Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bVcuCArSC5dk5MdmiOPnT1f_A_I.roa
File: bVcuCArSC5dk5MdmiOPnT1f_A_I.roa (raw, json)
Hash identifier: RhvpACDmAXfnUB5R+62d5Z3wT1cIss5mPLtAAG6FjMw=
Subject key identifier: 6D:57:2E:08:0A:D2:0B:97:64:E4:C7:66:88:E3:E7:4F:57:FF:03:F2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01878624C853BFFD29EAAB10087149471B4B
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bVcuCArSC5dk5MdmiOPnT1f_A_I.roa
Signing time: Sat 15 Apr 2023 18:19:30 +0000
ROA not before: Sat 15 Apr 2023 18:19:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198889
IP address blocks: 2a12:bec0:2c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 May 2023 22:16:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:86:24:c8:53:bf:fd:29:ea:ab:10:08:71:49:47:1b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 15 18:19:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d572e080ad20b9764e4c76688e3e74f57ff03f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:6f:79:21:cc:d6:cc:c6:86:22:5e:7d:01:44:
ef:6a:18:b5:f0:8c:67:c9:90:73:c8:e6:c4:e4:81:
b5:29:95:f8:40:4b:11:fd:99:d6:7f:ac:97:96:44:
75:93:e9:ad:b2:66:e2:6a:29:98:bf:f5:ad:d6:c3:
e5:e5:4b:40:df:26:38:22:d6:64:95:1e:1b:09:5a:
ac:67:d4:63:50:2c:6a:4c:f8:d4:83:4d:14:48:93:
71:9d:08:eb:c7:bb:f6:89:ec:f1:63:a5:86:87:f6:
db:d9:65:da:78:33:64:d8:de:2a:c5:57:b6:73:d7:
ab:89:3a:e4:36:e9:7f:1c:c4:fd:4a:73:30:6f:0f:
bd:57:3f:b1:93:c3:7f:78:c2:5d:b2:59:54:b7:27:
e2:d3:c6:d7:86:e3:60:08:cf:6b:24:35:23:c8:24:
de:34:14:a4:c2:09:e9:57:ad:06:39:cd:a9:47:37:
b8:48:02:65:b4:5f:de:79:7f:33:94:68:98:19:f8:
87:ec:8b:c3:8c:50:e7:e6:c9:f9:1d:bd:4f:20:a9:
4c:76:37:c1:9c:b9:2e:34:31:55:58:58:ee:98:a6:
cc:87:84:f7:2e:d1:15:02:84:c8:9f:a9:ac:11:ce:
a9:55:07:48:83:a7:fc:c0:5c:37:24:6b:4e:9d:1f:
34:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:57:2E:08:0A:D2:0B:97:64:E4:C7:66:88:E3:E7:4F:57:FF:03:F2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/bVcuCArSC5dk5MdmiOPnT1f_A_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
14:0e:7e:5c:29:6f:94:d9:2f:f9:19:52:0e:d0:4b:49:70:b5:
cf:6f:f4:56:bd:c6:9b:b5:c8:21:2d:a1:25:ef:6e:cb:69:56:
87:85:84:4a:dc:ae:33:a4:b0:69:80:9a:8d:54:38:f8:52:08:
de:c2:bc:04:50:a8:a0:29:66:18:0c:c7:1d:d1:ce:53:ba:c4:
3c:8f:93:ee:3b:ce:62:0d:81:be:75:1a:a3:0c:ca:62:19:e3:
6a:bb:d4:a0:e8:78:90:03:75:3c:fc:3a:49:17:8a:0e:db:f9:
ba:77:93:07:20:26:7b:4b:f1:38:10:76:91:8e:e4:2b:f0:bb:
21:eb:f5:d2:95:81:a4:9a:2c:e0:53:42:d5:65:8a:8d:22:13:
a5:a9:03:0e:31:50:f1:95:7d:a3:f8:e2:78:da:a7:23:ba:0f:
b2:33:a5:39:f9:08:64:cc:f7:58:6b:d5:15:be:d3:68:59:c9:
79:aa:03:3e:e7:46:cd:f8:b1:c2:90:d1:82:8f:06:04:a3:f6:
68:4e:5e:98:80:b2:3e:45:e8:bd:69:f8:69:95:99:43:5f:b7:
6b:e7:0a:2d:c2:3e:08:56:b6:da:3f:c9:e7:83:91:d4:87:83:
57:2f:0f:44:35:c6:05:c3:84:88:29:5e:ba:9f:84:20:a8:25:
4f:b7:7b:a2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYeGJMhTv/0p6qsQCHFJRxtLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjMwNDE1MTgxOTMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDU3MmUwODBhZDIwYjk3NjRlNGM3NjY4OGUzZTc0ZjU3ZmYwM2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW95IczWzMaGIl59AUTvahi18Ixn
yZBzyObE5IG1KZX4QEsR/ZnWf6yXlkR1k+mtsmbiaimYv/Wt1sPl5UtA3yY4ItZk
lR4bCVqsZ9RjUCxqTPjUg00USJNxnQjrx7v2iezxY6WGh/bb2WXaeDNk2N4qxVe2
c9eriTrkNul/HMT9SnMwbw+9Vz+xk8N/eMJdsllUtyfi08bXhuNgCM9rJDUjyCTe
NBSkwgnpV60GOc2pRze4SAJltF/eeX8zlGiYGfiH7IvDjFDn5sn5Hb1PIKlMdjfB
nLkuNDFVWFjumKbMh4T3LtEVAoTIn6msEc6pVQdIg6f8wFw3JGtOnR80uQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG1XLggK0guXZOTHZojj509X/wPyMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvYlZjdUNBclNDNWRrNU1kbWlPUG5UMWZfQV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+wALA
MA0GCSqGSIb3DQEBCwUAA4IBAQAUDn5cKW+U2S/5GVIO0EtJcLXPb/RWvcabtcgh
LaEl727LaVaHhYRK3K4zpLBpgJqNVDj4UgjewrwEUKigKWYYDMcd0c5TusQ8j5Pu
O85iDYG+dRqjDMpiGeNqu9Sg6HiQA3U8/DpJF4oO2/m6d5MHICZ7S/E4EHaRjuQr
8Lsh6/XSlYGkmizgU0LVZYqNIhOlqQMOMVDxlX2j+OJ42qcjug+yM6U5+QhkzPdY
a9UVvtNoWcl5qgM+50bN+LHCkNGCjwYEo/ZoTl6YgLI+Rei9afhplZlDX7dr5wot
wj4IVrbaP8nng5HUh4NXLw9ENcYFw4SIKV66n4QgqCVPt3ui
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org