Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/yNIk5bsxZ-QV7ZdEU8VB21TDLu8.roa
File: yNIk5bsxZ-QV7ZdEU8VB21TDLu8.roa (raw, json)
Hash identifier: GkXSQBIY3gh7SX+VnY8oFszLKIi5oROlO3Mc430KLRY=
Subject key identifier: C8:D2:24:E5:BB:31:67:E4:15:ED:97:44:53:C5:41:DB:54:C3:2E:EF
Certificate issuer: /CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Certificate serial: 0193CF6B6693854B0EA5A26CB3EA94A786CF
Authority key identifier: ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/yNIk5bsxZ-QV7ZdEU8VB21TDLu8.roa
Signing time: Mon 16 Dec 2024 12:22:22 +0000
ROA not before: Mon 16 Dec 2024 12:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62131
IP address blocks: 2001:67c:d34::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:6b:66:93:85:4b:0e:a5:a2:6c:b3:ea:94:a7:86:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edbe73ab2730f34e94f120e9bfc55af4405369f6
Validity
Not Before: Dec 16 12:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8d224e5bb3167e415ed974453c541db54c32eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4a:6f:00:0c:a0:42:99:3b:40:ea:3f:d9:18:
97:b1:1f:ce:ea:1a:e6:81:a4:c8:cf:48:75:c4:42:
ac:8c:c5:a3:66:93:1f:e4:99:5f:e1:73:23:3b:64:
0f:2d:27:3f:f8:0f:f2:24:ca:b5:f3:4e:a8:3c:3c:
77:bd:ea:7b:eb:e7:a7:03:70:cb:b1:0d:c8:87:fb:
d1:0b:c6:ec:ab:65:0b:05:29:a8:9a:8e:26:ce:e6:
05:07:40:0a:2a:5c:d5:93:d4:6e:3d:cb:98:d8:a8:
06:fd:7a:97:86:4a:9d:68:84:75:7b:7b:af:03:4c:
ef:59:83:91:3d:9a:ac:aa:bc:39:e6:e6:d5:80:88:
16:01:8a:45:0c:36:cd:b9:5a:e0:0e:92:7d:74:f4:
19:44:51:2d:0e:dc:9e:99:7a:5b:77:1f:20:2b:cd:
89:aa:9c:26:dc:b5:49:43:01:a2:32:20:fd:18:90:
9a:fd:5b:12:23:44:56:2f:0a:2c:c8:4d:4c:3e:09:
f4:70:ce:74:aa:6e:71:ca:2e:b8:b3:fd:8b:ea:22:
54:92:3f:10:43:e1:7f:c3:e9:c1:5d:2e:95:4a:27:
58:42:38:51:76:37:d1:bf:94:dd:38:53:b9:ba:f6:
d9:c8:bb:34:f2:84:dc:a1:90:ca:dd:50:da:0f:12:
25:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:D2:24:E5:BB:31:67:E4:15:ED:97:44:53:C5:41:DB:54:C3:2E:EF
X509v3 Authority Key Identifier:
keyid:ED:BE:73:AB:27:30:F3:4E:94:F1:20:E9:BF:C5:5A:F4:40:53:69:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b5zqycw806U8SDpv8Va9EBTafY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/yNIk5bsxZ-QV7ZdEU8VB21TDLu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/127fb3-7d87-468b-94d2-2f9059c4f3a5/1/7b5zqycw806U8SDpv8Va9EBTafY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d34::/48
Signature Algorithm: sha256WithRSAEncryption
79:7e:f3:18:e6:99:e9:ed:19:33:84:b8:97:36:f9:34:4e:eb:
b6:90:6a:86:7e:51:5e:c0:2c:47:92:ba:af:78:8c:c5:62:c1:
c1:b1:06:c7:a6:24:07:cf:e9:87:1d:15:4d:63:d2:29:79:a8:
d4:9c:33:20:61:b1:02:01:63:6e:0b:0e:86:0f:fa:ad:b9:d3:
98:4e:f8:87:d3:57:f9:53:14:2d:7e:b6:07:9c:4b:2a:a6:78:
b5:99:b0:10:e9:7e:bd:5b:90:f5:bf:50:c3:74:78:e6:8d:fa:
9f:ee:c8:35:f1:da:39:15:2e:fb:d8:75:4d:ff:99:64:3b:ba:
05:d2:dc:32:01:5c:7c:d6:4a:ed:0a:b6:b6:cd:7d:1f:11:b7:
1c:50:d6:2f:b5:4b:d4:df:74:30:58:92:cc:a1:93:d2:3a:32:
46:84:32:13:eb:08:d5:6c:17:61:00:75:93:83:d3:b6:ad:b0:
72:a4:25:07:12:26:a8:81:3b:88:32:5b:65:d2:95:24:ae:ce:
94:51:8e:dc:5b:4f:45:2c:d3:d5:0e:24:67:fb:f5:9c:4e:1c:
8f:17:99:1b:d4:ed:9c:a7:09:72:02:c7:c8:37:eb:9b:23:39:
f3:dc:81:8f:27:2e:97:97:78:b0:1c:8f:9e:d4:14:42:ae:57:
6c:ce:f0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:48 2025 by rpki-client