Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/S7hHs-2f2R5McREYkw6WjElMTEU.roa
File: S7hHs-2f2R5McREYkw6WjElMTEU.roa (raw, json)
Hash identifier: UvVZAUgXvHYJLPQmEOQQcPcvTcHEh+ccw9sM93wjLGM=
Subject key identifier: 4B:B8:47:B3:ED:9F:D9:1E:4C:71:11:18:93:0E:96:8C:49:4C:4C:45
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 01941F8C73BA649C36DC2A5BE0A8E44EBDD9
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/S7hHs-2f2R5McREYkw6WjElMTEU.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214674
IP address blocks: 2a14:67c1:500::/40 maxlen: 48
2a14:67c1:600::/40 maxlen: 48
2a14:67c1:1000::/36 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 06:07:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:ba:64:9c:36:dc:2a:5b:e0:a8:e4:4e:bd:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bb847b3ed9fd91e4c711118930e968c494c4c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:07:92:0f:19:1d:c9:03:33:30:57:d3:7d:d4:
bf:dd:3b:84:b1:6b:c2:2b:31:86:50:c7:b2:d0:5a:
0f:47:73:03:2b:d8:2d:73:ed:c8:8e:1f:ae:d3:b5:
a3:e4:4d:9a:65:ac:ed:b9:37:59:32:dd:44:07:19:
2f:7b:18:b3:eb:2f:6c:02:e3:fe:8a:75:c2:c6:cd:
4f:d2:b3:69:c3:bd:9f:e4:9a:dd:a7:55:ca:2b:89:
db:66:52:04:e5:b4:f6:9c:f6:ae:9f:7f:70:ba:65:
e3:8b:45:13:df:21:de:bd:e2:da:83:11:53:6b:20:
51:34:30:17:12:16:e8:d8:c4:99:5f:ee:92:ac:0a:
fc:8e:35:92:8a:be:ca:02:ab:32:ce:a9:e7:9c:fd:
54:94:4f:a2:9a:91:61:c7:1d:1f:39:a3:3a:8c:41:
80:6a:1a:1f:49:ae:ad:c1:f6:36:7a:b0:49:6b:d2:
4f:9e:53:28:21:f6:35:b4:ba:f2:d3:fd:0b:ad:c6:
6b:2c:a7:a6:54:1c:44:80:7a:b4:74:c8:14:67:1f:
22:4b:50:ab:36:f1:9b:1a:1f:5b:56:bf:51:f7:c1:
ef:ba:34:77:f3:05:d4:20:02:81:98:fc:e1:f7:2b:
18:ee:47:ae:be:41:7b:10:e5:14:c7:6a:b5:92:ca:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B8:47:B3:ED:9F:D9:1E:4C:71:11:18:93:0E:96:8C:49:4C:4C:45
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/S7hHs-2f2R5McREYkw6WjElMTEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:500::-2a14:67c1:6ff:ffff:ffff:ffff:ffff:ffff
2a14:67c1:1000::/36
Signature Algorithm: sha256WithRSAEncryption
5b:ff:6b:fe:98:19:d2:e5:26:d6:76:00:87:c6:8e:1b:13:71:
dc:7e:dd:5e:cb:6f:09:fc:c4:43:c3:3b:d1:c5:3f:6d:68:ad:
0a:0d:f0:af:c5:b3:e3:39:46:c1:47:52:ec:f6:42:23:f2:89:
5f:ee:e4:e8:27:de:82:e8:85:2f:c8:ce:ed:1f:da:4e:bb:9c:
80:6f:4f:d6:75:59:cf:c8:c1:0a:59:97:a9:33:f7:31:56:89:
1e:ac:fb:6d:93:7e:93:5c:eb:39:7d:4a:f8:e9:4a:a1:f5:fe:
c8:29:42:b5:82:5b:0f:29:cf:cf:85:6b:fa:cc:e4:c0:c7:a9:
35:83:fb:0a:b4:06:57:5b:b5:c0:cc:0f:3c:ea:9f:99:5d:70:
e1:37:2d:a1:bf:2e:cc:88:a0:89:c5:18:f9:a3:14:8a:4d:b6:
d1:92:bf:60:2f:43:53:78:d9:5d:73:fe:56:44:8c:ec:f9:7e:
11:1e:83:4b:6a:bb:b9:0b:f7:c1:16:23:62:41:59:76:1d:6a:
ca:be:a4:d9:17:13:d4:14:21:f0:52:e7:01:7c:19:95:6e:17:
73:19:a7:07:b5:51:b7:a6:c3:7f:f6:70:81:47:20:b7:55:1e:
6b:0e:36:76:38:68:9d:f1:82:8e:6a:44:de:a3:85:f0:65:39:
b4:0e:f3:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:11 2025 by rpki-client