Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/mU3rifKxMOnr96mxop6w7uccHP4.roa
File: mU3rifKxMOnr96mxop6w7uccHP4.roa (raw, json)
Hash identifier: qIC5O6A6qgyeDBZTjZ9D5UCIw7BDxsuRC98zA/Pjgis=
Subject key identifier: 99:4D:EB:89:F2:B1:30:E9:EB:F7:A9:B1:A2:9E:B0:EE:E7:1C:1C:FE
Certificate issuer: /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial: 0193A164DD9F4D074B11DB1C0728251F75B2
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/mU3rifKxMOnr96mxop6w7uccHP4.roa
Signing time: Sat 07 Dec 2024 13:52:42 +0000
ROA not before: Sat 07 Dec 2024 13:52:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29390
IP address blocks: 2a09:f040::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 08 Dec 2024 18:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:64:dd:9f:4d:07:4b:11:db:1c:07:28:25:1f:75:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
Validity
Not Before: Dec 7 13:52:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=994deb89f2b130e9ebf7a9b1a29eb0eee71c1cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:57:06:6b:8b:e6:7a:99:4d:2d:09:d9:eb:
7d:c1:88:0e:35:65:d2:77:80:96:df:36:74:fc:63:
52:14:c2:f7:89:fa:9d:7f:eb:ea:4d:e2:c2:34:58:
31:7d:09:29:81:2a:b3:68:71:e8:21:8c:18:fc:e0:
8c:f3:20:7a:e1:58:ac:d7:4a:b0:4a:00:48:0e:2a:
a3:a6:83:47:63:69:f9:70:6d:02:1e:6e:43:6a:cb:
b6:b7:04:27:a7:a4:ce:98:f9:56:7c:1b:f8:3c:12:
35:3e:f3:87:fd:4d:1c:99:10:ae:19:14:6e:0d:96:
21:f4:fe:49:50:c2:15:86:2a:b0:18:44:d9:4e:5f:
9b:8f:6e:97:e0:68:7c:ce:a1:e9:5c:6e:f4:b4:d5:
e7:00:6a:45:4f:e4:d5:ca:3a:7c:31:1b:0d:32:11:
b1:e9:80:bd:04:e5:09:ef:13:6a:97:b9:81:92:ea:
bf:35:d6:0d:81:c8:98:93:82:0c:74:c4:89:53:bc:
1c:d4:d4:85:ad:6e:7d:26:f2:5f:6a:fa:76:31:df:
4a:55:2d:93:d6:2d:f2:69:84:f8:bb:ec:da:5c:11:
d0:4f:13:35:b6:1f:3c:21:24:b6:d8:53:2e:ae:a8:
12:ea:32:87:66:be:87:d1:fb:26:7a:47:45:26:03:
37:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4D:EB:89:F2:B1:30:E9:EB:F7:A9:B1:A2:9E:B0:EE:E7:1C:1C:FE
X509v3 Authority Key Identifier:
keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/mU3rifKxMOnr96mxop6w7uccHP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:f040::/29
Signature Algorithm: sha256WithRSAEncryption
7f:be:65:f4:1e:ef:3a:bc:76:6f:df:7b:85:1e:0d:87:12:3b:
27:05:2b:f7:03:45:ce:98:31:39:38:4d:7a:e8:60:af:81:d9:
d5:ba:dd:58:3f:b5:ed:0d:a4:bb:4c:79:04:c3:6f:13:a9:c8:
09:b5:e1:80:47:f3:f8:90:2d:e2:e3:8a:de:ed:0e:b2:86:a4:
c7:01:5b:6c:5a:a0:36:07:98:4f:e5:e6:6d:ab:b7:17:77:71:
f7:ae:f9:19:5b:38:2f:2f:24:65:27:c3:2c:2f:0b:83:e8:0d:
fd:68:20:08:54:47:29:36:c2:97:86:59:56:a9:4a:24:36:9e:
62:13:32:b2:5c:86:bc:66:c0:d2:50:65:46:c3:c2:09:43:ae:
54:9a:01:8e:26:2f:fd:a1:e9:d3:1d:5d:73:db:23:02:55:d2:
0e:fc:7c:2d:80:60:7b:78:c5:d7:d2:fe:49:3c:1f:4d:73:ff:
ef:82:a7:e9:da:31:54:da:42:e2:d2:f9:59:1f:60:7a:07:6f:
34:0e:fd:6a:e0:c4:80:36:59:ef:b3:86:ee:c5:7c:1c:4e:ae:
2c:73:27:7f:a3:01:9b:37:c4:a4:17:4f:4e:24:1d:a0:7f:ed:
42:18:9f:d1:dd:61:59:92:79:c1:26:77:89:6e:24:5c:2d:59:
2d:7b:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:05:13 2025 by rpki-client