Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XbGH82ZjkAmE1Hu7-v1jTYb7_bw.roa
File: XbGH82ZjkAmE1Hu7-v1jTYb7_bw.roa (raw, json)
Hash identifier: vKiHurK63ioZhws7MHkKLn+qS1OgpySoaTBNJ2XYfFg=
Subject key identifier: 5D:B1:87:F3:66:63:90:09:84:D4:7B:BB:FA:FD:63:4D:86:FB:FD:BC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 0194D4B74008F99C52261582BF45D89690F6
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XbGH82ZjkAmE1Hu7-v1jTYb7_bw.roa
Signing time: Wed 05 Feb 2025 06:06:06 +0000
ROA not before: Wed 05 Feb 2025 06:06:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198351
IP address blocks: 2a12:bec4:1020::/48 maxlen: 48
2a12:bec4:1021::/48 maxlen: 48
2a12:bec4:1022::/48 maxlen: 48
2a12:bec4:1023::/48 maxlen: 48
2a12:bec4:1024::/48 maxlen: 48
2a12:bec4:1025::/48 maxlen: 48
2a12:bec4:1026::/48 maxlen: 48
2a12:bec4:1027::/48 maxlen: 48
2a12:bec4:1028::/48 maxlen: 48
2a12:bec4:1029::/48 maxlen: 48
2a12:bec4:102a::/48 maxlen: 48
2a12:bec4:102b::/48 maxlen: 48
2a12:bec4:102c::/48 maxlen: 48
2a12:bec4:102d::/48 maxlen: 48
2a12:bec4:102e::/48 maxlen: 48
2a12:bec4:102f::/48 maxlen: 48
2a12:bec4:17a0::/48 maxlen: 48
2a12:bec4:17a1::/48 maxlen: 48
2a12:bec4:17a2::/48 maxlen: 48
2a12:bec4:17a3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 05 Feb 2025 06:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:b7:40:08:f9:9c:52:26:15:82:bf:45:d8:96:90:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 5 06:06:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5db187f36663900984d47bbbfafd634d86fbfdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:d9:75:06:b2:ff:88:c9:be:b2:00:be:f5:
2b:fd:2d:3f:b5:0e:58:73:95:7d:98:7c:57:d5:a8:
75:eb:19:bb:7f:46:41:6e:b8:4b:36:8e:80:a8:6f:
5c:02:30:d6:b8:68:8f:29:f1:86:62:6e:5e:67:4e:
14:6d:fc:fa:33:7d:96:11:7e:c9:13:35:02:43:6e:
66:7a:4d:be:c6:a6:ab:08:95:87:88:88:66:18:47:
09:fb:60:3c:dd:c4:2d:0e:d6:78:a1:3c:69:78:7c:
2b:80:06:04:1a:3e:8f:92:4a:6d:82:22:48:26:9b:
db:63:bc:6c:92:22:90:0a:61:22:e3:d2:3c:1a:cf:
bb:e7:a8:07:36:c3:31:70:7d:98:b3:3e:dc:6d:90:
08:cb:60:ac:69:00:d4:5f:83:7a:3b:bd:9e:6b:fd:
8b:af:61:09:38:84:f5:76:69:51:76:d3:91:63:a4:
b1:a0:3b:a2:6c:08:c0:0c:3b:91:bf:25:cc:96:c0:
da:70:bd:a8:77:f3:90:71:57:d1:95:90:42:a8:5e:
37:7f:1f:f5:da:d4:43:e8:8f:02:02:9b:e1:56:de:
2b:ce:ab:a0:44:41:ba:87:9d:33:89:68:ec:c3:df:
5c:f4:8d:13:37:30:cd:6d:ef:32:51:43:86:a8:1f:
52:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B1:87:F3:66:63:90:09:84:D4:7B:BB:FA:FD:63:4D:86:FB:FD:BC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/XbGH82ZjkAmE1Hu7-v1jTYb7_bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1020::/44
2a12:bec4:17a0::/46
Signature Algorithm: sha256WithRSAEncryption
b8:de:3c:c4:69:f5:2e:6c:36:43:ab:7b:2b:ba:f1:53:6e:1f:
90:79:5e:87:2d:14:e0:7e:dc:3c:6c:cd:9f:ee:be:16:37:28:
e8:1c:08:29:24:e1:17:91:b7:f7:69:8b:88:eb:84:98:1c:0a:
f9:0f:98:9e:20:55:3f:61:3a:47:a7:9d:30:ec:33:42:57:49:
75:6e:7d:5e:47:6a:39:52:25:d6:ff:60:55:4f:b4:b1:a8:b0:
a5:b5:3b:cd:a3:e3:15:90:7b:1f:34:5f:b0:57:44:2d:ae:ab:
29:a8:92:a3:4c:24:b3:5c:bc:86:8a:b9:a5:05:d0:bd:03:92:
ce:cc:d5:d6:41:d7:63:ad:ce:d1:c7:83:38:a2:f0:e9:7a:06:
09:53:80:0b:be:32:f9:06:5a:a0:56:9f:b9:5d:3b:3f:c4:1c:
50:b1:80:cd:2b:39:5d:18:32:ff:b0:9a:9f:ca:bf:02:a1:6e:
32:76:c9:27:5e:1c:e7:29:09:3b:68:81:46:c7:10:ed:87:e6:
c2:6f:cc:59:99:36:d2:31:b0:10:68:05:47:32:67:ae:ea:a5:
ae:39:13:f3:81:c4:ba:1c:72:4a:17:e2:95:5c:23:63:77:8b:
db:a8:d7:ff:46:5a:9e:4e:22:f8:16:07:a9:57:b8:40:08:80:
ba:2b:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:55:49 2025 by rpki-client