Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/xS7RNTqCJXEqfO4r_LFu99a1G2c.roa
File: xS7RNTqCJXEqfO4r_LFu99a1G2c.roa (raw, json)
Hash identifier: LEkHeIdZuVNnCKqk6FI6ADiIZnnjWKRpmOgQemvk60Q=
Subject key identifier: C5:2E:D1:35:3A:82:25:71:2A:7C:EE:2B:FC:B1:6E:F7:D6:B5:1B:67
Certificate issuer: /CN=4867d37b761cb7a05fc733e3db43366fa362536c
Certificate serial: 018CC424D11CF415DE89164174A185C3094F
Authority key identifier: 48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/xS7RNTqCJXEqfO4r_LFu99a1G2c.roa
Signing time: Mon 01 Jan 2024 08:29:56 +0000
ROA not before: Mon 01 Jan 2024 08:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50967
IP address blocks: 2001:67c:2140::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:d1:1c:f4:15:de:89:16:41:74:a1:85:c3:09:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4867d37b761cb7a05fc733e3db43366fa362536c
Validity
Not Before: Jan 1 08:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c52ed1353a8225712a7cee2bfcb16ef7d6b51b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:74:d5:6a:a6:7c:19:02:50:9d:f7:f3:57:
26:1e:56:3e:ce:86:44:27:b4:e6:ea:cc:b4:d5:89:
4f:97:91:a6:87:af:a0:10:65:15:cf:19:3f:dc:2e:
d9:57:72:3c:c8:2b:d4:26:4a:6e:70:c3:0e:df:43:
66:f2:84:41:44:d7:ff:57:19:12:93:08:8a:41:55:
9e:dc:55:31:3e:02:78:f1:d8:1e:4e:b1:fc:a0:21:
f9:44:dd:a3:25:7f:82:02:32:d4:e4:05:a6:a0:af:
b3:4c:51:c2:d4:59:38:9e:7b:ff:3a:c4:1c:94:01:
36:6a:b3:e5:e6:af:00:d7:9d:23:42:8b:b3:ec:79:
c9:28:85:a9:32:80:0f:18:e4:d3:e9:a0:15:33:d0:
1c:97:06:0e:29:0f:26:ac:8c:bf:4b:74:be:ba:0b:
8d:68:09:54:f6:0c:b3:eb:fb:96:3e:be:80:4e:b7:
03:e4:2b:57:6d:c2:2b:de:c8:ce:e4:43:1e:55:23:
f3:36:d1:8d:f9:94:9e:c3:8f:3b:fe:3d:93:cb:39:
a5:3a:56:43:29:f7:28:78:5d:97:62:87:1d:8b:9c:
b0:82:a7:8e:ab:95:74:57:b2:57:1c:b9:1f:33:e1:
a0:0a:a6:96:61:33:8e:3a:e3:a9:c3:21:c6:2a:1c:
8b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2E:D1:35:3A:82:25:71:2A:7C:EE:2B:FC:B1:6E:F7:D6:B5:1B:67
X509v3 Authority Key Identifier:
keyid:48:67:D3:7B:76:1C:B7:A0:5F:C7:33:E3:DB:43:36:6F:A3:62:53:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SGfTe3Yct6BfxzPj20M2b6NiU2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/xS7RNTqCJXEqfO4r_LFu99a1G2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e0c5b7-d2ac-4a5a-8098-60f9dea43899/1/SGfTe3Yct6BfxzPj20M2b6NiU2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2140::/48
Signature Algorithm: sha256WithRSAEncryption
af:fc:2c:bd:3d:0c:64:e7:6a:62:a4:9d:a1:ce:72:05:93:74:
79:26:9d:2b:ee:41:11:1e:11:5b:d6:f2:a4:dd:f3:e9:0a:65:
b9:3b:e6:4f:97:5c:74:aa:0e:a7:d0:67:a0:b8:64:90:c8:c2:
0b:63:2e:59:b3:b2:71:f1:3c:40:93:23:55:4e:aa:4f:f9:56:
d4:63:d6:94:9f:2c:a9:7e:27:e6:60:7d:df:ed:2c:3d:1d:88:
30:d6:ca:d8:36:6c:b5:42:81:77:7d:0e:07:ef:42:cc:cf:94:
a4:9c:9a:48:e8:0a:b0:2b:5b:df:01:ee:68:85:c3:e4:72:1f:
8f:0b:1c:f0:8b:f5:3c:f3:0e:65:b2:0d:79:bf:60:f5:04:27:
5c:78:4f:0d:fa:43:80:e3:19:5b:e1:c3:a3:29:44:b3:f9:4a:
37:13:01:91:05:ee:0d:33:e5:02:fc:04:a2:ad:ad:66:6f:23:
11:c6:f0:1e:a3:82:ef:39:94:91:7d:a5:f9:c6:46:d2:ba:ca:
94:69:de:6f:51:bd:b6:ad:a2:d0:88:7b:d4:60:2f:6f:e4:4b:
03:c2:84:8e:fe:f8:98:12:d7:e0:08:dc:dd:b6:6b:7b:8a:44:
0f:94:49:21:0c:eb:be:b9:bd:a7:d3:e8:90:57:1f:7a:9f:63:
c4:0c:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:57 2025 by rpki-client