Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5wa0PLgqkId_J8LSffQvsHhu_5s.roa
File: 5wa0PLgqkId_J8LSffQvsHhu_5s.roa (raw, json)
Hash identifier: +yq3mdqLaEgQk5yASo5CFki9tsK+yyVE9PhlOkN8pIw=
Subject key identifier: E7:06:B4:3C:B8:2A:90:87:7F:27:C2:D2:7D:F4:2F:B0:78:6E:FF:9B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0193B24FED2A96BB167F15C629F1F1AFB324
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5wa0PLgqkId_J8LSffQvsHhu_5s.roa
Signing time: Tue 10 Dec 2024 20:43:22 +0000
ROA not before: Tue 10 Dec 2024 20:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203888
IP address blocks: 2a0c:9a40:84c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b2:4f:ed:2a:96:bb:16:7f:15:c6:29:f1:f1:af:b3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 10 20:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e706b43cb82a90877f27c2d27df42fb0786eff9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:52:ec:08:7a:2b:28:fe:9d:b5:e9:cf:48:
f0:b3:97:5f:6a:8e:12:1d:c9:40:3d:bd:90:e9:99:
04:9a:c4:03:61:60:5c:1e:f5:8f:9b:96:fb:8d:65:
23:bb:53:e5:2c:80:65:f2:c5:b9:3a:dc:b1:a2:ea:
d4:5e:f3:a8:c3:4d:f1:92:a1:9c:aa:13:ce:5d:06:
f6:b8:22:9a:d0:2b:fe:74:f3:8d:82:57:d0:b3:67:
c9:3f:6f:fd:ff:ec:76:86:42:c0:82:0f:fb:1f:fb:
fe:54:23:29:19:65:0b:f9:96:46:43:70:2d:ee:25:
3d:7b:5b:6d:cf:c9:ef:6b:ac:ba:3d:8c:bd:ca:5e:
e7:c8:63:3d:a3:f7:ee:4c:eb:4b:86:ff:31:9f:08:
e3:97:20:c2:97:82:a0:3f:5a:d9:de:a2:52:37:58:
a0:c3:af:2e:38:cc:c0:19:d6:01:85:37:da:0b:c5:
d2:85:bb:97:e9:e1:30:e4:71:37:b4:29:18:b4:e4:
f2:5f:d1:b9:bd:78:2a:68:93:b3:85:b7:c5:35:3b:
67:80:60:39:fc:4f:c2:72:e3:1e:6d:42:da:e8:f0:
53:20:06:b7:99:2d:aa:f3:ff:c5:c7:e3:c0:b1:5d:
11:89:f2:40:07:f4:74:cd:03:be:53:44:2e:7b:a8:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:06:B4:3C:B8:2A:90:87:7F:27:C2:D2:7D:F4:2F:B0:78:6E:FF:9B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/5wa0PLgqkId_J8LSffQvsHhu_5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:84c0::/44
Signature Algorithm: sha256WithRSAEncryption
b2:ad:e5:de:59:a5:76:04:bf:77:7e:06:3d:87:7a:2d:34:32:
e3:08:88:74:83:91:2d:bb:b5:aa:fb:7a:f7:16:91:f4:1f:17:
91:ca:bb:1a:fd:e6:4c:1d:dd:91:89:57:d9:42:e6:5d:d9:40:
c3:f6:19:10:f8:58:eb:0d:5f:b7:47:bb:42:76:9b:e0:0d:f1:
c0:a2:e0:64:29:4a:4f:7d:a0:c3:1b:7b:4b:57:6a:f5:b8:e7:
07:09:62:59:84:70:74:27:c9:00:83:2a:6c:9a:0e:cf:7e:63:
70:db:79:9f:f1:04:ea:78:aa:73:81:75:21:b6:d4:6a:4b:ff:
d6:bf:a6:6f:ab:0e:d1:af:dd:9f:10:21:8f:35:ab:6f:9f:39:
3a:94:82:07:dc:5d:dc:17:d8:25:20:0b:cd:43:ad:4e:ef:d3:
40:b9:a2:d4:c9:b9:a7:2a:2b:df:b6:b9:21:d5:10:3b:24:ac:
e0:82:86:0d:c0:63:0f:e1:10:41:4d:92:7a:c4:7a:4e:2b:9e:
0e:99:f6:37:a4:4d:7e:fc:50:3c:c5:82:30:35:d1:f5:15:76:
34:04:b4:65:fa:cb:f1:1c:e0:ed:9f:8a:a8:81:73:1e:0e:86:
7c:d3:89:7a:37:78:9a:5f:ca:cd:ae:27:73:87:d2:b8:aa:67:
06:97:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:22:43 2025 by rpki-client