Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/w38R1zXYlIqz8XVQMT8WtdlHJkY.roa
File: w38R1zXYlIqz8XVQMT8WtdlHJkY.roa (raw, json)
Hash identifier: gWz7xZzgYxK+8SSqlcSSPvLYeGjW3pykqkdXwFtbfkU=
Subject key identifier: C3:7F:11:D7:35:D8:94:8A:B3:F1:75:50:31:3F:16:B5:D9:47:26:46
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018E79F9E95175AA90945C3976DBC0275EA2
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/w38R1zXYlIqz8XVQMT8WtdlHJkY.roa
Signing time: Tue 26 Mar 2024 08:56:45 +0000
ROA not before: Tue 26 Mar 2024 08:56:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216311
IP address blocks: 2a12:bec0:500::/47 maxlen: 48
2a12:bec0:502::/48 maxlen: 48
2a12:bec0:503::/48 maxlen: 48
2a12:bec0:507::/48 maxlen: 48
2a12:bec0:509::/48 maxlen: 48
2a12:bec0:50a::/48 maxlen: 48
2a12:bec0:50b::/48 maxlen: 48
2a12:bec0:50c::/46 maxlen: 48
Validation: Failed, certificate revoked on Thu 04 Apr 2024 08:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:79:f9:e9:51:75:aa:90:94:5c:39:76:db:c0:27:5e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 26 08:56:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c37f11d735d8948ab3f17550313f16b5d9472646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:6a:f1:b8:ee:5f:cd:f5:69:b3:7f:58:95:
f6:34:f5:f0:62:38:1b:f3:33:6a:eb:cb:1a:a6:cb:
46:9d:10:a2:a2:58:f6:ff:fc:3a:ae:64:ee:73:00:
ba:81:99:aa:18:b2:8d:48:8d:fa:2a:c0:93:00:70:
e3:23:01:fb:94:02:f7:84:79:cf:b8:2c:fb:a0:f4:
29:fa:f0:8e:0a:92:e0:db:fd:42:90:f2:47:a5:8c:
64:e7:78:0d:4c:81:ee:f8:1a:e0:34:a6:0f:11:43:
e7:fc:d5:2b:7a:07:f1:2d:54:f8:69:a9:b0:86:86:
41:40:9c:a6:d7:02:cd:64:f7:64:e1:e1:0d:cf:01:
3f:69:a3:9b:ac:21:f3:b3:96:30:09:a3:38:0e:08:
2e:fe:e5:5d:60:b0:04:d2:44:85:be:10:a1:bd:60:
e2:24:0d:4f:14:8e:fb:ff:df:ee:3f:cc:dd:f7:c3:
47:5e:ed:6c:e6:66:57:ea:fc:85:00:ef:62:0d:ee:
7a:24:e7:94:b4:88:de:23:4f:dd:cc:89:78:20:60:
63:a5:a7:29:27:d3:5b:8a:e5:97:aa:13:05:36:de:
9b:e9:5c:b4:10:7f:3f:1a:01:ae:2f:52:6e:3c:e9:
a0:bc:ab:75:7d:58:54:c7:93:0a:33:67:ce:8d:71:
de:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7F:11:D7:35:D8:94:8A:B3:F1:75:50:31:3F:16:B5:D9:47:26:46
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/w38R1zXYlIqz8XVQMT8WtdlHJkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:500::/46
2a12:bec0:507::/48
2a12:bec0:509::-2a12:bec0:50f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2e:3f:47:7f:e9:82:5d:61:d6:44:c5:f7:9c:a7:e9:67:41:a8:
1f:50:2b:f7:54:24:b2:28:3d:a0:99:67:1d:be:fa:41:81:e8:
24:7d:64:98:77:ae:66:6b:d2:a1:dd:6e:dd:92:54:54:f5:53:
fd:ae:12:40:d0:9d:7f:ff:c3:7e:b8:15:3f:3d:66:fd:78:56:
30:45:68:03:c2:6e:cd:b3:4f:b5:79:56:86:3d:6c:27:52:73:
c1:74:f4:26:ee:d6:1a:08:2a:cf:66:27:6c:26:40:1c:23:72:
71:20:9e:a1:4b:85:d0:5d:04:67:3d:9c:2d:1e:4c:92:7e:5c:
40:c9:1d:89:e0:a6:ad:32:f9:4d:85:08:44:0f:9c:86:29:95:
28:33:a2:1f:32:90:11:5d:c2:79:2e:99:99:90:3d:58:12:f1:
23:57:92:9e:4d:e0:e5:2d:0d:4f:0e:94:27:75:02:06:37:42:
58:06:12:9a:71:01:4e:82:12:8e:11:ee:f0:4f:de:83:e5:8e:
5c:ff:08:b3:24:92:0a:db:ed:a1:96:1e:5f:c3:ad:66:12:37:
cb:e6:93:65:7d:88:e9:15:8a:87:3b:07:fa:e9:d3:0a:25:67:
04:14:4b:0d:c6:bc:20:b5:4d:78:b6:70:18:e1:7d:e9:2c:5f:
48:02:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org