Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/G-yt8N_YXzJ-xudZuHY04cnlIP8.roa
File: G-yt8N_YXzJ-xudZuHY04cnlIP8.roa (raw, json)
Hash identifier: 5/9Rc3+hwTuDREp1SWgE/1szKzkhQvfwmuCduZ6LVaA=
Subject key identifier: 1B:EC:AD:F0:DF:D8:5F:32:7E:C6:E7:59:B8:76:34:E1:C9:E5:20:FF
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D02F7A5E7FE6220279B21927AB957B45C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/G-yt8N_YXzJ-xudZuHY04cnlIP8.roa
Signing time: Sat 13 Jan 2024 13:16:40 +0000
ROA not before: Sat 13 Jan 2024 13:16:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215745
IP address blocks: 2a12:bec0:630::/44 maxlen: 48
2a12:bec0:638::/46 maxlen: 46
Validation: Failed, certificate revoked on Sun 14 Jan 2024 22:23:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:02:f7:a5:e7:fe:62:20:27:9b:21:92:7a:b9:57:b4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 13 13:16:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1becadf0dfd85f327ec6e759b87634e1c9e520ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:17:62:54:10:99:e4:57:4c:86:39:ce:e8:
65:cd:7c:fe:00:75:22:ef:dc:43:bd:73:9f:9f:ae:
9f:37:ce:2e:12:3c:e5:2b:1c:bb:26:bd:c3:17:f9:
25:28:ca:d0:16:b4:80:09:96:24:0e:63:c9:b4:7a:
72:27:e7:21:3f:ca:d1:1f:b8:b2:d2:fd:fc:a3:ab:
dd:dd:27:fd:4a:24:58:e1:9d:75:de:bd:6b:15:38:
a8:9e:ba:33:44:23:6f:79:31:19:89:1f:9a:13:fe:
50:f7:8b:40:f2:fd:aa:59:8e:87:73:8d:c5:4b:12:
99:6c:fb:dd:5f:0b:c6:29:95:48:db:f3:75:6c:7a:
7f:9c:e4:90:7e:21:fb:f9:7c:87:9b:86:a6:fe:80:
41:24:dd:dd:43:77:51:bd:06:8a:f7:9a:70:1f:d1:
df:4e:3a:20:69:c0:c5:93:3b:25:5b:39:61:2a:7b:
e9:5e:80:a9:08:96:d1:84:5a:86:43:30:87:10:eb:
5f:fe:da:32:52:49:22:a6:79:89:3d:4d:80:50:a0:
7b:4e:57:92:4f:59:65:78:26:ed:74:d7:0c:c8:56:
6e:c5:9d:0d:55:6b:80:82:dc:a7:1c:3b:33:d3:d4:
e7:3b:70:d5:62:91:3a:18:b6:fd:66:d5:fb:dd:18:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:AD:F0:DF:D8:5F:32:7E:C6:E7:59:B8:76:34:E1:C9:E5:20:FF
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/G-yt8N_YXzJ-xudZuHY04cnlIP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:630::/44
Signature Algorithm: sha256WithRSAEncryption
1c:f3:c1:b2:bb:46:4d:f4:56:59:a1:f0:7d:01:0a:04:24:ed:
a6:20:b7:13:9f:e1:95:92:77:4b:c7:dd:b7:cd:68:4d:fa:6b:
d6:79:f4:5c:6c:c4:36:84:9b:63:1f:f3:6a:3d:21:f8:d3:88:
13:6e:3c:d9:55:02:f6:43:b8:7e:2c:e8:b0:24:70:b0:92:3d:
e2:e3:79:5c:9a:08:e1:80:f1:77:52:e2:24:5c:60:7b:0f:70:
fd:08:ae:f6:d0:d8:59:00:49:1d:94:8a:b7:c5:58:fc:f7:8e:
ee:c4:0d:37:02:57:50:88:41:14:d1:b5:62:52:5a:37:1f:87:
f8:59:45:16:e6:bf:19:14:f4:9e:2b:a4:3b:4f:3e:6d:db:d9:
95:a6:31:d5:e7:33:37:9e:af:d4:df:6f:b6:78:5b:36:de:99:
01:68:6f:b9:25:20:93:1d:0d:59:3b:86:d2:66:c3:bd:8f:a4:
95:32:a2:37:9f:3b:48:91:54:9b:27:e2:1d:5a:10:7d:1c:2e:
9d:90:db:06:7a:0b:29:10:ae:9d:51:5c:60:a7:28:7f:22:81:
31:01:e1:df:fa:ec:4b:20:52:74:4e:f1:38:c7:0c:24:a3:85:
65:b5:1a:92:23:54:8b:c2:6c:cc:02:74:61:0b:89:d2:5a:d3:
92:38:0a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org