Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_bigrFMpBSHFTxFFCx2hbqLKlt8.roa
File: _bigrFMpBSHFTxFFCx2hbqLKlt8.roa (raw, json)
Hash identifier: 7w98EuQUBKExn1VGuNN6Trg6AnZrICz6G7HD4cIwDZc=
Subject key identifier: FD:B8:A0:AC:53:29:05:21:C5:4F:11:45:0B:1D:A1:6E:A2:CA:96:DF
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0193D52353F0DAB6BEB983005FCFB98FBA75
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_bigrFMpBSHFTxFFCx2hbqLKlt8.roa
Signing time: Tue 17 Dec 2024 15:01:22 +0000
ROA not before: Tue 17 Dec 2024 15:01:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213702
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 17 Dec 2024 23:12:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:23:53:f0:da:b6:be:b9:83:00:5f:cf:b9:8f:ba:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 17 15:01:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fdb8a0ac53290521c54f11450b1da16ea2ca96df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5c:32:be:b5:1a:05:22:91:cc:bd:ae:40:ac:
f0:ce:5a:b1:a2:ba:57:8b:a9:1b:a3:7b:31:c3:ee:
df:71:b6:55:96:1c:ba:7a:ec:b2:6f:08:1f:52:72:
c3:cf:1f:e1:d2:06:56:2e:ac:9b:b3:de:68:6b:2f:
c0:69:c7:81:c5:5e:30:90:03:ff:08:24:1b:35:1a:
92:b5:f1:5e:30:b1:f9:57:25:76:8f:e8:94:c4:22:
18:aa:79:d4:a4:45:28:aa:fb:fa:14:ec:18:3f:26:
f7:ba:eb:2c:92:a4:a2:df:32:35:b1:65:02:15:ca:
a1:36:8b:97:83:75:a0:1d:65:7d:f9:16:89:13:2b:
07:aa:74:3c:46:76:1d:2f:4c:75:bf:53:88:00:e7:
59:4f:cc:eb:b6:87:02:10:40:34:24:08:1b:76:fa:
f0:52:bf:94:b4:37:e3:27:fc:ba:36:80:90:3a:bb:
57:b4:c0:02:6f:b7:ed:f2:d1:37:84:9e:59:91:2c:
c6:50:27:a3:68:90:13:ac:fb:44:c1:55:9a:e4:74:
a3:7f:93:22:ca:29:b3:39:26:be:d1:cc:d6:e0:89:
1f:25:d8:8a:7b:94:35:c1:38:3b:0d:2f:16:4a:e5:
40:a6:b2:80:07:f4:ab:03:e9:57:4f:fe:aa:cf:a0:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:A0:AC:53:29:05:21:C5:4F:11:45:0B:1D:A1:6E:A2:CA:96:DF
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_bigrFMpBSHFTxFFCx2hbqLKlt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
Signature Algorithm: sha256WithRSAEncryption
c0:89:00:06:c7:84:21:45:2e:98:97:52:43:30:9b:f0:a3:38:
03:53:25:cd:57:fa:ab:9d:7b:3e:a3:e5:27:dd:4e:ca:88:b0:
88:35:e3:96:bb:b5:c2:fb:0d:ca:db:09:c1:31:26:c0:4a:ee:
95:4a:dd:da:0b:ed:20:9a:d9:8b:e4:a9:d4:47:32:8d:ce:4f:
e6:fd:f5:2e:15:f6:1d:57:52:59:ff:2c:f4:a1:c7:08:ca:0e:
59:9a:f6:8f:bd:28:77:bb:a2:ce:cb:2a:f5:ee:d6:8f:1c:d9:
41:e9:87:61:60:12:76:cd:5b:d7:97:f1:71:e4:de:3e:c3:19:
73:a4:02:bb:d4:b3:d9:a4:00:15:7b:10:19:f9:2b:98:f1:62:
45:29:6f:66:a2:52:f8:8c:58:2e:a2:1c:7f:cd:13:39:34:63:
17:0a:48:37:cf:f7:94:b8:e9:9e:42:27:45:d1:96:2b:3c:a1:
30:7f:07:42:2f:1d:ad:e0:18:13:aa:a9:92:69:8f:60:e3:4c:
9f:23:9c:13:49:7e:fe:38:c7:ea:ca:0d:4b:72:91:2a:f9:b8:
d1:66:a3:4e:6a:89:01:cc:03:91:b4:cb:96:66:3b:1a:07:45:
73:55:91:13:42:47:14:21:39:0c:3c:74:bb:22:80:dc:ae:20:
6d:b6:37:51
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZPVI1Pw2ra+uYMAX8+5j7p1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQxMjE3MTUwMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGI4YTBhYzUzMjkwNTIxYzU0ZjExNDUwYjFkYTE2ZWEyY2E5NmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFwyvrUaBSKRzL2uQKzwzlqxorpX
i6kbo3sxw+7fcbZVlhy6euyybwgfUnLDzx/h0gZWLqybs95oay/AaceBxV4wkAP/
CCQbNRqStfFeMLH5VyV2j+iUxCIYqnnUpEUoqvv6FOwYPyb3uusskqSi3zI1sWUC
FcqhNouXg3WgHWV9+RaJEysHqnQ8RnYdL0x1v1OIAOdZT8zrtocCEEA0JAgbdvrw
Ur+UtDfjJ/y6NoCQOrtXtMACb7ft8tE3hJ5ZkSzGUCejaJATrPtEwVWa5HSjf5Mi
yimzOSa+0czW4IkfJdiKe5Q1wTg7DS8WSuVAprKAB/SrA+lXT/6qz6CPDQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFP24oKxTKQUhxU8RRQsdoW6iypbfMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvX2JpZ3JGTXBCU0hGVHhGRkN4MmhicUxLbHQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xAFQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDAiQAGx4QhRS6Yl1JDMJvwozgDUyXNV/qrnXs+
o+Un3U7KiLCINeOWu7XC+w3K2wnBMSbASu6VSt3aC+0gmtmL5KnURzKNzk/m/fUu
FfYdV1JZ/yz0occIyg5ZmvaPvSh3u6LOyyr17taPHNlB6YdhYBJ2zVvXl/Fx5N4+
wxlzpAK71LPZpAAVexAZ+SuY8WJFKW9molL4jFguohx/zRM5NGMXCkg3z/eUuOme
QidF0ZYrPKEwfwdCLx2t4BgTqqmSaY9g40yfI5wTSX7+OMfqyg1LcpEq+bjRZqNO
aokBzAORtMuWZjsaB0VzVZETQkcUITkMPHS7IoDcriBttjdR
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:21:13 2025 by rpki-client