Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3mI0LG1tr--vt3-3tDZGo37dOwQ.roa
File: 3mI0LG1tr--vt3-3tDZGo37dOwQ.roa (raw, json)
Hash identifier: GUXpjNXln67ZZZvk7IYlNdjrOnFcOkzRyv7LCxDuQKY=
Subject key identifier: DE:62:34:2C:6D:6D:AF:EF:AF:B7:7F:B7:B4:36:46:A3:7E:DD:3B:04
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019422FBCE9CD84452E37832BE97BDBB95D1
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3mI0LG1tr--vt3-3tDZGo37dOwQ.roa
Signing time: Wed 01 Jan 2025 17:48:35 +0000
ROA not before: Wed 01 Jan 2025 17:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 151338
IP address blocks: 2a0c:9a40:9200::/40 maxlen: 48
2a0c:9a40:9600::/40 maxlen: 48
2a0c:9a40:9f00::/40 maxlen: 48
Validation: Failed, certificate revoked on Sat 08 Mar 2025 11:31:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ce:9c:d8:44:52:e3:78:32:be:97:bd:bb:95:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 17:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de62342c6d6dafefafb77fb7b43646a37edd3b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:94:f5:bd:fb:88:96:95:bd:22:0d:ea:d2:
0c:37:99:aa:e9:01:f5:52:d9:99:05:60:ee:d2:de:
4a:18:e8:23:4b:f5:50:a6:65:f4:27:26:76:8a:e5:
83:cd:6a:00:7a:72:78:9b:2a:53:69:bb:85:9e:c8:
99:f2:e7:f1:b6:64:03:de:1a:8f:9b:3e:0d:b5:4c:
df:c2:36:00:f6:82:5a:74:34:42:2f:0e:dc:64:38:
c0:04:ef:6e:3b:b1:a0:b8:99:36:c4:b0:10:62:da:
2d:53:8e:f5:cc:14:de:94:b2:a0:48:27:32:a6:10:
ae:37:21:a5:e5:1c:a2:19:b6:2b:ca:f4:8d:c2:9c:
2e:4f:0f:fc:b4:66:13:04:a2:71:bb:b4:c4:e3:2b:
52:3e:39:22:f5:01:28:dc:50:8c:46:67:a0:6b:78:
80:d3:4f:50:1a:7f:12:07:7f:0f:98:46:fa:33:84:
3f:07:d4:e7:cc:11:96:87:b7:18:45:13:a0:cc:d9:
50:57:b1:cd:b3:18:94:13:e7:d9:c2:3e:d1:9d:2d:
f9:24:c4:73:b3:cd:7b:de:77:dd:09:37:0b:e8:cc:
ac:53:fb:0a:fb:b7:ce:57:65:45:90:51:85:ad:95:
c2:31:03:33:32:83:82:5a:ba:62:73:62:06:1c:66:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:62:34:2C:6D:6D:AF:EF:AF:B7:7F:B7:B4:36:46:A3:7E:DD:3B:04
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/3mI0LG1tr--vt3-3tDZGo37dOwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:9200::/40
2a0c:9a40:9600::/40
2a0c:9a40:9f00::/40
Signature Algorithm: sha256WithRSAEncryption
d2:b7:fc:91:bc:32:8b:a5:f6:78:24:52:62:6c:8a:4a:83:29:
2d:20:7e:84:6c:8f:17:37:3d:c6:2a:45:3f:00:78:4d:1e:47:
60:03:89:e5:1d:a2:a7:71:ec:af:05:46:08:20:26:bf:cc:b0:
d1:e4:f0:ef:30:06:7d:b9:57:64:e8:26:52:11:2d:fd:bd:2c:
2d:65:b6:38:db:56:05:63:10:63:fd:a0:80:05:ea:c7:dd:bf:
f2:59:bd:cb:3b:68:08:28:49:26:87:af:42:1c:d7:92:e8:6d:
c6:ee:da:8a:5b:c6:64:42:ed:9c:d0:b6:1d:46:9f:8c:bf:fb:
a0:26:87:4c:32:82:70:b6:db:df:51:67:fd:8b:f3:d7:89:4b:
1c:7d:a0:42:ce:b8:87:a7:75:7f:8b:04:d9:de:06:89:05:a9:
4e:68:8f:5f:0e:a5:c2:23:16:63:6d:5a:df:a1:8d:ff:bb:1f:
15:f0:89:d5:75:52:e9:1d:e3:ee:4e:0b:15:01:20:e3:19:35:
ed:e5:77:53:81:0f:e8:aa:78:9f:08:7a:a3:1e:54:42:48:54:
23:37:84:82:50:4c:e3:58:e9:72:5b:02:a1:47:bc:8c:f3:91:
02:28:76:2a:4e:1c:bb:37:0b:71:28:65:64:bf:fd:2c:fa:be:
c3:08:f8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:24 2025 by rpki-client