Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_kkdEVNu5fq1ECEa-AoWZ2ko4oA.roa
File: _kkdEVNu5fq1ECEa-AoWZ2ko4oA.roa (raw, json)
Hash identifier: Nb8ogN23WXKqmiuQQzTtlmBe72WcSBnsnKm46m9GE00=
Subject key identifier: FE:49:1D:11:53:6E:E5:FA:B5:10:21:1A:F8:0A:16:67:69:28:E2:80
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CE505236DD483C968213A240362F96C99
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_kkdEVNu5fq1ECEa-AoWZ2ko4oA.roa
Signing time: Sun 07 Jan 2024 17:42:48 +0000
ROA not before: Sun 07 Jan 2024 17:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:9a40:8060::/44 maxlen: 44
2a0c:9a40:9c20::/44 maxlen: 48
2a0c:9a40:9ca0::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 18 Jan 2024 12:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e5:05:23:6d:d4:83:c9:68:21:3a:24:03:62:f9:6c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 7 17:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe491d11536ee5fab510211af80a16676928e280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:03:58:82:56:b4:09:84:72:77:4f:32:78:17:
8e:16:2b:55:5d:93:a6:c3:61:33:90:a6:10:de:84:
56:0a:f1:65:a7:f1:69:e5:72:ad:7a:5a:46:d7:f5:
59:c7:88:1d:18:8b:26:bb:97:3e:86:dc:38:1f:a3:
05:ba:30:64:06:aa:b1:33:8d:c7:54:4f:50:db:a6:
0e:6e:07:c5:44:04:29:56:5e:18:97:7a:0a:85:21:
93:71:31:9a:57:10:42:e9:7b:d6:64:86:56:d1:b2:
c3:76:09:ab:ee:f8:ad:24:27:25:cd:3b:4d:05:3a:
03:33:b0:04:6c:49:51:dd:79:2f:fe:91:5b:8b:c6:
c8:a8:cd:3d:6d:a3:cc:38:35:72:11:a0:aa:20:12:
bd:29:23:bf:0c:30:1e:10:5b:67:39:c2:51:eb:61:
b3:d0:9f:35:5c:78:d5:b5:36:95:0f:bc:cd:b3:69:
0d:db:b6:b8:0f:5b:e2:df:af:8b:d2:2a:ef:a0:31:
45:f4:b4:78:d2:36:01:ce:fe:29:e0:2d:82:a9:8c:
c9:a8:56:b9:da:79:22:5d:2b:eb:3c:8c:a8:d6:cc:
f7:86:fa:63:42:8b:ad:c6:1e:9d:d6:c8:ed:e5:b6:
67:2a:a5:53:b7:5a:ea:15:57:7d:c5:60:5f:5a:8c:
f9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:1D:11:53:6E:E5:FA:B5:10:21:1A:F8:0A:16:67:69:28:E2:80
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/_kkdEVNu5fq1ECEa-AoWZ2ko4oA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8060::/44
2a0c:9a40:9c20::/44
2a0c:9a40:9ca0::/44
Signature Algorithm: sha256WithRSAEncryption
9a:75:67:7c:71:77:29:53:9b:be:a6:fe:24:57:09:97:8a:18:
66:02:7b:b9:61:a6:3c:64:e0:cb:ed:d2:d7:86:70:2c:97:56:
ac:b4:92:f6:e7:34:16:be:d4:b1:88:d5:75:61:03:48:94:4a:
ea:3b:17:56:6c:24:02:91:40:f0:d2:ea:24:98:5c:a7:da:19:
fd:25:ae:1d:43:8e:a7:68:61:8e:29:fe:46:3c:3e:e1:5e:0b:
10:2b:73:6f:31:63:fe:7d:3e:26:66:d5:72:fa:d0:f9:0f:00:
9a:47:c3:85:a8:cd:de:d5:34:ee:83:8b:d4:c8:37:ce:c8:cc:
c8:89:9d:3d:5f:39:78:36:d9:bf:7b:1d:b5:3b:7f:03:ad:8a:
83:2d:ae:ec:33:c1:a1:73:25:56:b5:08:fa:3f:e7:ba:74:38:
34:f0:0b:75:bd:56:ca:8d:72:03:49:6f:14:88:96:51:59:82:
d2:ab:74:e7:d1:94:7d:73:65:7f:96:8d:0e:43:9f:97:0a:d5:
63:5f:27:04:5d:f8:d9:e0:7e:d2:c1:ac:56:00:43:f0:fc:44:
6a:06:61:30:1b:66:d5:08:54:a1:53:4e:ac:0a:9b:61:69:34:
31:be:40:67:9b:b2:6c:5c:af:5a:98:70:88:bf:a7:f6:ca:a2:
be:01:75:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:33 2025 by rpki-client