Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/o7rzwM9aljxjEUdCnbLxy3fNqBs.roa
File: o7rzwM9aljxjEUdCnbLxy3fNqBs.roa (raw, json)
Hash identifier: OQxAxbl/SgScdwFFVub/FWDXaxDWW9brbADZrl6NSlY=
Subject key identifier: A3:BA:F3:C0:CF:5A:96:3C:63:11:47:42:9D:B2:F1:CB:77:CD:A8:1B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018D1D372D7ED26BE629C7202BE87CEE5EFC
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/o7rzwM9aljxjEUdCnbLxy3fNqBs.roa
Signing time: Thu 18 Jan 2024 15:36:11 +0000
ROA not before: Thu 18 Jan 2024 15:36:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216393
IP address blocks: 2a0c:9a40:83c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 05 Sep 2024 22:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1d:37:2d:7e:d2:6b:e6:29:c7:20:2b:e8:7c:ee:5e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 18 15:36:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a3baf3c0cf5a963c631147429db2f1cb77cda81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:db:fb:31:f4:2a:0a:6e:5f:fa:f3:eb:7b:af:
e8:80:f9:be:88:4c:d1:f3:6f:dc:ce:2f:53:59:66:
a5:ea:ed:c9:7d:5e:0b:bb:27:90:51:27:e2:c3:9b:
80:ea:48:d4:8d:76:6c:55:e7:c5:48:ca:df:81:dc:
5b:f4:fd:e6:04:ad:30:81:27:1b:6a:96:b2:bb:e8:
c6:7b:e1:61:4f:a7:33:62:8c:1c:fa:a7:f6:09:9b:
24:66:79:04:e3:41:16:08:cd:96:1b:89:36:db:22:
a5:71:25:3f:06:2d:ea:9d:81:dc:ad:ab:ad:08:70:
e5:95:da:78:dc:10:c8:a3:23:58:36:ee:fa:29:64:
20:2d:32:e4:9d:3c:61:2d:e2:2f:c2:05:db:0c:07:
48:2c:2e:17:77:45:04:a7:31:74:74:9c:ab:64:d6:
a4:d4:49:1c:b6:b2:22:d2:21:8f:44:27:9e:c8:f4:
55:82:33:50:04:a0:78:24:0e:a3:86:1d:47:40:cb:
fe:97:af:12:e8:ed:5d:67:1d:90:67:4b:49:1b:4a:
bf:18:c1:73:93:ef:1e:31:fa:75:68:a1:b0:1e:93:
ea:9e:cf:f6:2e:e1:18:ef:44:f0:d3:b7:03:15:f1:
f9:b7:5a:3a:e6:6d:de:af:8c:20:90:e9:5c:39:42:
de:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BA:F3:C0:CF:5A:96:3C:63:11:47:42:9D:B2:F1:CB:77:CD:A8:1B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/o7rzwM9aljxjEUdCnbLxy3fNqBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:83c0::/48
Signature Algorithm: sha256WithRSAEncryption
16:2e:48:f4:e8:eb:08:a4:e6:b1:76:03:86:54:0a:c5:ae:92:
cc:6c:31:7c:59:80:c4:3d:46:b7:f1:dd:47:77:b0:af:be:5b:
eb:88:04:95:85:e7:48:f0:ae:76:28:29:b3:53:f7:51:43:9e:
42:ee:81:da:05:54:0b:a6:20:1a:63:2d:a2:b5:85:38:5a:0f:
ee:96:b5:f1:07:8f:ef:45:67:b1:56:6f:1b:b7:74:8c:cb:3c:
da:e6:d1:73:41:47:af:51:e9:98:b6:81:f0:b9:f6:01:c4:de:
ca:cd:db:a2:9c:79:31:47:92:27:da:72:30:d3:c1:84:49:92:
36:e8:c2:cf:b4:65:12:62:22:39:8b:4e:3e:4f:c7:d6:c4:b4:
6a:b2:bd:19:21:2f:65:a4:ce:15:c3:0c:d3:ab:1b:52:ff:50:
02:8f:b3:c5:95:12:ad:aa:60:1d:c2:73:9b:dc:a1:57:33:e3:
d1:a7:00:7d:a8:da:0a:4e:37:b9:a7:6b:82:e8:f9:5b:f6:b1:
f6:93:bd:9b:20:63:68:c6:63:50:27:1a:8d:b8:79:cc:89:b7:
0c:4c:f3:82:bb:80:15:29:5d:29:41:a0:56:9c:2d:fd:94:84:
f9:4b:48:a2:46:e0:ad:0e:50:36:22:44:bc:ab:4f:ce:8d:2b:
ce:bd:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:10 2025 by rpki-client