Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/LASXOucIra9moUaO7KONyMJvzb4.roa
File: LASXOucIra9moUaO7KONyMJvzb4.roa (raw, json)
Hash identifier: /LZ3o5g7JpDP7pOJ1WVTAE+HUhGHAgfNmI7VV8Hblzo=
Subject key identifier: 2C:04:97:3A:E7:08:AD:AF:66:A1:46:8E:EC:A3:8D:C8:C2:6F:CD:BE
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 0193BC2B1DAF2EBA4302777BE31B98C0D89A
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/LASXOucIra9moUaO7KONyMJvzb4.roa
Signing time: Thu 12 Dec 2024 18:39:22 +0000
ROA not before: Thu 12 Dec 2024 18:39:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 2001:67c:1874::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bc:2b:1d:af:2e:ba:43:02:77:7b:e3:1b:98:c0:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Dec 12 18:39:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2c04973ae708adaf66a1468eeca38dc8c26fcdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:4d:d7:80:da:98:9b:e8:67:86:e4:5c:4a:
e3:d0:83:b7:a8:ad:e7:e6:e9:db:e7:3d:97:53:d3:
79:72:8b:49:83:60:3f:54:d9:5a:c8:10:88:65:7f:
81:a3:44:2d:00:6e:c7:df:93:a5:7a:5b:f8:08:f0:
e8:24:eb:c9:12:b6:b4:96:ef:20:b3:ef:29:72:36:
ad:7e:90:36:42:ad:54:a8:49:1e:a3:a8:da:4a:12:
f5:7e:d0:5e:3d:d4:42:73:dd:01:7a:b5:75:11:ae:
76:64:3a:da:43:41:55:00:5d:f7:4b:49:84:43:51:
5a:8c:f1:b2:7c:e4:6e:01:84:5c:34:8d:66:ca:81:
74:19:97:c3:4f:54:9b:c9:7a:06:c9:28:05:94:8b:
2c:f9:71:b3:63:92:f7:aa:d1:47:d1:38:6d:44:62:
b8:5f:c4:30:b8:ef:7b:1d:2e:64:e8:75:98:00:f4:
47:ee:9c:2a:1b:57:7b:83:69:4f:3c:bd:8d:9a:18:
15:f3:97:2e:73:3b:01:0f:77:95:95:e7:bd:81:f9:
07:53:9e:e3:14:7c:8b:89:ba:ba:a6:82:f8:9e:6a:
0a:39:26:a0:90:87:bb:0b:de:7c:bf:58:79:a4:40:
cf:2f:62:53:c2:d6:ae:b0:3b:37:4a:8a:89:04:d6:
a3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:04:97:3A:E7:08:AD:AF:66:A1:46:8E:EC:A3:8D:C8:C2:6F:CD:BE
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/LASXOucIra9moUaO7KONyMJvzb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1874::/48
Signature Algorithm: sha256WithRSAEncryption
6d:7d:d6:db:ad:ef:1c:e7:5f:e2:13:da:f4:17:4d:2f:56:04:
90:d0:1c:8a:d0:14:78:e7:68:e6:9b:4d:8d:73:36:87:cf:5d:
f4:a0:68:6a:2e:c3:eb:e5:57:b9:82:1d:4c:32:ac:0e:88:1e:
a6:9d:ae:07:a4:8c:34:09:d7:a4:3f:de:e4:15:42:a1:d9:be:
bd:5a:11:54:11:37:f8:10:13:0f:3a:8a:c2:64:c2:4e:9e:97:
50:88:fa:df:80:24:18:da:11:b8:b6:31:95:3c:41:4a:16:64:
fb:ba:d9:16:83:8e:8c:cf:3b:c2:78:b5:5f:4d:3a:60:ec:f9:
b4:c5:4b:77:dc:19:03:6b:d2:76:f8:24:33:69:5f:c1:5a:96:
7f:36:38:40:ec:a0:90:77:05:e5:b6:51:1a:50:01:43:73:5e:
14:2b:3e:bf:61:43:06:0b:ff:6c:67:c9:ed:e7:b7:15:1e:7b:
6e:0f:c6:19:f3:16:fc:0e:5e:df:8d:c0:aa:0f:80:cb:5d:cf:
aa:b5:70:78:de:1c:7c:21:dd:e6:41:02:b9:de:c8:6a:82:49:
cb:29:a0:2c:92:06:ae:c9:5d:4a:af:5f:52:5f:6e:6b:39:54:
d4:b1:8d:41:62:06:5e:8c:80:03:6f:bc:10:7d:34:76:ca:32:
ca:50:21:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:14 2025 by rpki-client