Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Ca-WfN5klKS8fRZpBjV2TrNB1PI.roa
File: Ca-WfN5klKS8fRZpBjV2TrNB1PI.roa (raw, json)
Hash identifier: Gc8Z7s/kVgfL5j7h8/2MARqQ1UY1uYj1CZR6uEkK990=
Subject key identifier: 09:AF:96:7C:DE:64:94:A4:BC:7D:16:69:06:35:76:4E:B3:41:D4:F2
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019392D542C0717F217E2C1A20F1E1F2A90D
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Ca-WfN5klKS8fRZpBjV2TrNB1PI.roa
Signing time: Wed 04 Dec 2024 18:01:09 +0000
ROA not before: Wed 04 Dec 2024 18:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff07::/48 maxlen: 48
2a03:2887:ff08::/48 maxlen: 48
2a03:2887:ff09::/48 maxlen: 48
2a03:2887:ff0a::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
2a03:2887:ff69::/48 maxlen: 48
2a03:2887:ff70::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:92:d5:42:c0:71:7f:21:7e:2c:1a:20:f1:e1:f2:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Dec 4 18:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09af967cde6494a4bc7d16690635764eb341d4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9b:ab:72:13:3d:84:a7:9a:b2:42:4d:eb:a0:
09:6d:07:23:12:ec:1b:20:47:d2:70:b4:1f:a1:e9:
dc:f9:a8:81:02:a4:8b:fd:0b:59:23:59:15:97:af:
4e:4a:3e:0d:73:a7:80:4b:24:64:22:7a:f5:33:10:
20:c0:6f:39:7b:12:79:fd:69:26:e8:bf:ff:82:3a:
23:34:28:43:ef:de:4a:90:81:8f:74:c9:af:d2:bb:
dd:d7:51:ce:0a:0a:23:ba:0c:03:53:bc:88:1c:e4:
d6:a0:57:c7:ba:77:6d:ae:a7:06:06:5a:7e:98:1a:
80:d5:6c:cd:e5:49:93:b8:61:2c:69:30:09:eb:2b:
f2:32:ae:ad:54:b8:48:4f:8b:0b:b6:db:73:6f:15:
ff:ad:50:f0:69:a6:9d:d0:fd:55:f8:c3:df:b9:0c:
61:e2:13:98:30:be:d8:73:f8:7e:b1:a6:05:c6:e2:
fd:10:8d:53:41:8b:7e:bd:ff:27:75:73:bd:1c:a4:
d7:68:29:52:ea:71:8b:1a:ff:07:00:e2:11:e6:d3:
d4:5d:56:e4:f6:81:54:5d:e8:32:4c:e5:d9:39:08:
00:93:f6:f7:df:84:54:b2:a7:4a:42:57:c5:57:83:
f0:87:5a:e3:24:40:a6:e2:ed:ec:72:e1:42:27:ef:
2d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:AF:96:7C:DE:64:94:A4:BC:7D:16:69:06:35:76:4E:B3:41:D4:F2
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/Ca-WfN5klKS8fRZpBjV2TrNB1PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff0a:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff69:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff70::/48
Signature Algorithm: sha256WithRSAEncryption
98:b3:88:a0:61:e7:f7:77:83:ed:f8:e4:f0:64:ad:10:0f:5e:
3d:c8:bf:d0:c2:22:fc:0f:a8:3a:de:a7:37:e7:ee:5d:86:27:
92:a7:58:a3:a7:67:fd:75:9c:13:5f:08:e5:e9:81:84:2f:80:
67:70:5d:af:59:1a:58:8c:e3:e2:15:94:ca:bd:bd:42:1b:fc:
cd:b2:90:8c:81:88:16:6f:12:f3:eb:0f:ff:17:3f:03:89:af:
13:18:f9:91:6b:f2:a2:df:86:a2:99:b8:09:f3:3f:88:56:00:
ea:5a:0b:93:bf:b3:53:62:f7:a5:c9:87:d3:83:f3:df:b8:ce:
38:ea:46:4e:d7:a2:8b:ca:3a:ff:e9:84:8a:07:c0:d0:0d:a6:
34:d7:6b:7b:aa:b1:9d:57:85:dc:a5:7c:16:76:c7:52:f9:c0:
68:e5:2e:60:15:19:04:02:91:ff:75:a6:4a:a7:f0:f7:87:fd:
83:49:46:3d:a4:82:70:35:08:99:b0:3f:c0:3b:50:84:77:e8:
9c:3f:d4:1e:b2:c5:15:90:ca:9e:08:70:92:9b:ec:09:7e:b7:
5d:14:e4:65:9d:17:6b:fa:73:5f:5f:58:4e:0d:e5:ae:45:5d:
8e:44:28:ad:8c:a6:9a:cb:2b:1e:63:45:6e:12:11:a2:fe:75:
d2:6d:ca:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:59:20 2025 by rpki-client