Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/i5upIAxahm3L6iOYlYQi6U6Dw8A.roa
File: i5upIAxahm3L6iOYlYQi6U6Dw8A.roa (raw, json)
Hash identifier: 8/KtPrraz6Y5C85k0s9rafLzpNL0/9JQzZYkZPUhQ1s=
Subject key identifier: 8B:9B:A9:20:0C:5A:86:6D:CB:EA:23:98:95:84:22:E9:4E:83:C3:C0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01937F4CA7284A5D18FFBAEEE894DDB71C83
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/i5upIAxahm3L6iOYlYQi6U6Dw8A.roa
Signing time: Sat 30 Nov 2024 22:59:10 +0000
ROA not before: Sat 30 Nov 2024 22:59:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201335
IP address blocks: 2a0c:9a40:8ab0::/44 maxlen: 48
2a0c:9a40:9900::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7f:4c:a7:28:4a:5d:18:ff:ba:ee:e8:94:dd:b7:1c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Nov 30 22:59:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9ba9200c5a866dcbea2398958422e94e83c3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:0e:83:2c:db:71:c4:b9:62:42:96:41:67:
f3:c8:47:fa:26:db:31:a9:82:b3:94:f5:dd:f8:38:
64:8c:94:72:86:e1:13:e3:ba:fb:1a:dd:08:c3:4c:
c5:66:0c:e3:49:3d:cb:e6:37:91:33:d2:bc:ab:b0:
59:14:b1:9f:cc:f4:3e:99:0d:b0:fb:84:2f:30:d2:
7e:a3:b9:5e:4b:eb:02:a3:85:cf:b7:5e:a7:7f:b6:
8b:01:ef:9e:c9:79:69:0b:52:ab:cf:23:04:2d:fe:
af:71:1e:d8:b1:3b:08:e9:0c:99:d7:30:ea:75:6b:
b7:aa:de:64:18:36:68:91:9e:37:bd:28:15:5a:86:
10:76:83:5b:53:c9:35:eb:22:2f:42:84:98:52:96:
75:66:de:f5:cb:20:b2:c3:d9:bf:14:5c:fa:a9:48:
ec:07:a3:1c:6b:98:90:d1:c3:a5:0e:26:19:59:dd:
7c:f4:a7:b6:f0:60:b9:d8:45:bd:6a:13:98:4c:7f:
ea:94:3b:2d:bd:6e:4a:e2:91:22:c8:6b:51:96:fb:
29:1d:0c:b9:8b:21:86:dd:ff:b0:eb:fc:fe:55:25:
14:f7:f4:ec:f3:de:0b:19:12:ff:65:8a:71:2f:cf:
a6:8d:51:32:0c:50:84:ca:38:13:c0:77:03:d8:91:
bc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:A9:20:0C:5A:86:6D:CB:EA:23:98:95:84:22:E9:4E:83:C3:C0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/i5upIAxahm3L6iOYlYQi6U6Dw8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ab0::/44
2a0c:9a40:9900::/40
Signature Algorithm: sha256WithRSAEncryption
65:94:4d:59:ee:5c:f2:f2:36:bd:7e:f1:1f:44:48:d3:04:55:
c6:e7:cd:ce:78:4f:d8:fc:6b:bc:eb:48:0e:59:3a:52:7b:ef:
c5:61:d6:e2:a2:40:52:a2:c0:60:11:28:d3:4a:0e:ff:e8:72:
42:7f:fd:42:c4:41:d6:8d:2e:8e:b5:d9:fd:f3:ff:27:05:ef:
ec:63:da:af:d1:92:7e:65:de:d9:b4:3c:11:ef:d1:1c:dd:c4:
a7:e5:61:74:e0:ec:3f:66:3e:a4:f5:2b:28:02:96:82:25:c6:
e5:53:3e:09:da:05:41:51:96:ba:58:28:aa:20:9d:be:3b:52:
ad:b1:5b:bd:a0:a4:62:e8:6c:b7:98:8a:33:cc:4f:a5:23:dd:
b4:99:bb:c6:9f:d9:38:69:85:c6:56:e5:86:f3:f6:82:dc:39:
c5:35:2c:7a:67:2e:8e:20:23:0a:94:d4:64:44:d8:12:28:6d:
20:44:d2:ef:ef:38:37:ce:3a:04:8c:21:83:fa:43:09:5e:f7:
0a:25:68:c4:d9:d6:4a:c9:08:30:0b:2b:4f:e7:b1:f7:4b:94:
31:ec:b0:bd:fb:a9:8f:86:f6:b7:92:6e:1e:99:f9:14:fb:72:
13:28:21:91:a3:7c:a8:4e:d8:fc:b6:a5:82:6b:a2:9e:08:6e:
46:2b:7c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:19:14 2025 by rpki-client