Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/IQpdEbOLt7Jh0tCiLtfOR1Q86UI.roa
File: IQpdEbOLt7Jh0tCiLtfOR1Q86UI.roa (raw, json)
Hash identifier: kOX9b225SyFdlcCmGK8W2Q800ruxyQ0LqjUuj59c/J0=
Subject key identifier: 21:0A:5D:11:B3:8B:B7:B2:61:D2:D0:A2:2E:D7:CE:47:54:3C:E9:42
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 018CC86F742C9AEE37516EAB7D98B5743F65
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/IQpdEbOLt7Jh0tCiLtfOR1Q86UI.roa
Signing time: Tue 02 Jan 2024 04:29:56 +0000
ROA not before: Tue 02 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 2a10:8804::/36 maxlen: 36
2a10:8802::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 12 Dec 2024 13:47:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:74:2c:9a:ee:37:51:6e:ab:7d:98:b5:74:3f:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jan 2 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=210a5d11b38bb7b261d2d0a22ed7ce47543ce942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:bb:b6:4b:45:94:b0:9a:9d:96:3e:e9:f6:
ba:e1:25:8d:82:4d:90:ac:57:bf:a9:82:7b:bf:50:
14:08:c0:7a:7b:02:54:3c:35:17:fc:87:99:df:f7:
05:96:ef:fe:70:89:32:f1:0e:b5:bd:11:ed:e5:5c:
ae:39:a6:46:4d:42:d7:ff:ac:6e:e6:6d:6f:3b:ed:
3d:2e:a1:42:f7:ac:33:0e:1b:59:ee:1c:8b:a8:47:
70:f9:0b:fb:36:af:f2:1a:bd:00:5b:c3:b3:00:42:
d0:03:c3:87:54:6e:8c:28:a5:a1:61:ab:c1:a3:f6:
03:39:23:fc:12:07:a9:45:87:86:ea:ed:d4:be:76:
1b:b9:44:69:a6:2f:83:c9:1b:04:db:f9:6a:a3:89:
56:88:bd:e3:09:b4:6e:59:6d:ea:65:61:9a:f7:3a:
dd:63:2e:f2:22:ee:a1:9b:a7:79:74:6c:24:93:f1:
01:57:2a:82:66:8a:a4:e7:68:06:26:c1:ba:2e:3b:
11:e2:94:74:9d:4d:36:af:6b:b9:a7:b0:ae:fe:9a:
a2:42:93:72:43:df:6d:62:38:11:fe:ce:e6:fd:84:
68:93:72:b0:0d:dc:24:98:97:e6:ce:59:31:aa:41:
4c:59:a6:0f:17:63:51:35:77:6c:87:1a:b0:f1:b9:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0A:5D:11:B3:8B:B7:B2:61:D2:D0:A2:2E:D7:CE:47:54:3C:E9:42
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/IQpdEbOLt7Jh0tCiLtfOR1Q86UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:8802::/36
2a10:8804::/36
Signature Algorithm: sha256WithRSAEncryption
0e:2b:c8:92:d9:a6:d1:d4:69:7b:83:35:bf:88:a2:51:33:a9:
4b:fc:9f:d3:7e:17:99:54:e0:77:a9:ad:56:cc:4c:b3:eb:9b:
f0:20:2f:d1:c8:6c:64:9e:27:23:e8:3c:6a:ae:20:0e:f2:eb:
7a:5f:20:c5:c7:c8:7e:d5:6f:b5:f5:f6:04:b1:08:7c:28:e1:
a8:55:82:0f:03:89:b4:bb:53:e5:76:ca:32:44:be:c5:fc:ea:
7b:f7:93:bc:0b:30:c9:6d:63:9b:42:f8:17:5f:b8:c9:88:5a:
84:fb:54:28:67:a6:ef:e5:3f:cf:22:14:5c:4d:b4:1f:0d:aa:
81:8c:03:4a:7e:71:2c:93:c4:07:84:85:6e:be:e0:7d:a0:70:
9e:2d:aa:04:1d:43:69:b3:30:41:28:32:f4:ed:3d:10:64:62:
04:08:d9:c1:46:59:23:2a:88:ed:d1:be:f2:93:78:cb:53:4e:
61:7d:01:aa:0d:68:15:10:20:4f:2f:47:02:df:1c:aa:f7:a7:
4b:b7:f1:04:ee:ad:1f:b6:7b:4a:ea:2a:f0:86:ba:e1:c3:92:
ab:10:98:fb:66:f4:51:b8:22:4d:85:f6:4f:ef:03:f9:72:65:
79:62:d1:e7:b8:77:84:46:7e:71:19:c6:f9:2e:0f:c6:9d:89:
e1:90:82:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:20 2025 by rpki-client