Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_O8EoOI6_0623ZJUpkUBfxK9Ihw.roa
File: _O8EoOI6_0623ZJUpkUBfxK9Ihw.roa (raw, json)
Hash identifier: 2v1M8DqmyBdv35vtfe6w9ydF4MOH4qoeQDktbyhgfKA=
Subject key identifier: FC:EF:04:A0:E2:3A:FF:4E:B6:DD:92:54:A6:45:01:7F:12:BD:22:1C
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0193AD5499060E2C96FAB43CB1AFD20DC190
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_O8EoOI6_0623ZJUpkUBfxK9Ihw.roa
Signing time: Mon 09 Dec 2024 21:30:22 +0000
ROA not before: Mon 09 Dec 2024 21:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203333
IP address blocks: 2a0c:9a40:8340::/48 maxlen: 48
2a0c:9a40:8640::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ad:54:99:06:0e:2c:96:fa:b4:3c:b1:af:d2:0d:c1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 9 21:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcef04a0e23aff4eb6dd9254a645017f12bd221c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:44:88:47:c8:53:55:2e:e4:94:a6:47:f7:c4:
2b:8b:ec:04:63:3c:11:a1:47:d1:f0:55:bd:b1:e6:
a1:4a:b0:b0:7d:68:60:dd:d4:3c:d1:16:96:29:4f:
8b:10:f8:00:c5:d8:d1:95:10:2d:ee:ec:ea:6d:9b:
e9:e3:6c:64:84:e7:ca:f1:66:b3:93:2e:f8:ef:a1:
86:60:1b:e9:38:a1:c3:9c:f4:8c:59:09:14:7c:a8:
60:fc:a4:7b:3a:20:7f:56:7e:21:73:72:0d:64:74:
79:81:1d:6c:1e:a7:b6:06:75:e5:d7:e9:14:4a:2f:
8f:f6:02:9b:60:b1:60:6d:4b:cb:17:fe:eb:1a:30:
3e:05:61:6f:4a:f3:eb:f9:74:01:e0:76:77:13:b2:
59:32:f5:ad:32:43:cf:a0:20:6f:a3:fe:10:98:da:
86:32:ae:bb:71:1e:3d:d5:55:b7:d9:6a:3b:ac:d8:
14:32:1d:52:ea:c0:84:32:e3:63:e4:ab:a4:da:06:
44:34:95:b8:47:e7:87:c6:af:cf:86:23:bb:8d:91:
84:58:b0:54:8c:8c:0e:dd:fd:d9:9a:59:5d:10:b0:
cf:cf:b1:a6:2a:91:c2:91:e8:96:bf:9e:10:2e:41:
58:0d:8e:4a:e4:29:88:0e:25:f3:28:8c:cb:c5:62:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:04:A0:E2:3A:FF:4E:B6:DD:92:54:A6:45:01:7F:12:BD:22:1C
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_O8EoOI6_0623ZJUpkUBfxK9Ihw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8340::/48
2a0c:9a40:8640::/44
Signature Algorithm: sha256WithRSAEncryption
7a:86:d4:09:f9:02:da:1a:6a:b4:df:c6:9b:9a:f2:8f:ba:13:
98:e5:30:b1:25:13:68:e5:82:e5:2a:84:4f:f3:1b:cb:a6:c7:
ca:29:35:9a:85:c3:83:39:aa:91:ab:55:a7:f7:22:69:32:80:
c7:db:77:87:71:fa:7d:2c:f6:56:ec:c8:43:5f:28:e2:d9:6c:
cc:b1:a2:50:d2:cf:c8:12:e3:13:59:f9:76:b3:e9:8f:24:06:
2d:94:bc:3b:24:96:78:d3:e0:42:ce:ee:ef:e7:a1:95:12:d1:
43:52:c7:8b:44:c3:d0:41:da:1e:d3:72:e8:59:59:8a:ca:bd:
02:e3:d9:b5:07:66:9a:30:65:e1:f0:db:91:91:a9:6a:68:b8:
85:1a:1d:4b:b2:cf:d5:af:66:b3:c6:93:95:d1:38:08:70:62:
60:6d:7b:97:4a:0d:ff:38:20:8f:63:40:6a:b3:60:a6:10:2f:
2f:47:9d:4a:1d:28:04:16:e6:94:b0:6c:ae:e4:5d:f6:5f:64:
f4:27:2d:36:62:2b:f2:3e:fb:5b:c3:c2:56:b5:4e:a0:bb:49:
f2:c9:6c:4d:27:0e:9b:88:a2:0f:d4:40:8a:c7:57:35:86:40:
e2:69:94:d4:ce:fc:a4:99:ce:bb:24:00:bb:ff:bf:cb:6f:39:
cb:dc:8e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:57 2025 by rpki-client