Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yUeyutm6rXuecqZruufvF-Tx48s.roa
File: yUeyutm6rXuecqZruufvF-Tx48s.roa (raw, json)
Hash identifier: 5ZCScdndLuGQYIuPKMRlQvD49YwETTRh9dM3iHmCVuk=
Subject key identifier: C9:47:B2:BA:D9:BA:AD:7B:9E:72:A6:6B:BA:E7:EF:17:E4:F1:E3:CB
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01938F1220CAB598D6B71439FC6D76CD4B1C
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yUeyutm6rXuecqZruufvF-Tx48s.roa
Signing time: Wed 04 Dec 2024 00:29:10 +0000
ROA not before: Wed 04 Dec 2024 00:29:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213768
IP address blocks: 2a0c:9a40:8ad0::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8f:12:20:ca:b5:98:d6:b7:14:39:fc:6d:76:cd:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Dec 4 00:29:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c947b2bad9baad7b9e72a66bbae7ef17e4f1e3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a5:fd:67:dd:cd:ae:92:30:da:88:13:13:7b:
e8:f6:d7:57:05:4c:ca:26:79:2e:b9:75:eb:39:aa:
ca:b0:4b:bb:d1:4a:4c:99:08:36:db:6b:63:b5:5c:
2c:0f:c3:fc:66:f9:72:f6:85:31:40:6d:9e:37:3d:
84:42:74:40:38:d4:39:7a:e7:25:a9:86:22:15:f1:
4b:15:60:e2:93:7e:ad:ce:ec:a9:c4:5d:a3:4b:64:
23:17:b6:76:3c:20:a9:71:db:75:97:eb:00:e2:ad:
a0:4b:b0:b7:99:8f:54:87:ed:cc:2e:48:8e:da:07:
12:6e:b9:a1:6e:95:8a:92:81:6f:9a:d0:61:1c:b2:
96:07:d4:70:38:4e:36:af:a9:3c:a0:eb:fb:09:b2:
79:e4:6b:20:ed:04:e8:4b:da:b2:a5:2c:81:25:55:
9f:50:23:5d:00:b9:3a:a3:93:ac:27:18:ae:37:ac:
33:0f:c4:53:23:68:ac:b3:4c:47:18:66:f2:78:2d:
1a:7b:a5:ff:93:ae:f9:9e:da:6a:c8:70:1e:9d:a8:
68:15:73:1e:2b:09:de:d3:c0:1c:5a:8f:1b:e7:ed:
a7:ea:cb:da:5a:fd:be:a4:95:d4:ed:37:50:57:77:
49:4b:a4:5f:bc:19:3a:f6:af:37:44:9d:d4:39:a2:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:47:B2:BA:D9:BA:AD:7B:9E:72:A6:6B:BA:E7:EF:17:E4:F1:E3:CB
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/yUeyutm6rXuecqZruufvF-Tx48s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8ad0::/44
Signature Algorithm: sha256WithRSAEncryption
28:e0:9f:6e:b0:6d:e8:28:6a:12:6a:0b:25:12:f7:9b:3e:be:
6c:74:e9:dc:4f:78:45:f9:87:5b:36:d0:8f:e4:10:dd:8f:ae:
3c:cf:09:4c:f8:b9:29:f1:49:e8:77:e7:c0:19:f1:e8:af:f4:
7c:ae:31:9e:dc:4b:75:05:d9:25:75:05:e3:74:66:d2:f3:5c:
88:80:5b:c5:c1:a4:2d:68:6b:21:77:9a:3e:25:4a:33:8e:4f:
de:26:d2:af:0e:13:75:64:9a:03:01:3e:7f:5d:4d:be:f8:c1:
28:5a:c8:87:d1:99:67:d9:eb:84:af:65:2b:41:ae:04:bd:cf:
f1:32:74:4e:dd:16:13:e3:55:8a:f4:06:e5:85:48:5a:bf:9b:
49:af:97:d8:ba:27:76:e9:20:25:be:b5:04:9c:02:3b:2c:bb:
28:71:27:42:cc:8d:f8:af:53:b2:f9:66:d0:dc:c8:a5:b5:55:
13:b4:01:e1:34:f8:ec:37:0f:75:be:97:12:b1:49:4c:a3:c7:
af:88:b2:09:60:fa:37:b9:92:f4:8b:47:6a:de:1f:42:6f:b8:
6f:26:9d:10:94:ca:3e:e1:c4:c2:6d:47:13:2e:8c:2b:d6:cc:
82:08:fd:d6:ed:1d:85:24:4a:09:d9:d9:c9:87:b8:bf:3b:a0:
26:74:ba:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:57 2025 by rpki-client