Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4MI4aeqXazPMnGL3VU8Ps7y4u20.roa
File: 4MI4aeqXazPMnGL3VU8Ps7y4u20.roa (raw, json)
Hash identifier: Ux0Lw42jLwboDX4kpo7XcYZI7yRgTlcWDa20tm/jZpw=
Subject key identifier: E0:C2:38:69:EA:97:6B:33:CC:9C:62:F7:55:4F:0F:B3:BC:B8:BB:6D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018EF4DA39A92235F576A4CF04ED61D15F9A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4MI4aeqXazPMnGL3VU8Ps7y4u20.roa
Signing time: Fri 19 Apr 2024 05:35:26 +0000
ROA not before: Fri 19 Apr 2024 05:35:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215589
IP address blocks: 2a12:bec0:504::/48 maxlen: 48
2a12:bec0:505::/48 maxlen: 48
2a12:bec0:506::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Apr 2024 20:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f4:da:39:a9:22:35:f5:76:a4:cf:04:ed:61:d1:5f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 19 05:35:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0c23869ea976b33cc9c62f7554f0fb3bcb8bb6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:46:22:3e:14:d9:b0:99:71:54:67:11:e5:
45:8f:bd:21:d0:35:33:3f:c4:4b:54:03:01:da:60:
04:03:a8:4c:61:09:34:11:3d:47:e4:2d:c4:fb:58:
5a:0d:be:d3:1d:45:06:65:ad:cd:16:f4:0f:9a:bf:
82:4c:b1:9a:87:8d:8c:f1:79:bb:56:c0:d0:a5:eb:
17:6e:a5:e5:f0:59:dd:93:99:f9:3f:24:ab:65:59:
3b:2e:13:3f:15:1d:e4:9c:e1:61:33:c2:82:b0:4e:
e3:c8:04:e4:01:4e:07:c2:2f:de:b1:1b:d7:c8:f6:
0c:30:da:45:e5:76:aa:c2:bd:e6:b9:22:82:ad:a7:
95:1f:c5:e4:ee:a0:b2:0f:63:5c:4c:fd:32:5f:35:
46:00:fa:d7:6e:9e:da:99:bd:ba:b7:68:59:fe:90:
dd:1c:60:68:a9:56:d6:61:44:59:4a:56:4e:eb:73:
80:36:54:a2:10:07:71:6c:7f:85:3e:c7:47:0a:53:
9e:28:96:86:07:56:20:93:4b:99:d7:51:0b:5b:f6:
35:6b:20:18:26:ea:3e:04:3a:4b:5a:c9:37:83:1a:
df:a5:2a:52:64:fe:75:4f:bb:45:a2:37:4e:f9:41:
42:e0:e2:2b:e4:57:e4:75:93:67:a0:07:dc:65:f8:
a1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:38:69:EA:97:6B:33:CC:9C:62:F7:55:4F:0F:B3:BC:B8:BB:6D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/4MI4aeqXazPMnGL3VU8Ps7y4u20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:504::-2a12:bec0:506:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2f:ac:49:36:cb:5e:1f:74:37:e7:70:ed:6e:fe:95:fe:d7:ef:
88:5d:db:a4:59:5c:0a:1c:c7:ed:b2:73:3b:6d:c6:32:18:4c:
1a:48:5a:27:7d:1d:15:e1:d7:8d:7d:6c:cb:1b:53:b8:01:65:
b9:62:b6:17:70:2d:0e:49:ac:9c:45:6f:24:0a:a5:5a:4a:db:
be:bb:0f:7d:40:37:f4:ae:3c:93:2f:22:78:f4:98:20:6a:9e:
a6:c3:0a:f5:95:01:1f:ba:ad:49:a9:f2:a4:c9:0f:92:50:59:
da:af:f5:76:eb:7e:09:84:a9:95:f9:ef:1c:d2:7f:11:e4:e4:
b6:99:23:0a:b2:41:5a:d4:69:bf:4d:0b:89:6a:2b:d2:9d:6d:
d7:84:d2:22:a5:58:2b:6a:3a:f5:25:8b:88:fa:ad:da:4f:4f:
93:64:f7:51:c1:bc:dc:89:37:1f:71:d1:33:61:b1:7b:d7:eb:
21:f4:04:99:d5:52:ec:a1:f8:ef:b1:6b:79:ab:0a:f9:c7:c7:
55:92:7b:83:fd:60:65:6e:5a:41:db:73:bc:89:46:e5:54:e8:
4a:95:a2:45:10:8b:db:86:3c:ca:65:f9:98:2d:8f:cb:00:0b:
58:9f:8a:f5:ab:2f:00:84:c5:d8:15:3b:56:97:dc:83:77:de:
de:16:cb:c8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org