Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wl4o0wLgn7V8CDV1nSz6svQ-O6A.roa
File: wl4o0wLgn7V8CDV1nSz6svQ-O6A.roa (raw, json)
Hash identifier: ddCDvdG+7s2UAQReGMhXs/34nPOE0eOmufXosXst5aM=
Subject key identifier: C2:5E:28:D3:02:E0:9F:B5:7C:08:35:75:9D:2C:FA:B2:F4:3E:3B:A0
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018F623DEEE67AE1543B4912960A77AB5AC3
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wl4o0wLgn7V8CDV1nSz6svQ-O6A.roa
Signing time: Fri 10 May 2024 11:22:56 +0000
ROA not before: Fri 10 May 2024 11:22:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214939
IP address blocks: 2a0c:9a40:8230::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 May 2024 21:32:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:3d:ee:e6:7a:e1:54:3b:49:12:96:0a:77:ab:5a:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: May 10 11:22:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c25e28d302e09fb57c0835759d2cfab2f43e3ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:e1:7f:f5:4d:73:0c:bd:7d:da:62:18:b7:
89:d8:cf:25:93:97:8c:05:b7:e5:19:60:58:95:0e:
27:73:1a:6f:13:e3:09:30:4c:64:71:61:a6:9c:1e:
fc:37:2e:a0:41:4a:bc:dd:9e:ef:5e:b3:e5:ac:d1:
51:c9:d3:d6:e0:98:36:6b:4b:f7:51:a4:92:02:31:
b5:26:c0:31:df:f5:93:f0:99:87:51:2b:27:0f:40:
d2:2a:7d:ba:22:c9:18:11:23:e8:ed:40:fd:0a:be:
e1:f9:28:84:64:99:5b:25:3b:87:61:90:eb:4b:c6:
3d:c1:dc:a6:0e:4d:85:f5:96:b0:0c:9b:f0:5f:e7:
ac:df:e0:04:21:3f:02:52:e3:5c:1d:5d:3a:8c:7d:
e8:b3:51:b2:fc:60:88:d9:90:c7:70:ce:dd:24:06:
86:03:2a:de:ed:d2:6d:f2:44:a1:ec:5d:f1:bd:e9:
07:34:67:01:28:00:5b:23:56:a4:b5:2e:ec:fb:dd:
d9:56:28:04:f6:77:47:bc:a7:0f:07:fd:8a:fa:08:
62:38:84:38:24:e3:24:d3:27:c3:d7:3d:1d:2f:ea:
22:f7:f4:8e:0c:15:b3:7c:e6:8a:4b:60:db:69:04:
d9:32:92:cd:ec:19:0a:ec:d6:1b:b8:37:38:af:c5:
6a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5E:28:D3:02:E0:9F:B5:7C:08:35:75:9D:2C:FA:B2:F4:3E:3B:A0
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/wl4o0wLgn7V8CDV1nSz6svQ-O6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8230::/48
Signature Algorithm: sha256WithRSAEncryption
7c:2e:5a:07:63:68:db:6c:3f:96:6d:25:07:95:e4:0a:00:69:
d7:11:1b:3c:b4:48:57:34:be:37:3f:0b:1e:09:a0:b7:77:c1:
e2:8c:09:e5:97:ab:c8:9c:2f:23:16:8b:ae:2b:b7:95:24:64:
2c:90:39:37:f6:a2:10:fb:c0:56:42:6f:66:d1:fd:21:48:dc:
0e:c3:fb:e3:ca:09:72:cc:a8:6c:08:0b:fb:70:9f:94:2c:3f:
27:cc:03:04:d4:d4:a4:23:f3:0c:02:14:a0:06:34:d3:6a:24:
01:ba:61:5c:46:d7:8c:13:7c:54:6b:f9:79:74:04:19:cd:b5:
03:2b:28:6b:8f:5a:e2:68:d8:93:b7:da:12:d7:40:9a:9c:db:
74:9a:8c:46:0a:08:8a:2f:a9:d9:7a:10:94:32:42:89:06:53:
45:f8:f7:95:bf:7e:b3:25:79:cb:dc:ef:85:b9:79:f0:ea:9b:
19:0c:11:8c:cc:2a:c9:80:05:90:63:63:81:e3:f4:b6:7f:df:
ae:27:fe:e1:ad:6b:18:b7:7e:9d:f3:3c:15:b4:9c:2f:9f:a0:
48:09:7b:87:aa:95:78:41:07:78:e3:8a:c3:ac:be:20:1c:ce:
74:65:f9:56:a9:62:c3:74:fc:7f:c4:b6:05:67:13:91:b5:67:
32:17:7c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:25 2025 by rpki-client