B:67:F9:90:36:ED:F5:30
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/14A16HBCmyJD4SQTm2f5kDbt9TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:506::/48
Signature Algorithm: sha256WithRSAEncryption
29:b5:13:57:7a:3c:b8:04:91:97:3f:4a:4e:7c:9e:99:85:37:
92:c7:a2:a7:ff:6c:6b:1d:9c:9c:e8:60:21:fc:64:1b:c0:24:
d0:49:bf:95:bc:6c:63:24:b0:ba:75:4e:86:2b:1d:89:24:7c:
4c:4f:5a:46:42:80:38:0e:42:bd:83:99:95:7e:a4:30:33:8e:
7d:ae:31:09:9b:03:16:c9:63:d2:2e:e3:0f:f5:a6:f8:d6:f2:
08:8a:e0:a9:ec:f0:62:0f:2b:52:02:5e:4e:ed:4c:02:ba:e4:
e1:5d:82:3e:dc:5a:34:e5:04:72:8b:01:5a:22:d2:47:ae:44:
90:62:e9:55:c4:15:31:fe:77:62:79:43:d5:4c:98:83:9d:84:
5d:55:c8:af:4b:c0:c9:9a:e9:d9:7d:f8:95:3d:4e:5b:95:92:
ca:dd:0e:da:cf:16:09:ec:1c:5d:44:19:8a:1a:4f:93:99:96:
28:fb:e1:88:ec:61:f0:11:e2:34:f4:9a:00:a1:13:07:1a:8c:
85:ff:a6:73:aa:82:bd:6d:0d:a3:ee:b8:35:6c:4f:74:8c:ec:
d9:f5:69:d8:5e:d6:07:50:b1:df:5b:51:5c:76:63:81:90:8a:
5c:af:43:08:05:64:2b:a9:f5:57:64:a5:4b:12:37:12:cb:1e:
0b:9f:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org