Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/E3fsqK2yjfph1ay5c9urEYvX4L4.roa
File: E3fsqK2yjfph1ay5c9urEYvX4L4.roa (raw, json)
Hash identifier: YVs42dizKCF1xljgY+vQMCVkHf8cIRP0XolLeddoN4Q=
Subject key identifier: 13:77:EC:A8:AD:B2:8D:FA:61:D5:AC:B9:73:DB:AB:11:8B:D7:E0:BE
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C474BBD1589A49759EFAF8ECC7E6F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/E3fsqK2yjfph1ay5c9urEYvX4L4.roa
Signing time: Wed 01 Jan 2025 01:47:54 +0000
ROA not before: Wed 01 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2a12:bec0:230::/44 maxlen: 48
2a12:bec0:5df::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Feb 2025 23:47:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:47:4b:bd:15:89:a4:97:59:ef:af:8e:cc:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1377eca8adb28dfa61d5acb973dbab118bd7e0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ef:78:59:0e:22:b9:5e:92:17:5c:25:21:4a:
d7:f9:18:1b:77:19:96:a1:ec:98:d5:d0:0f:7c:5d:
91:28:2e:a3:f6:4d:33:4a:68:fb:bc:30:0c:58:91:
e5:5b:ea:6f:43:27:bc:26:e1:c6:ba:2e:23:43:94:
41:ea:b0:13:ef:1d:1f:20:69:a5:96:c2:29:36:15:
c4:c4:d5:bc:ac:f4:44:9c:e1:f9:60:75:23:f7:01:
0c:72:85:0d:3b:64:62:11:02:f7:85:33:4d:e3:da:
17:e4:43:45:42:2f:30:cf:9f:9c:aa:18:ec:8c:b8:
79:fe:ff:6b:38:32:d8:9a:a5:25:c4:06:5b:bd:62:
7b:2f:1e:e8:78:9f:17:16:2f:5f:de:96:f1:c3:24:
d1:99:b8:40:c8:69:22:19:d7:7b:69:f6:4c:d5:db:
67:9a:16:49:b8:20:0a:f5:48:aa:0d:de:87:3f:12:
14:7b:1d:6b:93:29:65:42:18:32:12:a6:94:8a:27:
41:ea:90:70:22:7b:6f:39:fc:b4:6e:b9:e9:ba:c1:
12:0a:31:e3:49:3d:61:b1:fa:26:c2:85:65:ca:69:
be:a4:b8:e7:d6:10:2c:ec:5d:51:c5:cb:43:61:5c:
4c:4a:01:d9:40:ec:a8:e4:99:5b:99:7e:66:2f:9d:
df:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:77:EC:A8:AD:B2:8D:FA:61:D5:AC:B9:73:DB:AB:11:8B:D7:E0:BE
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/E3fsqK2yjfph1ay5c9urEYvX4L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:230::/44
2a12:bec0:5df::/48
Signature Algorithm: sha256WithRSAEncryption
34:ee:e9:dd:b9:01:f7:4e:77:82:fb:a3:b7:66:ed:cd:cc:65:
61:ab:52:5a:83:51:0a:d5:25:e0:bf:bc:2f:1c:89:db:a5:40:
a0:03:ca:9d:ba:ec:92:24:96:7c:32:ce:51:57:e6:ce:8b:aa:
bd:6f:b4:b0:1c:72:b5:88:94:ee:61:90:a9:ea:2c:86:aa:4c:
e4:1a:5b:55:b8:86:6d:1f:cc:22:74:9d:57:d3:28:44:1d:31:
ea:a7:ea:cc:4f:48:fd:b7:bf:6e:d1:2b:40:72:63:c9:32:f6:
df:07:c8:73:d9:1b:fd:23:e6:b3:4a:7b:2b:ae:55:09:03:44:
69:2f:b7:e3:bf:d6:87:df:ef:3f:e7:42:0b:7f:cf:ee:8e:17:
1c:e8:30:f1:2e:1d:75:93:a1:cf:da:6a:d6:01:39:29:ac:48:
95:9e:0f:d5:0b:72:af:3e:e5:5d:e9:e3:6e:a5:dc:40:78:6c:
28:91:1a:75:a4:cf:91:4a:87:c4:88:8a:bd:78:d8:f6:28:a8:
79:50:d1:11:60:ad:4e:ad:12:99:c4:c7:2d:17:92:09:65:37:
a5:0a:a5:91:6f:1e:c0:62:12:91:64:e0:5e:cb:a2:e4:80:57:
01:52:4f:d9:d3:69:99:21:a9:fd:bf:a1:f6:a3:19:8c:e1:0c:
54:db:4b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:57:07 2025 by rpki-client