Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/JmQwzF7bnFLgDyPxp8Ho8auCmM8.roa
File: JmQwzF7bnFLgDyPxp8Ho8auCmM8.roa (raw, json)
Hash identifier: zrQmprz14zzCQoxGMdF5U+MVq/6cM5lzp6o2vPOXXr4=
Subject key identifier: 26:64:30:CC:5E:DB:9C:52:E0:0F:23:F1:A7:C1:E8:F1:AB:82:98:CF
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 0193C4FF4B3264C35378EDCFEEF4B656B430
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/JmQwzF7bnFLgDyPxp8Ho8auCmM8.roa
Signing time: Sat 14 Dec 2024 11:48:05 +0000
ROA not before: Sat 14 Dec 2024 11:48:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210546
IP address blocks: 2a0d:d940:12::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c4:ff:4b:32:64:c3:53:78:ed:cf:ee:f4:b6:56:b4:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Dec 14 11:48:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=266430cc5edb9c52e00f23f1a7c1e8f1ab8298cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:aa:aa:59:a9:9c:d2:40:8a:fe:0f:f6:51:c9:
9b:10:35:36:3b:e2:e1:68:92:01:07:36:63:c6:a3:
50:52:95:57:ae:8c:d8:f6:d0:75:4b:f6:ed:a2:93:
bd:36:2d:b9:3e:e6:0d:6d:82:c6:0b:11:bf:e5:ac:
d4:ea:da:e3:8e:6c:3e:cb:bf:88:24:bc:18:9a:36:
77:94:ec:83:ae:d2:e5:d6:63:d6:2a:a3:43:24:8f:
95:fc:c1:eb:5d:22:88:f3:05:44:3d:4e:6b:7b:56:
44:05:dc:7d:57:56:b2:7f:7c:b3:97:a6:76:2e:c1:
93:62:42:68:d3:7b:85:ed:7e:f5:4c:80:f3:82:6a:
12:58:27:1c:2f:c7:9f:de:19:4f:7c:b4:92:0e:78:
d4:96:fa:e5:c7:19:86:68:d3:b4:9f:c5:80:06:e3:
73:5f:05:b1:6e:48:94:40:c8:3a:bc:a1:6c:42:92:
3b:32:f1:16:d4:8f:f4:76:76:f0:18:9c:ce:3a:00:
5b:f3:ac:cc:7a:74:23:89:71:20:8a:1e:37:ff:80:
08:87:1a:f8:10:42:7b:40:cb:c8:ec:6f:d7:e8:b0:
33:d4:1e:c4:eb:a7:2d:83:92:db:fc:49:b6:89:87:
12:9d:cd:57:62:ec:9f:68:f6:90:e3:64:d1:47:ea:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:30:CC:5E:DB:9C:52:E0:0F:23:F1:A7:C1:E8:F1:AB:82:98:CF
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/JmQwzF7bnFLgDyPxp8Ho8auCmM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:12::/48
Signature Algorithm: sha256WithRSAEncryption
5a:69:6c:4f:dc:2a:72:92:97:4c:4f:25:68:5b:70:96:c9:6d:
67:54:2b:e6:bb:84:3f:f3:d5:b9:94:26:1f:23:05:01:4f:36:
2b:19:e3:04:d6:d4:a4:c7:9e:26:fa:2e:88:c6:84:ec:0d:27:
2a:e1:24:03:8d:ba:21:c2:40:14:fb:15:b8:4f:5d:19:be:d6:
2a:11:fc:f3:4d:ca:64:bb:4f:58:f8:6f:28:a9:bf:39:c7:80:
12:d8:04:a7:73:3c:00:7f:20:c8:ac:83:23:f1:6e:7b:11:56:
23:78:09:95:e2:4c:d5:96:36:74:50:b2:6a:4f:56:9e:1c:51:
33:c9:4a:09:eb:b1:dc:5b:32:34:73:44:a7:dc:e2:eb:2b:e9:
f1:5e:bf:eb:99:fa:51:0d:56:06:94:f3:32:f3:d1:52:33:5d:
f2:89:3e:40:5f:6f:ce:dc:1e:0d:33:61:72:30:79:31:0e:3e:
40:4d:50:11:ac:eb:d8:94:9a:61:70:56:50:72:ed:46:2d:f2:
58:79:dd:cc:2b:8a:04:98:a1:93:e5:40:c1:04:bd:59:6b:b5:
77:50:4f:b6:b4:26:83:26:b0:8c:b6:cf:88:26:c0:de:50:96:
9d:ef:f5:6b:eb:cb:b6:82:bb:11:8d:29:12:04:11:8e:62:f6:
b5:9d:26:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:03:34 2025 by rpki-client