Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/BamIwX0Ne7_6oChvQZMo3LZbm84.roa
File: BamIwX0Ne7_6oChvQZMo3LZbm84.roa (raw, json)
Hash identifier: RyFWSdDx+D4zDcPeB4ByWvfXRHjHf98B/kIFdlP19hs=
Subject key identifier: 05:A9:88:C1:7D:0D:7B:BF:FA:A0:28:6F:41:93:28:DC:B6:5B:9B:CE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018AFA2310315D0828A70967D55111972A67
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/BamIwX0Ne7_6oChvQZMo3LZbm84.roa
Signing time: Wed 04 Oct 2023 10:01:56 +0000
ROA not before: Wed 04 Oct 2023 10:01:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216220
IP address blocks: 2a12:bec0:520::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:23:10:31:5d:08:28:a7:09:67:d5:51:11:97:2a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 4 10:01:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=05a988c17d0d7bbffaa0286f419328dcb65b9bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:21:00:63:1e:be:07:47:97:80:6d:47:52:
d3:e6:70:40:03:27:66:9b:14:af:ab:33:ec:3c:5b:
4d:0c:8f:7f:6f:50:a2:4e:67:f7:fe:ad:b0:66:40:
58:f4:6a:a5:b9:63:11:fd:0c:2a:31:e2:84:4f:97:
81:17:76:2e:d0:b7:72:ec:54:6f:e1:f6:5d:20:7a:
d5:c8:1e:72:a6:07:20:5d:d3:9d:ba:97:82:5c:ee:
fd:b4:dc:d1:5c:b8:63:47:b4:a0:e7:82:20:12:57:
80:a9:59:44:72:bb:17:77:02:e9:a8:36:fc:9e:80:
62:e7:b5:e6:98:5c:b5:e1:b1:42:54:5e:c3:fe:b1:
75:96:46:cb:a8:3c:cb:98:6b:3d:04:cb:72:7c:25:
fa:69:8a:01:4e:d4:75:30:cf:47:21:4b:8d:76:44:
20:00:ba:a2:2f:63:21:c0:c5:85:50:32:1d:0e:74:
c1:df:3f:9a:be:b9:7d:a8:8e:aa:66:a2:e6:93:85:
1f:03:bf:5e:3a:28:54:a6:81:a9:47:1b:4d:f7:7e:
91:a4:99:50:b6:74:c7:19:a3:bd:c9:71:86:21:b6:
1c:b1:3a:0a:c6:3f:dc:16:b9:10:31:da:03:81:09:
48:64:7b:8c:d2:ac:30:fe:a8:b8:93:80:eb:4e:4e:
9a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:88:C1:7D:0D:7B:BF:FA:A0:28:6F:41:93:28:DC:B6:5B:9B:CE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/BamIwX0Ne7_6oChvQZMo3LZbm84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:520::/44
Signature Algorithm: sha256WithRSAEncryption
5b:8d:44:bd:1a:b8:20:0a:85:13:26:78:21:85:d3:87:82:a0:
9f:08:5f:cd:3c:70:ff:7b:a7:8d:e8:7a:63:a6:ce:4e:a8:94:
fe:55:71:a6:da:04:0e:77:01:f6:9a:20:5c:61:2a:dd:da:60:
9f:6e:3e:9c:11:38:a6:75:b3:a4:7f:7d:5b:21:c1:a5:c1:00:
14:2e:8f:fd:e5:8b:ca:c4:04:55:cd:18:82:4e:df:c3:1d:35:
9d:3e:af:d2:5c:99:42:49:13:f4:2e:8b:89:97:81:7e:c8:e5:
34:41:c2:a4:1e:7b:22:e2:6d:45:cb:28:85:81:0d:88:15:0b:
e0:64:5c:44:9f:2a:30:60:75:b6:cb:b7:e4:b7:c3:4e:66:fb:
99:ea:19:4c:26:c5:41:0d:c8:be:65:ef:a3:fc:d2:3b:31:c6:
e5:ad:5a:f9:cb:1c:6c:92:b5:6c:81:b6:be:b7:66:8b:75:c9:
3f:e6:87:b3:d0:f6:3e:ba:3d:38:98:3c:18:6a:d8:39:87:14:
da:c4:f0:54:40:de:52:59:e6:24:89:64:c4:67:26:02:47:ec:
86:61:07:a1:a4:0f:41:e0:9b:3a:cd:24:97:d4:45:a9:e6:75:
1a:d2:4e:f0:d8:99:61:9c:20:c0:d2:1f:b2:1b:f6:31:d5:0d:
9a:86:0d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org