Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/kRA6WospXm9dT5cJQh2VwVZXjKw.roa
File: kRA6WospXm9dT5cJQh2VwVZXjKw.roa (raw, json)
Hash identifier: BC3pV9ySOgbjfFJuXlh7ySyx5gFZVmLmJs9JBIPSts0=
Subject key identifier: 91:10:3A:5A:8B:29:5E:6F:5D:4F:97:09:42:1D:95:C1:56:57:8C:AC
Certificate issuer: /CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Certificate serial: 01941BCD9AB54E184EE38AAC4EC8171FD8A9
Authority key identifier: 86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/kRA6WospXm9dT5cJQh2VwVZXjKw.roa
Signing time: Tue 31 Dec 2024 08:20:46 +0000
ROA not before: Tue 31 Dec 2024 08:20:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13020
IP address blocks: 2001:67c:20a1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1b:cd:9a:b5:4e:18:4e:e3:8a:ac:4e:c8:17:1f:d8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=860d9f01a98b514ebd3c2723d7f7eb448326f5e2
Validity
Not Before: Dec 31 08:20:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91103a5a8b295e6f5d4f9709421d95c156578cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:98:32:13:54:27:ff:47:d1:6c:56:ca:68:
eb:6c:29:89:d0:6a:1a:65:e4:0e:13:48:bc:2a:a9:
7b:13:9a:59:d4:81:fb:3c:10:6f:46:ce:94:80:8b:
c7:52:bb:18:10:ca:7f:6a:3a:d9:a7:c8:47:ee:a3:
f2:ee:18:e4:67:31:a9:6c:94:eb:be:63:03:68:55:
ad:c6:e5:86:f6:5d:e0:aa:54:17:c8:10:6e:29:b6:
82:9d:4b:cf:ae:48:17:d1:1a:a6:06:e8:7d:c3:fe:
8b:b3:60:45:f1:34:8a:fe:19:1b:42:b6:27:9f:05:
de:92:44:15:c0:14:bc:3b:89:82:03:66:d1:d1:da:
87:88:a4:c8:28:b2:16:ca:d0:52:e7:41:24:b5:9f:
d6:9d:0a:61:fe:df:03:f2:46:0e:e2:8e:d9:57:8d:
81:6d:28:9b:98:ea:56:f3:fb:0b:42:92:7e:40:be:
77:be:3a:11:63:75:5c:52:44:8f:39:20:b2:9d:77:
9e:58:6e:8c:dc:19:de:86:f1:2d:3f:3e:47:94:80:
18:18:34:df:a8:0b:2a:4e:df:84:60:25:30:db:37:
7b:f4:a6:84:96:c3:c2:a0:c1:e9:72:e8:6e:0e:05:
30:00:ae:a6:e7:2f:1b:8e:98:1b:ae:e0:c1:42:90:
96:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:3A:5A:8B:29:5E:6F:5D:4F:97:09:42:1D:95:C1:56:57:8C:AC
X509v3 Authority Key Identifier:
keyid:86:0D:9F:01:A9:8B:51:4E:BD:3C:27:23:D7:F7:EB:44:83:26:F5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hg2fAamLUU69PCcj1_frRIMm9eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/kRA6WospXm9dT5cJQh2VwVZXjKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/23bea6-9001-441d-8364-61cb43c2db85/1/hg2fAamLUU69PCcj1_frRIMm9eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:20a1::/48
Signature Algorithm: sha256WithRSAEncryption
56:89:9b:ec:31:b5:e9:ee:26:2c:bf:6b:d7:4e:9c:c5:38:cc:
d7:02:85:54:4c:ef:cb:d0:3d:db:47:fb:52:17:de:3c:24:36:
ef:d0:a5:b2:6f:ab:f3:8f:3e:88:aa:e7:07:8c:82:ad:08:7c:
ed:fa:65:76:6e:95:fa:ae:83:52:c9:44:ab:b3:fd:1b:6f:10:
7a:26:b7:e3:56:91:90:7d:1f:94:27:d4:7c:6e:d1:e1:bc:35:
13:38:f4:20:e8:27:58:f5:70:65:e4:42:07:0c:60:7b:f2:b1:
c4:68:e0:52:9a:95:a5:82:7f:38:76:2f:4f:c4:b5:ba:19:9d:
27:2c:02:4e:cf:bf:43:bb:a7:9a:16:9f:53:cc:8e:e1:39:fd:
32:8f:06:c7:d0:d2:af:e2:dd:67:be:7b:a4:b3:a5:e8:e7:eb:
02:f8:48:8f:27:3c:31:5b:a6:df:28:ea:82:94:eb:b5:d3:97:
c7:72:b8:25:42:31:0c:b3:e8:84:c9:7d:6f:2e:46:aa:3f:a7:
46:4c:58:fb:a4:7d:7f:c0:d0:d4:39:cd:ae:c0:44:bb:13:88:
7b:ce:67:59:ee:cc:47:11:d9:70:2a:25:3e:6a:af:00:70:7c:
bd:24:6b:50:ea:98:ce:3a:c7:bd:41:22:dd:02:e7:7a:14:f9:
af:46:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 11:02:35 2025 by rpki-client