Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rE_9k6r_xktCljC_YrBgLI046zM.roa
File: rE_9k6r_xktCljC_YrBgLI046zM.roa (raw, json)
Hash identifier: LCBijP5OPOVQfNQnxsOdZIwszMLcLoGUqUjb/v6IyjM=
Subject key identifier: AC:4F:FD:93:AA:FF:C6:4B:42:96:30:BF:62:B0:60:2C:8D:38:EB:33
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0193C0A0C825C3ED28CE67D6BD801661D2CD
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rE_9k6r_xktCljC_YrBgLI046zM.roa
Signing time: Fri 13 Dec 2024 15:26:22 +0000
ROA not before: Fri 13 Dec 2024 15:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213716
IP address blocks: 2a0c:9a40:8650::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:a0:c8:25:c3:ed:28:ce:67:d6:bd:80:16:61:d2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 13 15:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac4ffd93aaffc64b429630bf62b0602c8d38eb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:9c:f6:a0:04:2b:3c:75:bd:52:6d:d3:e4:
aa:90:8a:b5:46:bb:87:5c:12:04:7e:21:ad:bf:dc:
4c:af:e5:59:97:22:24:b5:dd:d3:d1:63:4c:98:72:
ec:4f:b1:17:56:5b:19:6f:80:b2:f6:a0:b6:58:70:
71:0a:46:66:7b:25:be:95:5d:ec:1a:75:92:aa:ec:
82:28:2c:a5:73:f6:28:1a:fb:b6:c8:ab:77:8a:04:
a1:1d:c0:27:78:8b:23:8a:54:ef:35:7c:3b:80:de:
25:b2:f6:bc:64:2e:8e:24:89:43:2b:ce:0f:41:64:
cc:6b:4e:7e:9e:64:93:92:bf:d0:dd:9f:e7:7b:af:
ea:ea:df:f3:48:22:75:d8:5e:93:96:ee:7f:9c:e8:
71:ba:0c:d2:f3:7c:e2:61:23:18:02:30:c1:aa:25:
73:01:a2:4a:6f:aa:66:a7:a2:45:5f:a9:11:35:6a:
19:97:87:f5:c8:68:03:14:96:a3:57:2b:aa:d3:5f:
18:ac:57:55:27:c4:60:85:b7:dd:6d:d2:36:3f:44:
ba:16:e8:92:31:fb:11:7d:ab:4d:b0:eb:79:b3:08:
e0:8b:ad:08:9e:ba:89:fc:ea:00:72:26:a6:2a:b3:
77:b2:71:ce:54:f1:bd:c4:f7:75:3c:db:25:25:6a:
4a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4F:FD:93:AA:FF:C6:4B:42:96:30:BF:62:B0:60:2C:8D:38:EB:33
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/rE_9k6r_xktCljC_YrBgLI046zM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8650::/48
Signature Algorithm: sha256WithRSAEncryption
23:3a:17:d7:8a:41:47:b9:3c:53:c2:53:6c:77:1c:e4:e1:31:
5f:5b:6c:a9:79:94:16:9a:a7:71:3d:a9:b5:3f:98:f5:e9:82:
eb:e5:9b:32:ce:67:c0:46:35:92:db:4c:5f:d2:2c:84:07:c8:
4a:6b:e3:83:9f:26:56:b1:bf:08:fa:b9:0d:fc:80:53:1d:76:
88:73:e3:90:b0:ee:b0:9c:ee:38:e5:de:b6:b4:70:dd:8e:12:
8d:cd:06:c5:02:df:dc:ee:d2:16:95:9c:66:c6:7d:91:55:cf:
58:e8:14:d2:79:ee:11:ad:52:07:d2:04:19:6e:52:b0:9a:c7:
c7:3f:6d:dc:db:85:ca:ee:85:b4:1d:a7:d4:98:d1:c3:82:5a:
ed:71:67:a0:44:6b:12:d1:8f:5a:b9:b5:45:41:a8:2e:47:27:
ec:66:ce:55:af:50:d0:6a:53:a8:9d:77:a4:7b:c3:40:d4:ad:
21:81:eb:7b:80:40:c9:f9:e1:0e:ab:f7:64:57:7c:0e:db:c8:
db:1b:84:f5:c7:19:d3:42:b7:e6:13:93:10:54:9b:29:8a:38:
a5:fe:3b:18:45:59:2c:31:85:2c:0d:49:f8:b0:ad:35:b1:48:
d7:0a:51:8d:71:63:12:08:a8:cc:8f:d0:3e:80:c5:31:ac:95:
51:74:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:04 2025 by rpki-client