Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KMEtfgAHXMrVUaED0X-Z9QwECZQ.roa
File: KMEtfgAHXMrVUaED0X-Z9QwECZQ.roa (raw, json)
Hash identifier: Vk5kAhIx4BFvfXpFqfPguPQ81cRFpZzzNxqJwxgYA1E=
Subject key identifier: 28:C1:2D:7E:00:07:5C:CA:D5:51:A1:03:D1:7F:99:F5:0C:04:09:94
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01935B18C4B566E63653A995B4BDB834A30D
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KMEtfgAHXMrVUaED0X-Z9QwECZQ.roa
Signing time: Sat 23 Nov 2024 22:16:10 +0000
ROA not before: Sat 23 Nov 2024 22:16:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150289
IP address blocks: 2a0c:9a40:8a70::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5b:18:c4:b5:66:e6:36:53:a9:95:b4:bd:b8:34:a3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 23 22:16:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=28c12d7e00075ccad551a103d17f99f50c040994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:90:49:32:26:a9:91:7f:46:d4:7c:10:2a:
d7:2a:bb:95:22:35:d5:61:99:85:66:1a:54:2d:07:
13:a9:0d:5e:26:bd:95:79:11:ac:92:84:e7:fb:ac:
0b:db:99:bc:a8:ff:7f:a4:0d:e4:a7:e9:6c:de:a2:
c0:1b:44:19:a5:34:de:d3:b3:c6:fd:33:86:25:0c:
69:9a:ab:7b:f9:5c:b0:63:44:e4:88:f4:55:8b:bb:
5f:f7:dd:a0:87:58:87:a1:72:69:3f:7b:95:77:58:
e5:97:2a:c8:f6:ed:04:70:02:d3:00:4f:89:b8:6f:
07:53:d6:7e:ba:0d:3d:ec:be:d7:5d:9a:f1:c9:78:
19:f9:61:8c:ce:26:5a:1d:52:4f:1c:53:0d:12:79:
f6:20:5a:3d:53:af:ca:dd:06:6e:ce:57:74:a6:f4:
fb:7c:0d:08:1b:db:65:6b:7f:4b:61:0f:5d:47:f5:
ae:2c:50:bd:48:75:09:03:21:ca:93:c4:b9:49:94:
f8:7b:58:d4:a8:47:7d:87:57:91:19:ca:45:dc:03:
16:fa:08:93:29:7b:1f:d3:80:00:b4:c2:3d:2c:c7:
fa:13:28:72:7e:d7:84:8a:19:70:07:1a:7a:f1:8c:
c9:4c:f8:bb:cf:d2:d1:69:0c:5a:45:be:0c:f7:a8:
df:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C1:2D:7E:00:07:5C:CA:D5:51:A1:03:D1:7F:99:F5:0C:04:09:94
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/KMEtfgAHXMrVUaED0X-Z9QwECZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a70::/44
Signature Algorithm: sha256WithRSAEncryption
cb:49:96:bc:c3:f4:0b:66:c8:fd:3b:63:f3:74:09:31:16:79:
39:7f:1c:fe:54:9f:b4:d3:92:ae:ac:6d:9b:10:f6:1d:b4:9c:
1d:ce:14:60:5a:a2:7c:7e:7c:63:c6:16:78:8e:49:cb:fe:9d:
2b:c7:98:2f:35:6d:db:66:ea:ac:c4:74:64:4d:93:47:c3:b1:
04:cd:8b:6d:9a:f6:d0:bf:57:69:fe:86:83:5b:d4:d2:6e:49:
4a:7f:8e:57:59:a5:06:5e:0d:82:fc:ac:58:4a:e3:43:ef:3e:
6b:08:33:8d:fb:c8:42:9d:ff:97:7f:2f:1e:68:09:22:e2:91:
96:c2:62:10:4a:24:67:2f:e7:e8:a5:5b:43:42:ae:6e:a3:82:
ec:cb:9f:f4:d8:0c:76:c6:1d:28:9d:be:22:38:ba:5d:53:a7:
2a:3a:0c:94:96:ad:86:85:f2:f4:eb:cd:4c:e4:32:ad:49:6e:
1d:f4:f3:bc:6f:30:7f:7c:a6:b9:bf:ec:06:94:f0:fe:a1:74:
f9:72:4a:dc:f6:86:6b:dd:2d:85:a7:94:a1:d0:32:0b:40:a0:
7d:22:f8:50:b5:03:ff:d6:8c:8a:ab:13:74:e6:f5:26:63:d2:
32:06:ee:e5:ac:88:ce:44:08:9d:86:c6:6a:6a:58:34:90:43:
5e:25:32:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:26 2025 by rpki-client