Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/pnPjPt8ahQsVjsRubPwowbKi7Ag.roa
File: pnPjPt8ahQsVjsRubPwowbKi7Ag.roa (raw, json)
Hash identifier: mrzDaBYQaXGx2vyrcv5VmIQl2xX6RDsT7vEcRGQtnBk=
Subject key identifier: A6:73:E3:3E:DF:1A:85:0B:15:8E:C4:6E:6C:FC:28:C1:B2:A2:EC:08
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 018CCA296009F8D351875FB7ECC46D778160
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/pnPjPt8ahQsVjsRubPwowbKi7Ag.roa
Signing time: Tue 02 Jan 2024 12:32:38 +0000
ROA not before: Tue 02 Jan 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39257
IP address blocks: 2a13:d500::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 26 Aug 2024 12:06:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:60:09:f8:d3:51:87:5f:b7:ec:c4:6d:77:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jan 2 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a673e33edf1a850b158ec46e6cfc28c1b2a2ec08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:43:f8:16:68:2c:87:10:fe:56:3e:fc:f5:
5d:da:2b:f4:b7:4e:a6:1c:74:35:5a:87:75:2f:d1:
b6:71:e0:c0:45:72:2f:42:11:ea:11:11:ed:29:98:
0f:96:c3:a9:03:40:aa:83:ce:24:2c:85:4f:b0:2a:
82:be:1d:05:de:03:bc:c3:38:17:9e:67:3f:3b:06:
6a:4d:4b:85:83:46:28:f3:91:a5:11:3a:46:34:b7:
01:c3:e6:09:22:88:e0:f6:96:53:32:99:9a:4b:ec:
00:d4:46:7f:d2:68:f9:bb:15:6a:ef:78:82:ed:6f:
01:e7:93:de:db:2f:57:bb:89:4c:fe:5e:7b:50:ed:
ae:3e:76:12:7f:bf:42:ef:fb:84:fa:55:71:fe:6e:
d1:ae:91:f8:6d:b8:2a:13:11:ef:2c:57:c6:f4:b2:
d1:c6:a3:48:af:47:ed:6f:da:6b:81:f2:4a:67:56:
af:1b:0d:d2:40:8f:b1:d9:da:a0:d4:47:00:ce:a7:
b1:4f:ee:7a:f1:ba:fa:22:a7:17:58:bf:6b:ce:7f:
ee:e6:10:12:fc:3b:c4:10:38:a4:e5:11:89:00:af:
03:89:a0:29:c8:c5:ee:c8:79:ae:ea:fd:97:d5:75:
06:ce:50:00:ce:66:db:f3:3a:79:02:f0:06:05:2f:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:73:E3:3E:DF:1A:85:0B:15:8E:C4:6E:6C:FC:28:C1:B2:A2:EC:08
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/pnPjPt8ahQsVjsRubPwowbKi7Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d500::/32
Signature Algorithm: sha256WithRSAEncryption
27:ab:85:df:4c:1f:6b:c8:e0:08:04:8f:21:18:04:eb:5a:73:
bc:65:fa:3f:0f:8f:ae:c7:17:fc:77:44:fc:43:2b:60:d9:de:
5c:cf:cb:5b:0c:f6:8b:c3:d1:5d:46:b4:d7:c5:9b:77:47:18:
84:31:45:fb:8e:09:84:00:b9:49:ce:cc:9f:19:9c:10:b7:12:
fd:2f:03:5a:f8:cc:b0:09:c5:14:cf:40:c0:d6:5b:5b:e1:71:
b3:93:f3:36:71:b1:51:40:41:1c:f9:80:67:c4:70:74:77:a1:
44:97:0c:73:17:e4:15:10:bc:66:2d:87:f6:ec:60:29:13:2d:
a8:38:70:48:59:4f:c8:ce:b5:a7:97:ea:3d:29:5c:dc:ca:df:
d4:7b:66:db:c9:c8:57:4c:d8:89:48:70:44:f4:02:52:3a:7e:
fc:ef:09:d2:10:6c:12:f4:3d:f6:90:bf:b7:4d:8b:ea:24:c5:
1e:a6:d6:b7:53:1e:06:e7:a7:1a:ff:4f:af:14:9d:fc:90:0c:
a5:4d:97:b9:37:fc:88:f5:9d:ca:a2:6f:ef:a9:a3:25:1c:5f:
3e:a8:74:be:d3:f6:9c:89:fa:26:82:79:02:cc:dd:ac:f0:b1:
56:62:a5:28:70:41:a7:0e:f2:1b:e4:b1:1a:fb:69:7c:e1:8e:
53:4f:f9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:17 2025 by rpki-client