Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/tRYFTLUBZXGbtnO9pfTYyNiNEoo.roa
File: tRYFTLUBZXGbtnO9pfTYyNiNEoo.roa (raw, json)
Hash identifier: c/Gp+1LD0vxv0xFYjBvSIAngtLVP1kWRR5oPqZRusv4=
Subject key identifier: B5:16:05:4C:B5:01:65:71:9B:B6:73:BD:A5:F4:D8:C8:D8:8D:12:8A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018D8527BD3BB2A6B435187787FC8EC0E36E
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/tRYFTLUBZXGbtnO9pfTYyNiNEoo.roa
Signing time: Wed 07 Feb 2024 19:59:50 +0000
ROA not before: Wed 07 Feb 2024 19:59:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215589
IP address blocks: 2a12:bec0:50a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 26 Mar 2024 08:55:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:85:27:bd:3b:b2:a6:b4:35:18:77:87:fc:8e:c0:e3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 7 19:59:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b516054cb50165719bb673bda5f4d8c8d88d128a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d3:27:a9:dc:74:a6:a9:b8:2c:71:5e:f9:31:
d5:b4:5b:f2:bf:9d:06:18:e0:10:49:a0:39:71:16:
01:87:3e:e1:7a:90:25:d6:b5:f6:64:40:f8:83:b0:
c5:d0:97:35:04:8c:7d:6c:8a:95:6c:8c:de:c6:17:
73:fa:c3:e7:00:a6:a6:5d:58:5c:df:eb:d8:4d:1d:
f8:b2:0b:9d:0d:a6:1f:2e:27:dc:d9:cd:f6:c7:c1:
52:f0:90:6b:62:ae:c2:b9:ac:9e:d7:4b:56:29:bc:
fe:37:3f:2a:0b:ae:85:b0:8e:93:57:30:e3:02:fb:
dc:6b:cd:3e:ee:ef:ec:d8:8a:25:8e:ec:a7:18:0d:
a2:e9:e0:f4:d4:17:fe:fb:1f:70:49:85:b6:81:a0:
1a:f6:0e:5b:6a:49:04:ee:be:3a:4e:71:28:7a:b9:
5d:52:bb:26:b8:7f:80:8b:74:41:b0:f3:30:78:59:
2c:cc:bf:fd:50:b7:29:ec:0d:3a:7d:f8:76:94:b0:
95:ed:4b:65:51:d1:ef:b1:b3:7e:0a:34:34:b3:86:
8c:80:ba:6f:96:62:3f:f3:5e:47:50:8f:96:82:43:
ef:ae:9b:53:59:9e:b2:7d:17:bf:b6:de:34:fb:33:
ea:e7:b2:d8:a5:23:ec:ce:1e:c1:c5:94:68:ee:15:
d8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:05:4C:B5:01:65:71:9B:B6:73:BD:A5:F4:D8:C8:D8:8D:12:8A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/tRYFTLUBZXGbtnO9pfTYyNiNEoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:50a::/48
Signature Algorithm: sha256WithRSAEncryption
41:54:46:9a:5e:58:09:cb:40:87:5d:6d:5c:de:12:7d:4c:f2:
25:cb:3d:00:43:b1:51:1f:bd:25:e4:35:cf:98:96:7b:e6:91:
dc:a0:97:4c:9f:f1:aa:75:d3:18:36:1a:90:ce:a7:1f:63:9a:
04:be:f4:28:1b:16:b6:8d:bd:cf:2f:66:01:bd:47:d3:9f:07:
d3:1e:cf:5e:3c:fd:54:65:1d:3c:52:09:cb:fa:e4:ae:37:29:
69:d7:c9:f3:8c:76:4e:73:d4:c1:b0:ad:2a:1b:e8:8e:61:ad:
b2:a8:46:dd:a8:0d:63:f0:a8:94:7f:fd:73:e2:85:92:0e:b7:
6a:0e:54:ad:40:5e:f1:b5:41:9a:d2:7b:52:e6:d4:06:00:a1:
86:93:07:4d:7e:a3:e0:8f:dd:80:b4:c2:79:d7:ac:23:eb:70:
b2:73:9a:cb:d7:08:7b:34:21:c8:ee:db:69:c7:fe:94:85:6a:
63:94:26:e7:7f:fe:73:8e:c9:cf:21:4f:00:53:73:b5:12:6c:
02:af:3f:ef:33:e7:29:0a:8d:3b:62:c2:67:eb:64:7a:5a:0b:
3b:d8:d1:53:23:ef:0e:fb:e4:3d:03:bf:4b:40:76:05:bd:b7:
47:e5:fc:b5:15:ed:96:d1:65:d7:ac:c4:37:c5:72:c1:ae:40:
f6:13:5e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org