Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/jSDFvVHxD5TmYC_3njkOx-faMcM.roa
File: jSDFvVHxD5TmYC_3njkOx-faMcM.roa (raw, json)
Hash identifier: 9dWbpjyd+MMJb8wHcOuPDbQs2jPb0VCtC292mrL5JFs=
Subject key identifier: 8D:20:C5:BD:51:F1:0F:94:E6:60:2F:F7:9E:39:0E:C7:E7:DA:31:C3
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01961F7CC32EF1DE70E0A8943337EB9454B0
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/jSDFvVHxD5TmYC_3njkOx-faMcM.roa
Signing time: Thu 10 Apr 2025 11:36:32 +0000
ROA not before: Thu 10 Apr 2025 11:36:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197860
IP address blocks: 2a12:bec0:390::/44 maxlen: 48
2a12:bec4:1010::/44 maxlen: 44
2a12:bec4:2020::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 30 Apr 2025 09:54:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1f:7c:c3:2e:f1:de:70:e0:a8:94:33:37:eb:94:54:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 10 11:36:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d20c5bd51f10f94e6602ff79e390ec7e7da31c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6e:bc:89:d3:50:05:e9:06:76:32:46:23:4e:
31:c1:66:40:5b:c2:ef:64:b0:fc:3c:aa:ab:f4:5d:
f0:c4:35:9b:d2:9c:84:24:68:49:08:08:fc:bb:53:
36:68:72:ac:d8:58:e7:1b:0a:03:b9:e8:7a:5b:d5:
33:15:bb:6f:24:69:97:e5:21:cc:99:fa:6a:87:60:
29:b3:42:d0:d0:b5:b1:99:82:9e:75:3f:87:bd:1d:
01:66:05:13:5f:c0:ac:59:a8:7b:ca:70:b6:7f:7e:
24:d7:03:3f:75:82:6b:07:57:72:bf:86:48:66:a6:
49:f7:6c:c4:3a:5f:fd:0d:71:8b:64:55:11:66:bc:
99:ec:34:83:3a:33:47:bc:a9:b5:0b:05:70:9b:86:
4b:96:0b:1f:a1:b2:9f:35:8e:b8:69:f4:f3:02:a2:
66:64:89:a6:27:01:ce:9c:0a:6f:f0:aa:d1:75:6a:
68:dd:98:7a:1e:59:41:c7:62:af:97:77:50:59:8f:
e7:26:df:07:f5:79:26:f2:8c:14:dc:2c:23:24:5a:
a0:d3:43:b2:75:f4:e8:1a:0d:f6:2b:79:31:5b:48:
86:4b:81:3f:d7:16:1a:43:88:61:e9:3e:82:94:30:
01:ea:4e:fd:f4:5c:e5:5c:9e:39:e4:69:9e:83:20:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:20:C5:BD:51:F1:0F:94:E6:60:2F:F7:9E:39:0E:C7:E7:DA:31:C3
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/jSDFvVHxD5TmYC_3njkOx-faMcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:390::/44
2a12:bec4:1010::/44
2a12:bec4:2020::/44
Signature Algorithm: sha256WithRSAEncryption
3a:59:3e:29:84:2d:a6:f9:77:63:fc:13:45:b2:a8:f7:dd:5b:
31:eb:e2:9b:b3:10:8d:e1:10:63:d8:58:5b:3b:3f:57:a6:52:
cb:1f:dc:1d:64:6b:14:ad:00:36:fd:54:de:62:bd:10:f2:c3:
6c:ae:b4:f0:5d:56:86:6d:18:ed:8e:a2:3e:57:9d:48:c1:b5:
75:34:22:16:19:7e:3b:3c:73:a7:17:2f:41:87:20:1f:b3:4e:
c3:ea:50:cd:67:f3:65:13:5a:72:ac:16:b0:8b:20:06:02:84:
e0:7e:25:5f:91:39:81:1b:e9:f8:46:75:18:89:02:1b:7d:58:
76:10:9b:bc:7a:1a:f7:4d:b4:03:9f:04:0d:a1:b6:ed:c1:90:
37:f7:79:85:d0:65:0b:11:51:43:4c:0b:ac:97:5a:5f:86:f0:
2c:d1:dd:dc:7f:41:86:8e:9e:9a:94:3a:0d:0a:ae:24:51:7d:
61:1d:af:31:7e:49:0b:d3:19:a1:5f:0b:2a:2f:0d:a4:4d:86:
11:a7:c8:23:b9:32:cb:50:b1:ae:d4:de:45:a8:61:bd:67:f3:
95:2f:ea:e1:c3:ca:07:b2:0c:2c:a6:ce:14:a6:17:3b:22:f6:
60:ee:99:8c:82:4e:02:a1:d4:1a:a7:89:e6:67:f9:0b:1c:5b:
c7:6e:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:58:12 2025 by rpki-client