Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/PcYDIjApWOevjA7NxGoBCmKKDnU.roa
File: PcYDIjApWOevjA7NxGoBCmKKDnU.roa (raw, json)
Hash identifier: eynCV66Tc3+mU5zIk0WYLOIkiZviEjLoyy0CuvpkopE=
Subject key identifier: 3D:C6:03:22:30:29:58:E7:AF:8C:0E:CD:C4:6A:01:0A:62:8A:0E:75
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 0193A8B435E07BE0D1B404943259C9F6E04E
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/PcYDIjApWOevjA7NxGoBCmKKDnU.roa
Signing time: Sun 08 Dec 2024 23:56:42 +0000
ROA not before: Sun 08 Dec 2024 23:56:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8772
IP address blocks: 2a0b:2bc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a8:b4:35:e0:7b:e0:d1:b4:04:94:32:59:c9:f6:e0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Dec 8 23:56:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc60322302958e7af8c0ecdc46a010a628a0e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:87:fc:c3:96:fd:d8:68:54:ad:8f:a6:73:4d:
6d:78:0a:7e:f3:95:06:94:49:f0:ff:57:b0:37:8a:
0e:ac:34:b1:5a:8b:99:8b:71:89:b2:10:55:85:f8:
cd:70:83:ef:83:f9:f6:fe:11:a0:e7:d9:86:cd:3d:
fc:a9:de:ff:3b:8c:dc:e5:0d:28:50:f8:54:4f:18:
63:1e:fb:8b:56:03:d2:f0:68:0d:8f:ff:db:fd:76:
74:96:d3:a2:84:1f:55:3d:07:55:5e:8c:7f:ff:31:
3a:8a:b6:7e:e6:76:9a:ee:18:f2:09:88:f4:54:02:
3f:15:1c:f3:39:a3:cb:a2:48:80:f1:45:72:f7:32:
26:a4:82:3f:b2:93:66:ad:dd:1d:44:d4:b4:82:fc:
6c:ae:2f:f7:56:28:97:f5:9d:85:fe:59:8f:e0:0a:
6b:be:24:dd:2f:a0:4d:56:d3:14:3b:b8:16:45:b5:
ae:1f:8a:47:26:ca:a9:f0:74:4a:0c:19:1b:ca:e9:
4c:63:2c:b1:45:e7:ca:c6:00:f1:e6:f4:6d:8b:c1:
6c:53:9b:c9:fe:fa:d0:cd:1d:c8:71:6f:14:b8:ec:
62:ec:23:e5:ac:77:04:41:2f:8a:af:d5:6b:56:88:
d6:9f:7b:8a:2f:e7:3b:2d:88:63:4f:af:c0:6e:71:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C6:03:22:30:29:58:E7:AF:8C:0E:CD:C4:6A:01:0A:62:8A:0E:75
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/PcYDIjApWOevjA7NxGoBCmKKDnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:2bc0::/29
Signature Algorithm: sha256WithRSAEncryption
52:1c:c7:f8:39:a8:e5:6c:a8:8b:8e:ad:6b:23:04:e8:c5:c0:
02:91:23:31:85:1b:0a:39:40:bb:9c:40:2b:9d:38:dd:96:14:
fe:1b:6d:e5:d4:d2:81:a2:20:28:32:00:91:eb:9e:17:47:10:
29:cc:b3:b1:f4:dc:c9:67:8a:c6:44:0b:5d:41:9d:b1:2a:e3:
1c:a1:0d:dd:3b:20:6c:5e:ea:73:72:ee:1f:75:fb:33:6d:30:
71:10:0d:e2:fb:20:4c:5a:68:ad:ef:8b:a0:b2:87:aa:ba:a3:
19:0d:e9:eb:33:82:36:f4:94:d7:f6:a3:72:0d:d4:75:f3:4e:
47:b1:d9:5d:17:01:2d:20:a0:22:af:83:b5:86:ef:44:6f:ed:
7a:a2:c4:fe:5f:b0:df:62:e9:dd:3c:00:f8:67:49:91:12:9d:
4a:49:50:a7:0c:e9:19:86:9f:ac:b2:ab:9f:cb:bb:b4:4e:cf:
9c:66:f5:c6:23:bc:d1:c3:da:ef:3c:26:a3:f9:e0:a7:a7:5c:
e5:93:5d:4f:80:fe:74:d2:8b:74:6f:35:a9:58:32:da:67:08:
e2:35:89:04:8b:4b:37:41:88:75:fb:33:9b:a9:db:87:26:ab:
45:11:19:b4:44:ef:96:83:5e:39:91:b1:fc:86:f2:31:a3:b6:
94:c6:de:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:53 2025 by rpki-client