Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9Q4_5NeYxQ53edK3Ch0JfEMa77E.roa
File: 9Q4_5NeYxQ53edK3Ch0JfEMa77E.roa (raw, json)
Hash identifier: TA6GQ4Vb8jRFT8FpTfXGokifuI6Zb/KBkaXOUiWJSfA=
Subject key identifier: F5:0E:3F:E4:D7:98:C5:0E:77:79:D2:B7:0A:1D:09:7C:43:1A:EF:B1
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C66DE47133FEDB980E2C1D0EF22C1
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9Q4_5NeYxQ53edK3Ch0JfEMa77E.roa
Signing time: Wed 01 Jan 2025 01:48:02 +0000
ROA not before: Wed 01 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214417
IP address blocks: 2a12:bec4:1280::/44 maxlen: 44
2a12:bec4:1480::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 01 Jan 2025 18:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:66:de:47:13:3f:ed:b9:80:e2:c1:d0:ef:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f50e3fe4d798c50e7779d2b70a1d097c431aefb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:48:10:03:91:9e:78:14:e2:a9:c9:05:ca:
16:7d:9f:42:42:53:d2:8c:ef:5a:58:87:12:09:bd:
46:0e:e7:50:d8:e8:f1:b0:c7:ee:23:a4:aa:74:af:
56:18:f6:5b:a7:47:1d:48:8e:48:27:a0:10:8a:06:
02:78:a3:79:8c:5b:2b:63:f6:9c:a3:48:a9:04:6a:
34:b5:d7:46:34:70:60:94:ec:76:9d:8b:d8:f2:d0:
6d:cc:c6:5a:f8:51:9d:6d:ae:29:5e:1f:df:1a:44:
f2:14:da:3a:79:f7:55:73:c5:81:ec:2a:ff:e0:f2:
08:80:b9:97:46:58:97:96:a3:f6:b0:44:f6:cc:2e:
40:b3:47:d7:d5:01:d1:65:42:1c:4c:ce:f7:74:c0:
87:07:06:21:ed:3b:46:0b:4f:33:9b:99:80:f3:26:
1b:80:95:03:37:02:8d:0e:cb:9a:c5:19:e9:d8:1e:
b4:e9:26:bb:e4:2b:a4:16:b3:29:59:8d:66:ca:b9:
2e:c0:85:a6:39:1a:04:8b:d4:91:3c:62:16:75:d8:
5a:6e:f7:65:db:d7:80:cb:86:db:58:c4:1f:58:74:
fd:23:3b:1c:89:ee:c5:e8:cd:e7:98:41:94:4f:e2:
54:23:49:09:48:2c:49:99:16:65:b1:f9:b8:24:c9:
f0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0E:3F:E4:D7:98:C5:0E:77:79:D2:B7:0A:1D:09:7C:43:1A:EF:B1
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/9Q4_5NeYxQ53edK3Ch0JfEMa77E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1280::/44
2a12:bec4:1480::/44
Signature Algorithm: sha256WithRSAEncryption
73:71:80:20:a6:d1:a4:d2:65:bb:60:c3:09:3d:29:79:3c:fa:
f6:56:17:b6:21:e7:56:78:16:38:b9:b5:25:57:5b:cf:f4:2f:
d1:69:ff:be:3c:a4:42:e8:6e:da:a2:c1:e2:13:3c:87:0b:94:
83:4c:59:48:98:52:a7:0d:fb:0e:17:65:f9:2b:94:e3:af:d2:
e7:4a:16:67:84:39:b8:bf:44:0f:44:89:58:3f:96:e5:97:fe:
44:a1:91:9c:84:76:bd:99:7b:77:88:ad:8b:0c:e4:d3:56:f3:
c2:56:13:df:f9:61:6e:19:04:8c:71:84:95:19:89:98:fa:ec:
32:a0:98:ea:96:53:a0:41:03:54:a5:03:c1:d3:11:ae:04:09:
06:0c:51:1a:ba:22:43:45:62:d0:bb:08:18:4a:5d:e7:b8:0c:
4d:c1:42:2d:fb:93:41:9e:c9:1e:96:ed:86:90:bc:c8:56:33:
a0:ab:e9:f6:42:67:22:46:69:4b:a8:c0:d5:bf:62:e1:1b:16:
88:ca:ed:17:54:63:28:55:bd:86:b9:2b:da:95:df:f5:06:f4:
63:99:8c:e5:bc:96:ad:30:7e:54:e7:1a:04:58:a6:49:80:12:
7b:7c:8a:24:3f:82:f3:58:6c:3d:73:95:d5:7c:c0:31:c3:df:
d0:df:4b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:00:09 2025 by rpki-client