Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iFZ0EFsochbTUHHucqujZ8k8-SE.roa
File: iFZ0EFsochbTUHHucqujZ8k8-SE.roa (raw, json)
Hash identifier: rh7NppBbMoTrDLrWpTc0NQGOFnHT0zWogLRGnI3qVi4=
Subject key identifier: 88:56:74:10:5B:28:72:16:D3:50:71:EE:72:AB:A3:67:C9:3C:F9:21
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018E87381C6547BEF87ACADC22252B791D10
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iFZ0EFsochbTUHHucqujZ8k8-SE.roa
Signing time: Thu 28 Mar 2024 22:39:45 +0000
ROA not before: Thu 28 Mar 2024 22:39:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215290
IP address blocks: 2a12:bec4:10e0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 29 Mar 2024 08:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:87:38:1c:65:47:be:f8:7a:ca:dc:22:25:2b:79:1d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 28 22:39:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=885674105b287216d35071ee72aba367c93cf921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:4f:8f:98:a0:37:27:18:42:15:7c:86:02:
04:98:9c:83:ce:48:c6:d4:d9:f4:92:79:99:77:b8:
84:02:b0:a8:ca:d6:3e:7a:2f:62:20:10:51:86:98:
99:cc:de:70:e1:b0:04:6e:8b:20:a7:de:a6:14:c0:
b8:0e:cf:36:93:c4:61:d6:fa:7a:01:ed:4c:ce:4d:
c0:e5:1f:a7:34:66:e5:13:46:da:47:04:f5:c8:a5:
af:29:27:45:14:33:a9:1a:ee:a7:99:d1:f0:be:36:
b3:f6:81:01:5b:40:4b:15:c5:67:b8:09:9a:8a:aa:
fa:66:1b:01:4d:8f:67:56:73:c9:6b:6d:2b:8c:a2:
86:3d:21:52:32:b8:56:17:c0:d7:58:6a:62:df:cb:
60:32:52:17:16:c6:df:8b:53:17:7b:49:53:f4:0c:
d7:d4:8a:d2:ee:07:0f:64:8e:60:ff:40:a7:be:ac:
ff:07:93:1d:3a:ea:1b:24:ac:8c:c0:24:aa:8f:d4:
65:32:8e:4b:70:d6:48:65:01:e0:16:75:85:bc:cf:
94:d4:29:79:1d:de:d6:f3:1a:44:92:d5:85:bf:be:
d0:ca:99:14:04:5e:7f:2a:05:e4:c3:1f:16:d9:3a:
fd:7b:21:88:2b:8b:5c:d9:27:69:62:94:ab:7a:a2:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:56:74:10:5B:28:72:16:D3:50:71:EE:72:AB:A3:67:C9:3C:F9:21
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/iFZ0EFsochbTUHHucqujZ8k8-SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:10e0::/44
Signature Algorithm: sha256WithRSAEncryption
29:19:20:f4:fd:12:b8:1f:ab:f1:4b:a9:12:32:ff:4f:b4:03:
48:cc:6d:5b:22:c2:91:7d:29:6f:75:32:13:51:8e:9e:60:04:
66:97:b8:48:ea:8a:b6:9f:25:52:0c:09:44:34:70:91:4e:2d:
22:f8:ba:e5:bb:5e:89:14:fe:a9:63:7e:cb:14:cd:13:21:19:
9c:e1:59:1f:50:67:10:77:df:fb:d4:65:44:54:87:b3:d7:45:
36:a8:4b:b3:38:00:a6:80:0f:b8:17:be:33:91:42:37:6c:79:
37:21:e3:b8:2b:dd:11:2e:20:23:29:41:76:77:c7:d1:27:c5:
96:b0:a3:2a:06:6e:07:dd:33:e5:05:f6:7d:99:1f:e8:34:b4:
b6:f0:a4:51:6c:da:7c:d6:8f:47:2a:59:dd:48:b3:24:65:80:
ee:c0:92:0b:84:4d:4f:74:ec:01:77:e0:fe:81:05:11:c7:0f:
6e:24:d0:4f:96:3a:ac:a5:d9:3d:ec:5d:15:ff:f9:c4:35:ae:
58:c0:75:14:49:4e:94:bf:f6:c5:00:e3:5b:0e:83:dc:64:05:
25:0b:f2:20:72:a6:a7:51:8e:bb:3d:43:b0:4d:86:9b:bc:96:
16:12:cb:5a:96:68:ef:11:b3:05:f2:7b:60:b4:9d:91:f5:f2:
4f:e2:79:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org