Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/eUgxX1oDd9WM1EXt1juOiiVjsxo.roa
File: eUgxX1oDd9WM1EXt1juOiiVjsxo.roa (raw, json)
Hash identifier: CBaA4r3eJB9eVYsx+2EzpxmY6AAsU4eeePX3x0Q6U5M=
Subject key identifier: 79:48:31:5F:5A:03:77:D5:8C:D4:45:ED:D6:3B:8E:8A:25:63:B3:1A
Certificate issuer: /CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Certificate serial: 018CC7275EE02E2138E877329242E7BE29C4
Authority key identifier: 89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/eUgxX1oDd9WM1EXt1juOiiVjsxo.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199302
IP address blocks: 2001:67c:150c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5e:e0:2e:21:38:e8:77:32:92:42:e7:be:29:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89c3c92a4e1d4fe88572bfa68c985c31e3368c82
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7948315f5a0377d58cd445edd63b8e8a2563b31a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:bc:1d:6c:26:5b:f2:d7:23:87:59:bf:08:
44:e5:f0:ad:c9:88:e3:ee:e6:97:e2:3d:20:7a:73:
b2:ec:c2:75:18:5f:be:05:0a:de:57:9e:e4:77:31:
dd:13:94:a1:20:1f:6d:8f:da:e5:29:a8:30:b9:7d:
b3:9c:22:02:cf:f0:7a:29:81:c4:3d:f7:cf:5d:70:
54:c4:c4:37:c7:03:11:21:f9:5a:7b:9e:76:e3:79:
f3:99:39:b4:89:30:0f:44:24:26:00:0f:a9:fc:b6:
f4:fe:16:42:2b:ac:86:70:92:87:2b:6f:28:32:a9:
15:35:5c:7a:7e:79:89:7c:82:fa:a0:c7:d2:db:e7:
fe:d4:93:c3:8b:01:db:08:3f:0f:d5:df:07:97:34:
9b:77:56:52:ca:63:79:80:c1:f4:8b:52:32:61:1c:
d7:d0:b4:e8:39:3e:de:38:5d:6b:d1:e8:60:39:9f:
cf:9f:08:f1:cd:ed:0c:b2:3c:9a:a3:9a:fa:94:df:
2b:3d:e1:78:bd:bb:7d:cd:94:f2:c7:94:34:0f:62:
14:59:e0:75:5f:23:49:09:42:c4:de:cd:06:2d:76:
cc:0c:74:e1:18:50:b8:7d:10:ae:0f:e9:b9:5d:db:
f1:bc:8f:9c:37:5f:b4:97:f7:27:ed:3e:1b:f9:ad:
3d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:31:5F:5A:03:77:D5:8C:D4:45:ED:D6:3B:8E:8A:25:63:B3:1A
X509v3 Authority Key Identifier:
keyid:89:C3:C9:2A:4E:1D:4F:E8:85:72:BF:A6:8C:98:5C:31:E3:36:8C:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/icPJKk4dT-iFcr-mjJhcMeM2jII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/eUgxX1oDd9WM1EXt1juOiiVjsxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/c33905-ecc5-44b7-8146-e91ff5fe6c26/1/icPJKk4dT-iFcr-mjJhcMeM2jII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:150c::/48
Signature Algorithm: sha256WithRSAEncryption
42:14:64:33:d0:f8:98:1a:52:bb:69:f3:93:28:e8:15:17:25:
34:2f:30:0e:c0:9a:92:c9:dc:95:38:31:cc:a4:7b:46:05:74:
b3:91:8e:5a:a2:28:85:37:83:d7:72:74:f7:13:54:04:f6:2a:
6f:eb:12:b6:3f:00:cb:bb:94:88:68:97:65:c1:df:12:70:d0:
0c:a9:54:e0:fc:49:f2:0d:1c:7a:2f:5b:6e:03:f8:9a:3d:ef:
20:c8:5d:a3:3b:de:ed:91:8a:0b:2a:f0:1c:3e:a0:09:71:5a:
67:fe:d8:60:93:56:9b:c4:4a:c2:48:e1:88:75:c4:18:26:7a:
28:ef:fc:2a:de:db:4a:9c:b7:89:d8:ac:70:d6:6b:2b:de:38:
47:07:45:f4:b2:68:0b:9c:0b:bd:55:2c:c3:53:a5:d7:0e:9b:
52:44:26:60:d6:3e:2a:f3:f1:66:29:bc:a8:38:91:e3:c7:98:
3a:f1:58:d1:a4:c7:0c:bb:75:ce:c4:41:88:16:b0:10:60:97:
f9:fd:18:7f:87:9f:0e:99:36:ca:c9:24:e3:ac:62:42:ee:a7:
6a:90:49:79:b5:06:a0:74:53:7a:57:55:e3:e8:1b:64:8a:5a:
f4:3c:45:23:d7:b3:17:b3:bd:f2:00:24:12:9c:32:1f:25:34:
51:97:84:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:06 2025 by rpki-client