Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yDg4smFAKH5pz-Fx224CtFCbqqI.roa
File: yDg4smFAKH5pz-Fx224CtFCbqqI.roa (raw, json)
Hash identifier: 6sV/2izEzxg9PgIZJU7zmKK+oxTzf7grakkiYlAjznI=
Subject key identifier: C8:38:38:B2:61:40:28:7E:69:CF:E1:71:DB:6E:02:B4:50:9B:AA:A2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0193742435D0CCB7B688588452F4DE6A9A44
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yDg4smFAKH5pz-Fx224CtFCbqqI.roa
Signing time: Thu 28 Nov 2024 18:59:10 +0000
ROA not before: Thu 28 Nov 2024 18:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13852
IP address blocks: 2a12:bec4:1630::/44 maxlen: 48
2a12:bec4:1670::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:24:35:d0:cc:b7:b6:88:58:84:52:f4:de:6a:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Nov 28 18:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c83838b26140287e69cfe171db6e02b4509baaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:84:be:c4:78:52:3c:31:a2:90:ff:c4:97:
4e:cc:14:a8:d4:d9:1a:ed:c7:4b:63:e2:09:7e:e2:
a5:32:04:44:b3:d0:1e:83:a2:98:c5:f3:1b:17:e1:
65:99:74:1c:16:f2:34:79:6c:76:54:8f:a9:d5:c5:
88:04:75:4f:10:ca:69:91:ae:78:d9:0c:c3:14:65:
75:5b:7a:a7:3e:2f:30:a8:15:7b:8b:17:59:20:7e:
38:55:eb:50:89:17:62:e7:9f:40:2e:ac:40:ea:7d:
60:5e:f4:bb:65:b1:45:12:cd:85:54:8b:98:be:d8:
77:e8:0e:1b:2f:91:d9:e2:21:79:e4:01:ea:a2:b6:
d7:a7:91:54:d5:d3:2b:70:62:26:39:1a:13:9f:99:
66:7e:c5:27:d8:45:16:c8:95:b5:24:63:90:70:ed:
21:83:92:49:fb:79:4d:24:d7:77:bb:80:cc:62:97:
76:e6:5d:fe:7a:d4:99:f9:8f:db:07:18:cf:a5:3b:
3b:b0:4d:59:70:f9:b8:9a:2b:c6:bf:a3:5e:a9:0a:
1a:99:57:8f:a5:d2:f8:b2:bc:6c:31:b5:fa:40:3a:
bd:e0:d5:bc:86:2a:2c:b2:fa:6e:40:95:28:28:bf:
a8:47:e7:1d:61:2c:2d:e8:6a:f9:5f:f1:69:d6:86:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:38:B2:61:40:28:7E:69:CF:E1:71:DB:6E:02:B4:50:9B:AA:A2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/yDg4smFAKH5pz-Fx224CtFCbqqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1630::/44
2a12:bec4:1670::/44
Signature Algorithm: sha256WithRSAEncryption
08:9f:50:67:0a:f2:c4:95:99:56:a6:bf:40:fa:f5:29:d4:03:
39:d9:96:f1:03:12:5c:8b:74:bf:67:a2:26:80:98:d3:79:61:
8f:3b:85:2f:51:21:4b:2a:25:b7:75:61:68:40:a5:a7:e1:f8:
9c:dc:ae:1f:c0:ce:e1:72:a8:fb:b4:8b:72:c7:f1:c8:af:67:
e2:c2:af:9c:77:54:43:5e:84:2f:f8:70:71:62:cc:6a:fe:55:
0c:da:74:be:7c:de:00:32:37:ec:4f:96:10:fb:72:21:fd:be:
49:dd:2b:43:ce:82:e4:d6:9f:c8:5c:0c:f7:8c:38:02:b8:fc:
4f:b1:c3:e7:da:2b:f6:1e:ed:f4:81:32:55:a9:b1:45:de:05:
7b:7c:f8:44:1e:9f:30:68:f4:4d:07:c6:51:d5:db:f8:08:4c:
82:2c:5a:75:b5:d3:b9:b8:2e:df:20:15:e7:b6:9b:b1:01:4d:
f9:b4:e9:52:5e:42:4f:5f:3c:c3:9f:00:25:45:16:b9:10:10:
78:7e:46:83:17:88:88:c8:44:e2:7b:31:76:da:37:83:4b:c3:
7d:67:a7:33:22:3f:76:26:05:38:ee:95:68:24:7b:28:1e:68:
6b:12:4c:db:e3:46:12:f7:71:54:9c:73:03:bc:5c:e1:87:87:
ed:ec:3c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:53:55 2025 by rpki-client