Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s8PLGMDIJAbs2EjwQ1rNLFujZuc.roa
File: s8PLGMDIJAbs2EjwQ1rNLFujZuc.roa (raw, json)
Hash identifier: q/MivAtmr3D7QtloGCrfVdEWm/vhEnK5x1blMX95Fx0=
Subject key identifier: B3:C3:CB:18:C0:C8:24:06:EC:D8:48:F0:43:5A:CD:2C:5B:A3:66:E7
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01939E116D9F431AEF4326E285A3F9822FD9
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s8PLGMDIJAbs2EjwQ1rNLFujZuc.roa
Signing time: Fri 06 Dec 2024 22:22:42 +0000
ROA not before: Fri 06 Dec 2024 22:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213801
IP address blocks: 2a12:bec4:15f0::/45 maxlen: 45
2a12:bec4:15f8::/45 maxlen: 45
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:9e:11:6d:9f:43:1a:ef:43:26:e2:85:a3:f9:82:2f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Dec 6 22:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3c3cb18c0c82406ecd848f0435acd2c5ba366e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:05:b1:5e:d8:8c:60:dc:2c:c0:98:41:cc:58:
7c:33:19:fc:6d:ca:ec:b5:2f:6f:0d:9c:4c:7e:91:
ef:66:5f:23:3f:60:fd:74:46:90:e9:5a:ff:86:05:
43:6c:d3:5d:9a:d0:9b:b2:fb:e0:08:8c:39:bc:ed:
d6:6a:94:09:9d:2e:e7:ea:ed:af:15:bb:03:d3:06:
39:50:15:7e:aa:77:04:91:7f:41:86:c7:c3:61:e5:
81:40:84:a0:bf:ce:8d:a3:54:3c:bb:be:c4:db:30:
6c:fd:97:72:ed:3d:a0:47:19:f4:d1:5c:23:67:06:
29:50:f6:90:e3:98:61:29:81:2b:18:f1:13:48:6a:
60:76:a8:1b:04:d3:dd:68:11:eb:47:d7:3c:9a:2f:
57:1a:18:d8:58:c9:85:e5:46:1c:c3:5d:d4:07:fb:
f7:aa:16:6f:3d:7f:e0:e4:f8:27:e4:85:49:ac:6e:
1d:2b:63:8c:e1:bf:e6:1f:c9:47:37:80:dd:b4:c6:
dd:bb:10:cc:af:db:79:2f:72:d8:f6:04:b5:90:ab:
44:11:25:a7:10:c8:66:4a:fb:88:59:9e:b4:61:75:
7e:57:cb:b3:d0:5d:47:a6:c5:df:8a:0b:8f:e4:0f:
4d:2c:47:bb:e3:e1:84:a2:8f:db:22:e3:82:0a:5c:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C3:CB:18:C0:C8:24:06:EC:D8:48:F0:43:5A:CD:2C:5B:A3:66:E7
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s8PLGMDIJAbs2EjwQ1rNLFujZuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:15f0::/44
Signature Algorithm: sha256WithRSAEncryption
af:f0:81:e3:4d:3c:a9:e8:e5:f7:5c:75:d7:9c:30:ac:a5:49:
a9:23:f6:3e:99:f0:b2:09:84:0d:74:e3:96:4e:ba:90:18:31:
d8:72:f5:de:2b:49:32:3a:da:3c:d7:5f:aa:f4:5e:3c:82:b1:
91:89:90:1b:0a:96:d7:b2:60:03:12:33:a6:1a:02:55:4f:60:
c1:84:32:ab:84:5b:49:df:c9:fb:e1:21:e4:4a:54:67:e8:eb:
c2:b4:8c:7b:c6:cc:25:7b:7d:97:37:e5:2f:0d:a0:6f:81:f5:
a9:64:2a:ee:75:12:35:f1:e4:d1:48:38:73:19:ab:17:8c:f8:
2c:df:cb:5c:bd:23:18:27:c5:93:62:66:2f:43:43:58:5c:b4:
97:ed:da:16:24:29:49:ac:08:42:93:86:48:b8:c5:ed:ff:3f:
3d:99:c6:30:15:8e:dc:06:a5:f3:64:6d:72:dd:60:f8:e9:f3:
62:ef:74:97:0e:3d:43:84:a4:70:06:71:67:ce:4e:e2:63:ec:
d9:41:60:b6:8c:16:47:e9:0d:42:59:fb:55:31:50:c0:27:f3:
35:0c:12:90:07:22:ee:ef:1e:e1:e0:6b:01:eb:85:7e:d8:df:
c3:5c:4f:93:d5:5a:53:f1:1d:f3:53:3a:b0:c4:57:6a:1d:59:
cb:76:ff:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:20:51 2025 by rpki-client