Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/DceiQ9uN6aRXAn1oXqxS6n3rkTc.roa
File: DceiQ9uN6aRXAn1oXqxS6n3rkTc.roa (raw, json)
Hash identifier: iW0p5FzOn/O8HEJhRF0QLd5Ezfp03NHoeKn3DgOI3oA=
Subject key identifier: 0D:C7:A2:43:DB:8D:E9:A4:57:02:7D:68:5E:AC:52:EA:7D:EB:91:37
Certificate issuer: /CN=accfab8b893010a1b5e25072e1d456904493f52d
Certificate serial: 018CCA2BCB02A7277926E1C7E78743B782DA
Authority key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/DceiQ9uN6aRXAn1oXqxS6n3rkTc.roa
Signing time: Tue 02 Jan 2024 12:35:16 +0000
ROA not before: Tue 02 Jan 2024 12:35:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211586
IP address blocks: 2001:678:f18::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:cb:02:a7:27:79:26:e1:c7:e7:87:43:b7:82:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=accfab8b893010a1b5e25072e1d456904493f52d
Validity
Not Before: Jan 2 12:35:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dc7a243db8de9a457027d685eac52ea7deb9137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f7:f0:02:9d:ff:ed:f7:9d:b4:cb:c2:f7:34:
ab:e7:31:f6:5e:f4:52:87:4f:5e:f0:e2:03:ee:5a:
f3:f0:47:c8:ea:90:16:17:fb:5b:04:8e:12:4a:b2:
9b:b6:fa:25:5f:1f:56:fb:d3:78:11:b8:1f:9b:50:
50:f6:22:62:5d:92:43:5e:06:ba:e2:d0:c2:39:94:
5c:2f:2c:7b:a3:63:5b:81:3b:24:2c:c7:6f:8f:a6:
7e:53:23:7a:06:4a:f0:94:85:3b:f7:c0:c1:e5:a2:
22:4f:16:d7:37:86:2d:a7:58:5b:df:98:57:9a:21:
4a:03:ae:29:5f:58:d2:9d:c3:0f:e8:4c:7d:90:f8:
bd:8b:e5:fe:bd:aa:a5:ec:35:93:45:bc:d4:85:56:
92:26:9c:bf:ad:d0:7e:fb:a8:70:d4:02:03:8b:f7:
a0:c3:e7:b4:7f:3d:e4:15:8b:d1:e6:16:ce:c5:d5:
8c:e8:27:89:7f:5d:60:bb:a7:c1:28:02:51:8a:d2:
89:33:1b:e2:c4:ff:23:e8:a9:06:79:92:d4:82:76:
8c:3d:48:1e:24:99:b3:77:88:6c:90:da:1f:db:2e:
64:b6:dd:db:a0:74:a5:9a:ea:de:5b:25:e5:57:f7:
26:65:75:4e:eb:f6:69:ce:b4:e8:2d:b6:e2:0f:ba:
b8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C7:A2:43:DB:8D:E9:A4:57:02:7D:68:5E:AC:52:EA:7D:EB:91:37
X509v3 Authority Key Identifier:
keyid:AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/DceiQ9uN6aRXAn1oXqxS6n3rkTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f18::/48
Signature Algorithm: sha256WithRSAEncryption
3c:e6:74:0d:d5:3a:69:7a:a7:5b:d1:d3:94:60:e5:bb:61:3b:
54:59:9b:99:02:03:a1:12:28:80:fc:82:aa:9d:e6:3c:5c:c1:
a6:64:d4:d7:d3:fb:19:97:03:22:d4:51:10:82:64:ba:21:21:
a5:b0:06:e8:e0:a0:ec:f0:4a:b2:04:40:67:fa:6e:4d:9e:a1:
b1:e3:87:e7:ec:37:d6:3e:3d:28:79:37:1a:92:27:31:4f:50:
99:e4:06:7c:53:c2:84:6c:3c:1e:01:37:68:6c:fa:2c:2c:d5:
c4:b7:9e:45:2d:d9:7e:13:5b:26:78:57:96:5c:38:af:c4:8b:
00:c9:03:c4:c4:45:cf:ee:fb:56:35:7e:88:08:d1:e5:d9:c6:
47:3d:8c:c1:3c:2d:de:8b:17:0e:cd:b2:e2:0c:5e:d9:8a:4c:
b0:d1:05:e1:7d:4b:e9:75:53:8d:4e:cb:33:59:da:33:d6:d8:
23:92:5c:0a:b4:d4:2f:a9:57:82:37:ba:c3:66:2b:88:84:3e:
1e:d8:9f:81:a3:6d:e1:31:1f:90:65:65:f1:c4:01:07:6e:d1:
5a:f4:d4:fc:58:5f:fa:3d:b6:e4:5c:96:d5:d2:b2:d9:9a:85:
64:09:9f:82:c3:02:29:11:e2:a6:b0:b1:4d:2f:22:44:b7:ee:
62:37:3a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:49:03 2025 by rpki-client