Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NVlpfVpHXG9zvJgn4LzkPVgo_RA.roa
File: NVlpfVpHXG9zvJgn4LzkPVgo_RA.roa (raw, json)
Hash identifier: irjzVTp//1QwYRavdZLCKavZp+6x9InHR0wwyVjali0=
Subject key identifier: 35:59:69:7D:5A:47:5C:6F:73:BC:98:27:E0:BC:E4:3D:58:28:FD:10
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018EA83898C083837FBC752818A382C4A777
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NVlpfVpHXG9zvJgn4LzkPVgo_RA.roa
Signing time: Thu 04 Apr 2024 08:27:45 +0000
ROA not before: Thu 04 Apr 2024 08:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216311
IP address blocks: 2a12:bec0:500::/47 maxlen: 48
2a12:bec0:502::/48 maxlen: 48
2a12:bec0:503::/48 maxlen: 48
2a12:bec0:507::/48 maxlen: 48
2a12:bec0:509::/48 maxlen: 48
2a12:bec0:50a::/48 maxlen: 48
2a12:bec0:50b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 08 Apr 2024 07:55:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:38:98:c0:83:83:7f:bc:75:28:18:a3:82:c4:a7:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 4 08:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3559697d5a475c6f73bc9827e0bce43d5828fd10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a7:95:15:79:30:bd:d7:60:ac:0d:7b:03:b1:
38:da:d9:be:46:07:d9:9d:82:9b:3d:6c:74:33:ed:
06:de:94:29:f1:0d:20:4e:a9:f1:dc:9f:53:ea:49:
4d:e4:0a:b2:59:51:a8:48:fd:1a:4e:06:cc:76:24:
55:93:b7:d0:3d:c8:7b:5d:35:64:7c:06:ee:ca:dc:
87:c3:27:97:b8:ce:70:8f:97:f4:6b:ab:ad:bd:fa:
8e:2a:8c:ca:29:48:28:27:6f:62:98:62:6b:24:9a:
7c:c2:0b:46:45:93:f9:d4:73:3b:7b:35:6c:d2:65:
5b:fa:57:b3:ef:e4:13:94:49:79:f4:23:53:25:67:
5f:ab:b4:da:5d:c7:92:75:58:cb:69:27:8b:4b:a0:
21:0a:9e:10:a2:43:a9:42:6e:4e:0b:39:c1:27:ce:
3e:44:53:55:be:46:7b:20:bc:77:5c:66:47:c6:47:
c3:72:1d:54:ad:9c:8f:50:47:3a:3e:5c:18:e0:b9:
44:28:27:6f:d0:32:47:f5:85:aa:8b:53:19:34:53:
7f:2e:dd:98:d7:e3:04:fa:99:9e:79:76:dd:b3:f7:
59:1a:db:96:a2:a5:e0:9b:37:26:a8:de:ef:65:af:
d9:b8:bd:20:6b:f4:54:f9:51:db:98:67:78:58:13:
0d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:69:7D:5A:47:5C:6F:73:BC:98:27:E0:BC:E4:3D:58:28:FD:10
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/NVlpfVpHXG9zvJgn4LzkPVgo_RA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:500::/46
2a12:bec0:507::/48
2a12:bec0:509::-2a12:bec0:50b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2a:8c:f9:62:fd:90:06:ad:98:a9:72:0c:93:3a:4f:c2:84:a7:
20:b9:f9:09:51:95:ef:7b:73:13:e3:e9:40:36:bc:b5:5e:76:
0e:c9:be:83:38:3b:36:c1:0e:ba:fd:e9:0b:77:d3:8e:37:97:
a9:99:a6:97:bd:9f:ec:ad:e8:5a:9a:c5:5b:4a:b3:db:89:71:
c0:2c:59:0b:26:13:ae:49:52:4e:ed:f0:71:3e:8c:76:78:54:
11:57:cc:68:38:6a:a7:db:1f:c6:5e:53:43:ae:36:0c:52:bc:
09:1b:a8:e5:38:b4:e2:81:99:74:14:4d:4d:2e:53:1e:c3:98:
58:25:6b:de:c4:58:a2:c2:9f:ec:29:9c:75:b8:06:b7:5d:62:
9c:d5:ee:84:c9:49:ad:09:b1:ad:69:c5:78:85:89:33:e0:2e:
cb:00:cd:fd:f4:e3:db:23:e8:f8:80:4e:8a:a8:26:45:12:38:
50:4c:76:46:bd:40:f7:d7:e9:51:7c:45:77:94:f6:d8:32:e9:
21:70:48:68:09:4c:df:b3:9c:54:fe:8c:ad:3f:01:00:92:fc:
79:18:56:49:a1:b1:71:77:3d:b0:5d:51:82:61:62:88:4a:0b:
ab:69:78:5f:c3:cd:60:b4:7e:c4:66:03:a5:99:f5:8e:3b:82:
9e:25:18:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org