Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/thLD7TU19PJrBOhyOZeNsocybpk.roa
File: thLD7TU19PJrBOhyOZeNsocybpk.roa (raw, json)
Hash identifier: C7RmrkeEKXpy6/NR6/joxBBpp9urkhlxWv7nJ1eegU4=
Subject key identifier: B6:12:C3:ED:35:35:F4:F2:6B:04:E8:72:39:97:8D:B2:87:32:6E:99
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 01943C9AA02672F90E2B13888C8CE567AC63
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/thLD7TU19PJrBOhyOZeNsocybpk.roa
Signing time: Mon 06 Jan 2025 17:12:34 +0000
ROA not before: Mon 06 Jan 2025 17:12:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215492
IP address blocks: 2a14:8100:10::/44 maxlen: 44
Validation: Failed, certificate revoked on Tue 07 Jan 2025 09:09:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:3c:9a:a0:26:72:f9:0e:2b:13:88:8c:8c:e5:67:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: Jan 6 17:12:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b612c3ed3535f4f26b04e87239978db287326e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a5:9c:e2:11:ee:4f:3f:07:f3:15:d9:6f:97:
98:19:2f:56:68:5c:a8:62:71:df:a7:18:ed:6b:3f:
ba:d8:28:94:55:85:8a:8b:67:8a:45:cd:22:29:1b:
79:a6:e6:ca:93:c3:b1:53:83:2d:95:dd:64:3f:46:
67:a8:fa:39:2c:0f:01:e7:e7:dc:dc:b2:f8:22:a5:
28:13:40:5a:73:b6:0e:53:e8:49:f3:9c:4e:a3:c9:
24:60:a5:b5:0b:f8:e1:4c:ff:ec:85:70:d7:fb:55:
81:7c:c4:90:db:2d:12:fd:7b:06:e3:38:a0:3b:62:
33:fb:ab:94:46:f0:8c:a3:02:e0:f2:a8:71:52:25:
b8:72:89:94:62:9e:48:c8:a1:4c:8f:60:74:36:e6:
4c:1d:e9:7d:69:25:8c:ab:61:12:71:0d:68:88:59:
8a:3b:e0:d8:97:3d:8b:ba:93:ae:2d:96:22:f0:56:
2f:8c:e3:7e:6a:fd:b1:b1:6f:e5:31:be:28:fb:38:
1f:0b:c5:40:f8:85:09:97:1c:36:06:56:bc:e0:01:
bb:04:c8:16:54:78:16:d8:46:f9:08:0c:c0:7e:c4:
d9:77:cd:87:10:52:5e:4e:e7:98:b9:7c:37:c2:dd:
79:e1:19:f4:90:03:fd:47:49:18:ac:3e:1d:4d:a4:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:12:C3:ED:35:35:F4:F2:6B:04:E8:72:39:97:8D:B2:87:32:6E:99
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/thLD7TU19PJrBOhyOZeNsocybpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:8100:10::/44
Signature Algorithm: sha256WithRSAEncryption
48:72:83:4f:a9:cc:65:cf:46:3d:19:c0:ef:f9:71:4d:fc:71:
51:06:24:5f:b0:62:35:79:27:f9:69:09:7f:32:e0:91:4e:6d:
7a:f6:a8:bc:01:00:14:c1:96:ad:1a:cc:06:0b:fb:34:05:6c:
5f:94:f6:fc:51:cb:94:2b:79:ca:6c:ff:76:a7:79:ea:80:e4:
ac:72:e6:fa:e8:33:3f:44:eb:32:4e:55:f3:9e:44:09:fb:80:
f4:e2:cf:f5:9f:96:e0:62:84:66:1e:92:50:d1:26:d2:ef:a5:
a3:05:db:18:a7:c9:a0:c8:0d:e9:78:f4:d5:cc:7c:53:ef:b2:
b7:0e:a7:e6:03:dd:3b:4b:36:76:7a:cd:cf:30:71:82:e9:a2:
81:40:d3:59:57:03:6f:6d:85:3e:17:23:54:ca:1b:29:c1:dd:
6c:0c:1d:10:54:c2:f3:fe:39:32:de:1c:e1:69:60:e2:34:7c:
62:eb:e7:f4:92:34:6f:92:f3:5b:b9:32:34:70:f0:34:18:ef:
08:12:88:a4:52:4f:00:99:c1:78:92:9a:d2:12:da:f0:1f:22:
a1:7f:f9:00:34:c2:4e:5e:24:2c:1b:cc:54:cb:34:30:36:ae:
45:61:0f:99:e2:be:1a:7f:be:95:f0:3d:bd:d2:1e:25:43:48:
8c:d7:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:56:43 2025 by rpki-client