Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_SRhivRHYbGx2ZH9bFlG5v2FoaE.roa
File: _SRhivRHYbGx2ZH9bFlG5v2FoaE.roa (raw, json)
Hash identifier: IEKlrN/iCCz4LGtJ42DOBnLCTz3xWVqmUD1208Qn7e4=
Subject key identifier: FD:24:61:8A:F4:47:61:B1:B1:D9:91:FD:6C:59:46:E6:FD:85:A1:A1
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0193DA15381EBF1E665B9BE98824999E9301
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_SRhivRHYbGx2ZH9bFlG5v2FoaE.roa
Signing time: Wed 18 Dec 2024 14:04:03 +0000
ROA not before: Wed 18 Dec 2024 14:04:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 230702
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 18 Dec 2024 21:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:da:15:38:1e:bf:1e:66:5b:9b:e9:88:24:99:9e:93:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 18 14:04:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd24618af44761b1b1d991fd6c5946e6fd85a1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:cb:4b:64:2b:89:b1:ba:d6:76:2a:ff:05:92:
0e:df:24:6d:29:6b:bd:4e:8b:58:2e:c8:99:33:fb:
cf:15:11:b0:e7:c5:c6:5c:ba:f6:49:d0:65:4b:ff:
5d:28:68:b1:43:b5:66:75:8c:22:1d:cc:86:ba:c3:
70:be:9d:34:86:ab:0a:9e:e6:21:10:58:a3:f4:87:
63:8b:1e:88:a1:4a:58:b0:97:9c:9e:28:62:0b:0d:
92:4a:fe:d7:33:2e:0c:f4:46:dc:0d:a4:97:a2:7f:
2a:9c:e1:ae:12:9f:d4:90:47:97:82:5f:2b:8a:9a:
7e:73:e8:98:c0:f3:87:8a:8b:e9:77:c9:c2:d9:93:
94:11:da:c3:61:9a:58:85:04:d0:0e:4b:22:db:4c:
45:de:29:23:47:51:25:f8:84:58:56:a5:62:a2:88:
99:fe:ab:13:bd:50:00:29:05:05:5a:5c:4c:2e:1b:
d0:66:6a:47:c0:4e:07:f3:8c:a3:f0:31:41:59:f1:
5f:53:1c:eb:2d:c3:31:94:87:b9:d9:df:92:7f:d0:
3b:e8:51:89:68:6e:8e:dd:ae:2e:fd:6b:f6:19:cc:
90:3f:72:d5:48:8e:53:1a:1e:63:65:ab:68:5a:4f:
72:1d:80:18:8e:3c:c1:e7:75:01:87:5d:61:f3:0d:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:24:61:8A:F4:47:61:B1:B1:D9:91:FD:6C:59:46:E6:FD:85:A1:A1
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_SRhivRHYbGx2ZH9bFlG5v2FoaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
Signature Algorithm: sha256WithRSAEncryption
56:78:be:ed:5d:af:b9:2f:48:97:84:79:89:3d:70:d1:ee:af:
d9:76:71:72:d1:2d:24:72:cf:be:08:e1:ec:9a:48:7e:0f:fa:
78:55:58:01:f5:5e:44:39:c6:f1:90:9e:e1:e1:48:0f:c3:6c:
ce:9d:90:79:7e:69:07:2a:69:f1:5c:db:d1:9b:19:94:22:93:
53:9f:4a:69:e7:9f:08:18:27:d0:5b:ab:48:b7:bc:e8:d5:91:
f2:36:98:af:a4:be:5b:0d:6b:05:0a:bb:ee:46:8a:6e:5b:c0:
dc:fb:0b:6f:ef:d5:4c:5d:d4:dc:ac:e1:e0:45:2c:25:72:fa:
76:4f:19:ff:df:66:12:c1:48:7e:95:c8:6a:1c:2f:a5:66:82:
b7:f4:71:43:59:2f:c2:8a:0c:75:70:4b:ac:86:f3:b1:57:e8:
0b:fe:3f:f5:97:2e:eb:ff:6d:ab:ad:97:b8:01:25:81:9b:33:
bb:7c:38:72:05:c6:bd:ec:99:b0:94:74:64:79:fd:d0:bb:35:
1f:7c:85:96:47:f6:49:2a:2f:40:e2:f0:c0:2a:4e:f9:6a:88:
f9:55:1a:eb:34:a7:f7:51:2d:7f:42:da:20:21:7c:9d:3f:c6:
74:1e:7b:11:84:d4:f1:5c:84:a7:ad:f0:44:fd:59:ad:85:cd:
b2:0d:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:00:11 2025 by rpki-client