Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/r8c4anwyBJrBULKLEmf6xdg6fa0.roa
File: r8c4anwyBJrBULKLEmf6xdg6fa0.roa (raw, json)
Hash identifier: J4Zjg+soDcszYZpz3iEMv8iVkWniNOOV7GpJpn1J2tA=
Subject key identifier: AF:C7:38:6A:7C:32:04:9A:C1:50:B2:8B:12:67:FA:C5:D8:3A:7D:AD
Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial: 0194CFF598B76D5D33450F3FB80F8B43DBEB
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/r8c4anwyBJrBULKLEmf6xdg6fa0.roa
Signing time: Tue 04 Feb 2025 07:56:06 +0000
ROA not before: Tue 04 Feb 2025 07:56:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 2a0b:4144::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Mar 2025 07:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cf:f5:98:b7:6d:5d:33:45:0f:3f:b8:0f:8b:43:db:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Validity
Not Before: Feb 4 07:56:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=afc7386a7c32049ac150b28b1267fac5d83a7dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:be:ec:a5:bb:ad:eb:28:6d:b2:cd:2c:fb:
1c:f7:14:c4:17:6b:f9:e3:8a:57:d2:a2:85:c6:75:
ef:59:5f:0a:6b:b5:25:20:16:01:83:83:4e:40:1e:
39:97:10:c7:30:9e:ea:6b:35:84:8f:b7:a5:aa:63:
de:51:36:07:f2:80:6a:68:d0:0e:1e:23:70:85:ab:
dc:ec:f9:c8:82:8f:c4:a7:29:1f:95:94:d5:83:60:
ad:62:e3:b6:ce:b1:ff:c9:e6:2d:30:31:4a:0a:d5:
5e:3b:6b:a8:be:92:66:6e:16:31:0e:8b:9b:c0:c9:
38:10:ef:5d:5b:c8:ee:7a:2b:7c:f5:9c:06:d3:98:
45:e7:2a:4e:6e:69:27:73:8f:cf:ec:2e:a8:ff:ab:
1e:83:8f:61:5f:ff:17:65:89:a8:4e:88:a7:9c:73:
f6:75:dc:66:f4:6d:ab:66:73:3f:a8:6f:c6:7a:a3:
b0:7b:4b:8f:e4:9b:68:a2:89:6d:6f:03:35:60:bb:
85:79:75:72:0f:7a:0d:30:f0:ea:63:28:bb:5e:7a:
b4:59:6a:c5:17:d0:15:f7:e7:ce:97:8f:26:d0:e1:
ed:fe:36:30:50:63:fe:00:78:19:93:26:44:b7:4e:
92:3f:85:3c:2b:40:e9:4a:c3:e2:54:9e:55:ad:2d:
17:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:38:6A:7C:32:04:9A:C1:50:B2:8B:12:67:FA:C5:D8:3A:7D:AD
X509v3 Authority Key Identifier:
keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/r8c4anwyBJrBULKLEmf6xdg6fa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4144::/48
Signature Algorithm: sha256WithRSAEncryption
83:7a:f1:0c:0b:9a:33:08:28:a4:fa:e8:8a:f8:9d:87:bd:68:
7e:0e:7a:3a:bb:7a:39:b5:ae:df:1f:42:8d:e4:ee:07:4d:fa:
1e:ab:16:c9:c9:78:f2:0e:dd:9f:ac:8f:99:24:71:37:02:0e:
73:50:20:3a:20:8b:b3:dc:0f:c4:54:e1:1c:2d:78:f5:58:c3:
5b:45:6a:8a:1c:15:5c:6c:a6:28:5e:cc:7c:d0:3f:06:8a:0d:
00:b6:ce:2e:aa:76:2c:94:8e:42:2b:c7:eb:87:f0:31:8c:d2:
99:a7:96:1e:f6:2d:b4:d7:7f:ba:d5:b7:c7:34:c6:98:85:68:
18:b8:bd:18:33:31:83:40:7e:d4:93:df:82:89:c9:a3:5c:93:
c4:f4:b0:dd:6d:5f:75:3a:85:cd:f3:19:c0:e8:df:4d:da:26:
4b:a1:82:0b:c9:53:ae:3e:30:e2:2b:57:42:b6:2a:0e:20:53:
82:6e:15:38:b3:43:3f:99:f4:5d:9f:43:51:6a:03:05:43:a6:
8f:cc:e4:35:56:62:2e:88:c3:e7:45:03:1d:eb:4e:4a:61:37:
17:1f:bd:ad:f9:cd:32:cf:f8:ab:50:58:85:d5:ce:41:3e:10:
47:13:6e:db:7d:4d:da:1a:da:73:a2:aa:ec:73:c6:12:7e:e2:
03:3b:17:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:55:37 2025 by rpki-client