Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mhSzdpQL7fLbOASqIPF96UONH-A.roa
File: mhSzdpQL7fLbOASqIPF96UONH-A.roa (raw, json)
Hash identifier: lS58n0T7Ru56rxqHLp2xch5ATprV2NxaZyczaE0HraM=
Subject key identifier: 9A:14:B3:76:94:0B:ED:F2:DB:38:04:AA:20:F1:7D:E9:43:8D:1F:E0
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0193D6E4DA162CA52ABA1095F9D43189E4EB
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mhSzdpQL7fLbOASqIPF96UONH-A.roa
Signing time: Tue 17 Dec 2024 23:12:22 +0000
ROA not before: Tue 17 Dec 2024 23:12:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213702
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d6:e4:da:16:2c:a5:2a:ba:10:95:f9:d4:31:89:e4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 17 23:12:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9a14b376940bedf2db3804aa20f17de9438d1fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f2:50:25:bc:b6:d6:72:a1:92:22:ef:e1:c2:
5f:82:b9:f4:78:89:6f:ad:54:f8:42:3c:30:32:f7:
48:e8:7c:a9:7d:6b:ed:b7:da:42:25:58:bc:31:7f:
ec:c2:6e:5e:ba:e1:d1:69:91:83:bf:07:17:8f:42:
64:7e:a5:64:55:74:8f:4d:4c:a8:30:03:4c:b8:cb:
ac:98:8c:53:58:10:8f:ea:87:dd:85:21:76:2d:6e:
2a:fa:fe:cc:04:d9:a0:ab:d3:a3:6d:93:8a:ac:01:
e6:e8:31:3a:d5:36:8a:9a:1a:56:d8:ca:6a:3e:af:
8d:19:ee:af:29:e3:63:4e:64:80:74:c8:4f:a0:b1:
41:35:06:01:99:5e:66:f9:8a:e6:53:f9:7d:85:27:
9a:56:37:f7:50:c5:f4:98:14:1b:d0:ca:6e:39:92:
99:a4:ed:67:b8:a9:c3:6b:eb:0f:8d:ac:5f:de:81:
0d:8f:30:46:27:8f:1d:dd:9f:98:a4:e2:79:1a:52:
0f:01:48:07:66:51:57:16:db:6a:40:67:a4:04:4e:
c9:72:7c:26:c2:53:44:94:49:26:14:c2:7c:d5:95:
9e:ae:89:1f:ed:24:f9:b0:4f:6e:ae:51:19:b8:16:
8f:13:9a:47:39:ae:58:66:a2:0e:af:6c:75:55:a4:
ba:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:B3:76:94:0B:ED:F2:DB:38:04:AA:20:F1:7D:E9:43:8D:1F:E0
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/mhSzdpQL7fLbOASqIPF96UONH-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
Signature Algorithm: sha256WithRSAEncryption
44:bd:63:08:b8:e1:a9:b3:4c:70:75:2e:27:aa:fa:4e:8a:91:
52:2e:f4:75:be:c2:28:5c:98:1a:f8:5a:26:f1:7a:e2:f4:50:
cc:1d:2d:92:0c:27:70:4d:7c:4b:9e:fe:d6:e5:02:b0:5b:b3:
6f:dd:2f:97:f8:62:76:d7:91:fb:02:94:33:d2:d6:ea:cb:b6:
1f:a1:ba:c9:c6:4e:16:01:12:57:7a:cd:29:cc:d1:d4:29:67:
38:3f:e7:af:d4:8f:3e:eb:56:08:4b:5f:ac:47:a5:8a:de:13:
ce:26:b0:ae:c6:dd:7f:2a:ef:f6:08:e2:84:30:4c:d3:46:51:
69:ce:fc:38:1c:55:aa:bf:5d:be:91:fd:ae:87:03:d4:5a:2c:
5c:4c:a2:7b:a7:f4:da:ae:af:18:e8:4d:37:97:94:92:64:5c:
a4:8e:09:41:8f:e3:d8:86:f5:86:8e:9a:b5:1c:21:30:bb:5e:
1a:f2:67:3c:13:4c:cd:b6:85:22:ef:e7:81:a4:0a:aa:35:82:
8f:e9:85:9f:fd:48:7d:ed:a5:e3:be:89:c4:21:9a:22:cd:1b:
68:54:35:5d:22:ea:09:aa:d9:21:11:2a:bd:b0:f1:77:ed:d7:
da:4d:a4:21:80:1a:3d:8f:e8:3c:30:07:64:37:95:22:eb:ca:
89:dd:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:52:48 2025 by rpki-client