Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/DYZ0mBJM-pwGaUEeUlFHtUfJEsA.roa
File: DYZ0mBJM-pwGaUEeUlFHtUfJEsA.roa (raw, json)
Hash identifier: PZmbDjpU40vnqNpGZtZQ//d8WX9sAWSyIRMWM0UMipI=
Subject key identifier: 0D:86:74:98:12:4C:FA:9C:06:69:41:1E:52:51:47:B5:47:C9:12:C0
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019425FC166A6D7C959D64987E6AFECB35D4
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/DYZ0mBJM-pwGaUEeUlFHtUfJEsA.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24845
IP address blocks: 2a02:102e::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Feb 2025 16:18:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:16:6a:6d:7c:95:9d:64:98:7e:6a:fe:cb:35:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d867498124cfa9c0669411e525147b547c912c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:6b:a4:01:8e:8a:42:f4:52:3c:5f:01:f1:
b2:79:53:fd:af:06:d7:3b:b6:bc:32:53:59:cd:07:
41:48:38:bf:d4:9d:d0:58:b4:0d:f8:6f:fd:ce:81:
b9:de:57:3b:6c:70:cb:4e:65:e2:92:72:10:43:22:
f1:c0:a2:7c:d7:34:f3:c1:20:81:32:a0:03:a4:aa:
8b:8e:16:a0:ea:6a:d8:65:f8:5c:a3:39:c4:bd:e7:
a6:c8:28:de:a7:55:11:7e:a4:09:27:9a:a5:99:8f:
58:41:b8:26:25:39:01:55:0b:04:9f:6a:f4:d9:04:
b5:5d:03:f5:74:46:ad:79:62:6c:63:f6:5c:d2:d7:
cb:b3:5d:28:e9:c1:2e:fd:13:8e:37:2f:e5:e1:f7:
4f:76:88:68:55:fd:5f:51:95:5c:30:71:3c:9d:e9:
75:f4:f5:a9:4e:ba:c4:62:69:9d:95:55:96:26:ba:
52:cf:25:66:2e:df:ad:9e:93:d7:fd:37:91:3f:24:
4c:fe:f2:b8:da:04:bc:8a:90:48:77:f0:aa:2a:e8:
1a:cc:da:9a:7d:58:0c:f7:c3:38:3f:3e:c9:1f:6c:
e8:c4:52:ba:d3:52:52:e7:4f:c9:42:34:c6:01:88:
88:cb:eb:fd:90:d9:d3:7a:5d:4c:c4:63:6b:ec:64:
31:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:86:74:98:12:4C:FA:9C:06:69:41:1E:52:51:47:B5:47:C9:12:C0
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/DYZ0mBJM-pwGaUEeUlFHtUfJEsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:102e::/32
Signature Algorithm: sha256WithRSAEncryption
6e:38:3d:fe:56:15:48:7a:84:fb:bc:be:83:2e:cd:60:53:ab:
47:0b:4f:a5:1d:fa:11:92:66:54:9b:4d:e2:21:c2:3c:a8:85:
28:b3:87:e4:ad:e4:60:06:23:f9:8d:e5:21:fb:25:7a:1d:15:
35:3a:6c:7a:a8:60:06:bd:b3:f8:99:84:64:cd:2f:0f:b0:17:
6a:44:b5:9e:c5:fd:24:c8:b0:a0:17:15:c5:c3:d0:ac:a0:59:
07:ac:a4:25:56:ba:29:ff:36:f4:be:ec:fe:1c:b7:6d:b4:89:
79:71:2c:21:52:ec:28:89:6d:1a:3e:2d:da:02:ef:eb:69:83:
79:77:20:5c:4e:52:97:ad:d3:43:62:74:63:f3:ba:1b:01:29:
71:e1:94:7e:b1:22:e9:a5:55:d8:11:70:2a:42:38:d4:62:16:
25:99:0e:f5:5e:e1:61:01:93:1d:a7:84:a7:09:79:9b:c3:11:
d0:64:f5:68:a8:29:19:0d:db:5c:47:fb:d3:24:38:c2:b2:c5:
a8:ea:9c:d6:72:36:48:06:35:72:0b:ee:5a:8d:f5:06:d6:fa:
f1:f6:b9:a6:a6:bd:9c:d2:47:73:30:02:32:43:04:55:1b:25:
2e:3a:d7:80:a6:20:b0:83:d8:8e:05:dc:28:28:de:f4:09:0a:
eb:df:5c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:29:34 2025 by rpki-client