Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JpLq1LMF4YdxJ0wOqfvXmJ12izI.roa
File: JpLq1LMF4YdxJ0wOqfvXmJ12izI.roa (raw, json)
Hash identifier: kzDzCCxnuN+FkwsAGgDECS7c3E8SsHMlHlhd48sfWE8=
Subject key identifier: 26:92:EA:D4:B3:05:E1:87:71:27:4C:0E:A9:FB:D7:98:9D:76:8B:32
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018EF0122A60B82E3559746ECA14269F5FBC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JpLq1LMF4YdxJ0wOqfvXmJ12izI.roa
Signing time: Thu 18 Apr 2024 07:18:26 +0000
ROA not before: Thu 18 Apr 2024 07:18:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216311
IP address blocks: 2a12:bec0:500::/46 maxlen: 48
2a12:bec0:500::/48 maxlen: 48
2a12:bec0:501::/48 maxlen: 48
2a12:bec0:502::/48 maxlen: 48
2a12:bec0:503::/48 maxlen: 48
2a12:bec0:509::/48 maxlen: 48
2a12:bec0:50b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Apr 2024 20:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f0:12:2a:60:b8:2e:35:59:74:6e:ca:14:26:9f:5f:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 18 07:18:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2692ead4b305e18771274c0ea9fbd7989d768b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d7:93:32:ab:8e:66:b6:fd:d0:8f:bd:79:66:
15:3a:c4:6d:47:e5:ff:41:f3:ca:c6:d5:db:5d:62:
1f:32:e9:79:a8:af:78:ed:1d:67:bc:09:c1:e8:fe:
dc:38:37:36:3f:d2:d5:77:0c:a3:c5:48:35:8f:09:
b5:13:c5:81:14:7a:ed:51:d4:5b:ff:75:71:da:bd:
12:9b:04:89:a1:dd:f0:13:31:31:c0:a5:ce:39:61:
12:c7:86:a7:2a:5f:e6:f0:f9:a9:41:ff:eb:8f:e4:
81:5b:21:96:32:93:0d:01:4b:8a:4e:2e:fd:68:a1:
de:26:3f:d3:2b:d6:82:42:93:b5:57:d2:16:12:b4:
fe:f4:c2:a6:44:99:d2:9f:7a:5f:67:57:8d:4e:ea:
fc:f0:2f:ad:80:de:ca:2a:07:ab:59:a2:11:fa:b8:
c7:2a:04:cb:5c:45:d8:55:2f:c2:a2:43:0d:58:24:
dd:f3:71:d8:d3:b2:09:f9:28:f0:8e:ba:d7:78:57:
18:11:6e:ce:60:2e:31:ac:9f:38:b5:91:e9:b0:60:
2f:ea:b0:20:48:f8:52:5e:61:d6:1a:63:2f:c2:8a:
e2:0b:f5:fd:d5:a5:33:42:fb:0d:9a:a9:f6:8b:f8:
9b:27:43:9a:df:0a:57:d5:71:fa:2e:e1:84:89:3d:
b7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:92:EA:D4:B3:05:E1:87:71:27:4C:0E:A9:FB:D7:98:9D:76:8B:32
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/JpLq1LMF4YdxJ0wOqfvXmJ12izI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:500::/46
2a12:bec0:509::/48
2a12:bec0:50b::/48
Signature Algorithm: sha256WithRSAEncryption
aa:4f:68:85:43:76:6c:09:f4:f8:34:d4:dc:06:ad:fd:61:93:
6d:3e:5c:c7:52:2c:8c:30:1d:cc:6a:42:b7:5c:a6:ae:62:16:
a2:b2:22:e9:f4:19:09:aa:72:7b:ef:af:e9:27:78:e9:c9:1f:
3d:7e:da:7d:10:91:53:84:61:fc:fe:c5:08:ac:74:ad:69:81:
aa:8c:13:10:34:f2:76:45:69:02:7f:5f:af:df:4f:ad:f7:65:
c2:a5:be:e3:d7:20:c6:c9:5d:82:b2:6a:4d:c5:4c:df:eb:b9:
17:fe:d7:9b:5b:75:02:ee:fb:b6:74:f4:61:95:5c:00:fe:94:
aa:c5:44:d2:d7:0c:97:2e:0c:b5:8b:2d:84:d9:9b:e1:7d:56:
b4:1f:26:f9:7d:98:92:2a:51:22:9d:f3:bc:53:ac:da:8c:6b:
70:13:66:a2:bd:df:d0:04:f7:4e:ef:aa:e8:13:6d:d8:e6:ec:
59:98:27:7b:f1:25:06:bd:7f:05:4d:63:db:51:45:48:39:bb:
bb:e9:4b:02:fa:de:15:f4:9f:72:a3:b5:d8:e3:46:e9:21:1b:
7f:3d:0f:44:75:60:b1:6e:6b:51:e9:72:34:dd:32:1a:92:00:
a5:6c:30:6b:80:db:c3:74:34:3f:11:14:b7:77:79:84:15:3b:
a6:ed:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org