Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h26IWmG_dkMMQ2ZIGTFwLWzzCWs.roa
File: h26IWmG_dkMMQ2ZIGTFwLWzzCWs.roa (raw, json)
Hash identifier: leY+4DAdmTxUre61GxmCJe1qVBUPkzGV1SpMY4HKOT8=
Subject key identifier: 87:6E:88:5A:61:BF:76:43:0C:43:66:48:19:31:70:2D:6C:F3:09:6B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019407BEE910818D326D9AEDEE31A1ACA5FA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h26IWmG_dkMMQ2ZIGTFwLWzzCWs.roa
Signing time: Fri 27 Dec 2024 10:52:19 +0000
ROA not before: Fri 27 Dec 2024 10:52:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199829
IP address blocks: 2a0c:9a40:84b0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:07:be:e9:10:81:8d:32:6d:9a:ed:ee:31:a1:ac:a5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 27 10:52:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=876e885a61bf76430c4366481931702d6cf3096b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:68:f2:97:23:5a:16:eb:f2:b9:38:31:1e:
57:a6:59:fd:8e:be:28:4d:d4:3c:34:c2:e4:44:c7:
c4:3c:fb:8a:a1:07:f3:26:89:ab:c1:c7:56:a0:4a:
1a:42:9e:85:e9:7d:4d:41:d4:e4:4a:44:63:c0:7a:
25:89:35:45:2e:d8:83:78:cd:60:fe:ce:24:b4:17:
13:43:e1:2f:ef:7b:59:80:fd:31:a7:b1:c6:79:e3:
48:b5:64:ab:34:a3:af:46:93:a8:9e:d7:cd:2b:4a:
fb:b0:2b:df:2e:47:90:6f:de:44:4c:e0:19:fe:28:
4b:a8:fa:c5:0b:e2:e1:1a:5c:bf:60:13:ea:41:33:
c9:d0:93:cd:31:13:27:4d:63:fc:44:b4:fc:44:7b:
4f:14:75:2d:23:18:ae:64:b5:46:f3:4b:c7:00:89:
2f:76:f3:b8:a8:c6:90:2a:29:86:21:57:b7:aa:00:
71:ea:54:7b:13:36:eb:ce:4f:3d:67:80:18:c5:97:
bd:5f:74:94:dc:78:21:7d:af:72:0f:72:aa:77:4f:
30:0b:fe:f4:eb:6a:b1:e9:c9:1c:c1:45:09:d7:69:
51:d2:57:ab:d0:fc:a9:08:c5:04:a8:8a:24:7f:9b:
a5:37:ae:59:50:b5:bd:1f:aa:b0:a4:9a:a7:04:0b:
9b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:88:5A:61:BF:76:43:0C:43:66:48:19:31:70:2D:6C:F3:09:6B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/h26IWmG_dkMMQ2ZIGTFwLWzzCWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:84b0::/48
Signature Algorithm: sha256WithRSAEncryption
11:ee:06:c9:8d:06:d8:49:3d:c5:3d:2d:fb:73:49:38:fa:14:
90:f3:c4:ac:08:a1:9b:b8:35:34:de:32:f8:34:d2:d8:5c:a4:
09:4e:a0:2f:6c:5d:c7:c2:57:1a:b2:24:c5:84:78:a1:5f:cf:
31:29:24:20:b2:85:90:9b:6f:cf:aa:1d:29:e4:68:62:5f:a4:
4a:28:77:fe:6a:99:c2:3e:5c:5a:85:4b:d7:36:de:25:43:0c:
6d:e3:36:97:e7:0e:d8:00:24:54:c7:f2:a1:2d:3e:26:ed:84:
69:02:3c:72:b9:7b:b1:ae:de:a5:2f:1a:f0:ff:76:6e:3f:7a:
18:74:62:f4:6b:24:4a:fe:9c:f4:26:41:34:79:b1:e5:02:49:
5b:ba:ca:d9:e4:fd:aa:75:ec:23:00:23:0b:01:47:1b:0f:08:
1d:16:9d:24:5d:15:d4:a9:61:2b:cb:02:99:53:66:68:3b:89:
1b:b1:78:b6:84:b9:84:ce:3c:a6:c7:a0:85:6f:54:9f:74:37:
40:ab:62:a2:1d:5f:54:41:7a:10:d0:dd:b8:65:ba:f7:be:45:
2a:bf:3a:db:96:e2:68:d7:06:f8:33:73:7b:0f:f9:10:40:10:
c4:ad:96:f4:85:3a:7e:98:79:25:d8:9c:32:85:58:d3:22:81:
27:9b:35:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:02:31 2025 by rpki-client