Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1bCDiPw-xWQuKDgPHIAsvS7dIvo.roa
File: 1bCDiPw-xWQuKDgPHIAsvS7dIvo.roa (raw, json)
Hash identifier: KsU4cvihp6mISha+1VhBpmzD1v4tKr7Dqo7XxVP5/BY=
Subject key identifier: D5:B0:83:88:FC:3E:C5:64:2E:28:38:0F:1C:80:2C:BD:2E:DD:22:FA
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018A7525496DA2E08400127B71E0FCDF0D61
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1bCDiPw-xWQuKDgPHIAsvS7dIvo.roa
Signing time: Fri 08 Sep 2023 14:14:52 +0000
ROA not before: Fri 08 Sep 2023 14:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216330
IP address blocks: 2a12:bec0:df0::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:75:25:49:6d:a2:e0:84:00:12:7b:71:e0:fc:df:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 8 14:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d5b08388fc3ec5642e28380f1c802cbd2edd22fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:ea:4c:d0:1e:d4:6a:0f:2e:bb:33:5b:4a:
0e:02:fa:02:fb:99:5a:e3:ad:24:0e:38:40:ce:f9:
70:40:9b:97:99:4d:3e:1a:3f:c3:72:ad:18:dc:1c:
c8:d8:c8:1b:4e:23:47:ed:ff:2d:df:86:01:a4:fc:
14:57:09:84:ce:8e:1c:47:ec:b4:47:00:97:b1:47:
77:6e:9f:89:66:c6:aa:55:eb:fc:b0:7d:35:c3:84:
0e:97:ea:20:42:85:38:e9:77:7d:19:3a:82:73:92:
91:e0:06:ec:40:e9:a8:07:19:06:f4:ac:32:fa:2e:
aa:4c:55:1f:00:66:d3:11:ca:bf:48:c4:24:6c:57:
a0:23:1d:7b:73:e0:d5:14:dd:d3:ab:35:3c:06:51:
cf:dc:66:fa:8a:bc:23:09:e1:2e:17:30:91:ca:95:
2d:24:da:b6:2a:a0:51:40:b8:c5:5b:aa:63:00:2d:
d6:7c:8f:cf:30:c7:8f:6f:ca:3a:bb:c1:94:1c:9e:
e5:1c:1b:ae:a1:93:e7:dc:56:f5:15:19:ee:02:be:
27:06:58:b8:94:dc:e6:aa:ff:df:ce:68:cb:98:35:
dc:43:3c:5e:da:c1:44:47:fe:d7:db:ff:59:96:4f:
5a:10:c8:85:33:25:10:90:2f:77:9f:b6:42:2a:32:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B0:83:88:FC:3E:C5:64:2E:28:38:0F:1C:80:2C:BD:2E:DD:22:FA
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/1bCDiPw-xWQuKDgPHIAsvS7dIvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:df0::/44
Signature Algorithm: sha256WithRSAEncryption
bb:31:af:6d:a3:e7:da:81:13:5a:44:95:6c:ec:6f:f6:b0:d0:
5e:e4:70:81:d9:7f:11:cd:75:57:8f:ee:10:60:56:2c:77:36:
b0:7b:85:d7:d3:8c:f3:a6:94:d6:ee:aa:6c:c3:4d:ab:ff:7c:
5d:17:14:54:41:56:22:9b:49:03:93:e1:b7:4f:1c:38:30:23:
a5:d5:d8:7c:b2:59:85:1b:ea:1e:a8:5e:89:ef:99:68:98:11:
a0:f2:fb:59:9a:8c:ec:e9:15:39:59:b3:7c:49:9b:90:6a:c0:
d2:db:aa:9c:22:2e:ff:d7:89:bf:77:57:7d:c6:25:25:6a:7a:
af:7a:cb:2e:e8:5f:0c:66:e5:6f:85:ef:5b:a2:f1:07:54:ae:
4f:fe:a4:cf:19:d3:b2:88:f1:3c:6e:e3:48:86:87:da:a6:b9:
49:60:a0:53:d4:ea:40:83:7d:d1:4c:5b:5d:b3:f8:43:97:a6:
a3:bd:ce:2d:26:95:54:1c:86:04:ee:80:98:0c:b2:d7:69:4e:
fb:73:56:6e:3c:bf:e6:19:49:03:a7:cf:28:98:87:8c:38:ba:
cb:bf:ff:92:48:0b:09:c0:4a:f9:41:0e:0f:69:1f:4c:ba:59:
6e:36:0f:74:04:38:11:b2:ea:ce:8f:07:16:ae:5a:b2:93:cc:
d4:17:17:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org