Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/v7qfKFoV7Sbr7QaMKvGyz8Zxgwg.roa
File: v7qfKFoV7Sbr7QaMKvGyz8Zxgwg.roa (raw, json)
Hash identifier: 6Dh09pRzeNDIn8PGS0rvOMlD9KVK8Z65vlERTo+GO50=
Subject key identifier: BF:BA:9F:28:5A:15:ED:26:EB:ED:06:8C:2A:F1:B2:CF:C6:71:83:08
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01905C801EBF9BCB0C6F030495BE26824584
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/v7qfKFoV7Sbr7QaMKvGyz8Zxgwg.roa
Signing time: Fri 28 Jun 2024 01:40:18 +0000
ROA not before: Fri 28 Jun 2024 01:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150787
IP address blocks: 2a12:bec4:13c0::/44 maxlen: 44
2a12:bec4:13c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 29 Jun 2024 13:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5c:80:1e:bf:9b:cb:0c:6f:03:04:95:be:26:82:45:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 28 01:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfba9f285a15ed26ebed068c2af1b2cfc6718308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:89:94:a8:1e:37:78:52:f0:07:34:b0:a1:
35:95:89:4c:5e:6f:1d:f1:01:db:66:5a:af:6f:ca:
f8:f0:e3:c7:e1:18:26:eb:03:39:fa:0c:b1:dd:f1:
82:59:1f:4c:ac:98:0d:67:6d:77:bb:79:bc:b6:37:
d1:17:5e:60:fe:4d:9d:2b:7c:70:91:ef:b8:88:2d:
25:f9:25:c1:4b:19:94:08:e6:af:da:b0:2d:b5:20:
94:9e:1b:30:0f:43:57:ad:14:28:9b:5d:60:b7:f5:
a2:2b:19:8c:d4:57:63:02:30:f4:e7:42:91:bb:3a:
e5:f3:52:7c:1f:58:6f:7d:62:20:7b:52:76:56:3e:
3f:d6:43:7f:f6:6d:e3:da:4d:c4:a2:fb:d7:99:61:
c9:b9:1e:00:b6:de:7a:15:cb:5e:fb:ed:94:24:db:
95:3d:36:80:75:38:02:15:25:07:56:ad:d8:45:bd:
d1:c3:f6:45:a0:38:c7:29:75:49:27:2e:1d:1f:f0:
e2:19:c8:a1:67:1f:6f:b7:02:0a:e5:a8:02:93:61:
a8:2e:7f:b8:df:c1:10:d4:f9:a0:88:24:07:47:0d:
1a:a7:20:f5:5c:87:93:85:07:ed:79:1e:1c:43:47:
d3:4b:cd:54:51:b1:46:4b:78:c3:13:24:82:af:35:
07:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:9F:28:5A:15:ED:26:EB:ED:06:8C:2A:F1:B2:CF:C6:71:83:08
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/v7qfKFoV7Sbr7QaMKvGyz8Zxgwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:13c0::/44
Signature Algorithm: sha256WithRSAEncryption
b1:e5:4c:a6:12:b6:a1:3d:35:0e:dc:56:d6:76:8e:7b:b5:7c:
80:6b:c3:a5:01:d6:e6:6c:52:95:21:46:ad:13:19:84:76:7f:
9d:83:86:6e:3d:2b:00:5c:c2:04:c1:e1:bd:1d:1b:f4:a7:b6:
a4:3e:63:14:1a:5b:11:79:f3:9b:65:78:02:03:e5:6c:2a:dd:
d5:44:a3:06:df:12:b5:cc:78:dc:fe:0c:8a:43:0c:1c:7b:8d:
fe:64:3e:46:78:06:ce:86:f0:9d:6a:8f:5f:15:8d:61:f9:08:
db:e7:d6:25:88:fd:d4:bc:f7:40:b8:a9:3b:90:31:75:ab:a3:
3a:a8:04:70:c0:f1:9b:27:31:00:7f:8a:15:d4:84:f8:29:73:
ad:e5:7b:59:13:3e:c8:17:eb:ef:cb:5e:10:9a:5b:3d:87:17:
dc:b8:c6:22:77:2f:95:91:79:f4:62:6d:bd:81:a8:e1:18:8e:
6f:e2:bd:fb:7c:0d:6a:f2:16:fa:a2:5d:61:42:cb:a9:45:07:
53:b5:29:92:2f:86:26:59:ad:24:bc:9a:5c:70:12:59:0b:fc:
b7:2a:04:06:13:8b:7c:8f:26:10:99:28:74:18:2c:5a:93:4e:
3a:6e:37:c4:06:70:60:52:c7:ab:72:43:08:68:e5:01:4b:f1:
c5:59:b2:18
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZBcgB6/m8sMbwMElb4mgkWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjQwNjI4MDE0MDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmJhOWYyODVhMTVlZDI2ZWJlZDA2OGMyYWYxYjJjZmM2NzE4MzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizWJlKgeN3hS8Ac0sKE1lYlMXm8d
8QHbZlqvb8r48OPH4Rgm6wM5+gyx3fGCWR9MrJgNZ213u3m8tjfRF15g/k2dK3xw
ke+4iC0l+SXBSxmUCOav2rAttSCUnhswD0NXrRQom11gt/WiKxmM1FdjAjD050KR
uzrl81J8H1hvfWIge1J2Vj4/1kN/9m3j2k3EovvXmWHJuR4Att56Fcte++2UJNuV
PTaAdTgCFSUHVq3YRb3Rw/ZFoDjHKXVJJy4dH/DiGcihZx9vtwIK5agCk2GoLn+4
38EQ1PmgiCQHRw0apyD1XIeThQfteR4cQ0fTS81UUbFGS3jDEySCrzUHRwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL+6nyhaFe0m6+0GjCrxss/GcYMIMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvdjdxZktGb1Y3U2JyN1FhTUt2R3l6OFp4Z3dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBPA
MA0GCSqGSIb3DQEBCwUAA4IBAQCx5UymErahPTUO3FbWdo57tXyAa8OlAdbmbFKV
IUatExmEdn+dg4ZuPSsAXMIEweG9HRv0p7akPmMUGlsRefObZXgCA+VsKt3VRKMG
3xK1zHjc/gyKQwwce43+ZD5GeAbOhvCdao9fFY1h+Qjb59YliP3UvPdAuKk7kDF1
q6M6qARwwPGbJzEAf4oV1IT4KXOt5XtZEz7IF+vvy14Qmls9hxfcuMYidy+VkXn0
Ym29gajhGI5v4r37fA1q8hb6ol1hQsupRQdTtSmSL4YmWa0kvJpccBJZC/y3KgQG
E4t8jyYQmSh0GCxak046bjfEBnBgUserckMIaOUBS/HFWbIY
-----END CERTIFICATE-----
Generated at Sat Jun 29 18:32:39 2024 by rpki-client on console-fra.rpki-client.org