Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/gWfHIVJIJ7zFAbRS1KD_Ehb2n-w.roa
File: gWfHIVJIJ7zFAbRS1KD_Ehb2n-w.roa (raw, json)
Hash identifier: DYy/hDs3ZszqdEbaeQE2U3hiOOINeWQIhIOE8gOCfz4=
Subject key identifier: 81:67:C7:21:52:48:27:BC:C5:01:B4:52:D4:A0:FF:12:16:F6:9F:EC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019560FF3E3DAC36A185A37C198D00927A8F
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/gWfHIVJIJ7zFAbRS1KD_Ehb2n-w.roa
Signing time: Tue 04 Mar 2025 11:51:35 +0000
ROA not before: Tue 04 Mar 2025 11:51:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49581
IP address blocks: 2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1750::/45 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Mar 2025 23:45:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:60:ff:3e:3d:ac:36:a1:85:a3:7c:19:8d:00:92:7a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 4 11:51:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8167c721524827bcc501b452d4a0ff1216f69fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:ce:53:0f:a4:a8:84:a6:cd:db:d1:99:48:
6e:64:0b:89:7d:7c:ae:83:ef:6f:d0:d8:56:38:35:
5b:7c:cf:c8:2c:0b:1a:db:fe:06:3d:62:36:7d:01:
d9:8f:62:e2:3e:f8:a2:3a:5a:94:a3:23:9c:0c:38:
ce:52:ba:56:f3:42:65:04:5d:19:72:c5:37:24:57:
cb:ff:87:bb:f5:eb:16:ac:5b:bf:66:87:ad:71:06:
28:02:f5:48:b3:39:61:d6:2b:69:12:9e:5c:a4:08:
4d:fe:97:f5:49:9b:71:a8:73:4a:86:63:9c:ab:a6:
3d:31:03:d9:f4:08:20:a8:f3:3b:27:61:f0:e1:9f:
54:ff:c3:aa:a8:b8:04:76:94:89:95:0b:58:42:60:
ff:80:f1:fa:a4:d0:40:fa:75:19:71:55:f2:ff:f6:
01:3c:1e:b7:dc:4a:08:2a:9a:2b:76:eb:fc:80:81:
2e:b4:91:b7:d5:22:2c:5b:b5:26:56:55:4d:ce:b8:
b4:15:9b:7b:cb:47:96:86:0f:b0:04:5e:7b:ad:05:
4d:0e:08:7f:89:c8:50:6d:85:0b:50:db:8e:60:28:
9d:a4:dd:36:bf:63:a2:59:33:5c:76:43:fe:bf:45:
1f:3b:99:4e:50:f6:ba:68:e1:23:da:2e:6b:da:b1:
99:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:C7:21:52:48:27:BC:C5:01:B4:52:D4:A0:FF:12:16:F6:9F:EC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/gWfHIVJIJ7zFAbRS1KD_Ehb2n-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1651::-2a12:bec4:1652:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1750::/45
Signature Algorithm: sha256WithRSAEncryption
4a:bc:95:01:27:4d:d3:1e:90:af:b6:1d:e9:4e:1a:aa:79:3e:
e1:79:56:7c:66:ee:c0:7a:c7:2a:0e:7e:d7:c5:b8:38:3c:9e:
76:58:c9:f8:8b:64:e1:13:63:35:1c:c2:f5:03:6e:f6:1d:93:
9f:c2:47:48:d6:78:9c:70:6f:33:8d:54:5f:32:15:7c:39:c1:
a4:db:71:bc:53:ed:5f:07:03:50:59:79:c5:7a:e2:dc:fb:cb:
7f:89:f1:b4:fa:b1:3b:bd:7a:aa:e8:ab:7e:1d:b7:66:9b:3d:
a4:c8:b6:f2:56:2e:03:59:e9:23:65:54:ed:bd:23:1a:05:3f:
ec:4c:f9:d3:90:f5:d8:30:55:58:cb:5e:a8:a1:27:cc:64:a4:
17:fc:b7:7b:c5:de:cf:d9:22:7e:4a:c5:8a:0c:bf:df:c2:79:
a5:2f:74:e1:6b:77:6b:88:37:a9:5f:f9:bf:57:94:c2:7d:f0:
33:f1:19:1e:e6:6c:7f:3b:ed:a8:31:74:03:cb:8d:da:30:00:
33:0c:21:a8:42:43:75:59:88:5a:8c:34:19:a5:aa:fa:79:6c:
ad:89:ea:6e:a1:63:f2:6c:04:e4:df:d7:c7:4f:71:03:1f:4a:
41:dd:a1:f1:b2:5b:0c:17:70:d6:c9:6e:d3:a9:79:b5:60:8b:
3f:cc:f7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:54:47 2025 by rpki-client