Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/V-XUhjY8P8gJedZg5y5GP34G3CM.roa
File: V-XUhjY8P8gJedZg5y5GP34G3CM.roa (raw, json)
Hash identifier: y3SF9VXUrzGYogG7i1lmhrHQedHaUwlvjOO7lhb5ku4=
Subject key identifier: 57:E5:D4:86:36:3C:3F:C8:09:79:D6:60:E7:2E:46:3F:7E:06:DC:23
Certificate issuer: /CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Certificate serial: 01945E8524DCB880B5F26B609FF2114D8B69
Authority key identifier: 42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/V-XUhjY8P8gJedZg5y5GP34G3CM.roa
Signing time: Mon 13 Jan 2025 07:16:11 +0000
ROA not before: Mon 13 Jan 2025 07:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35277
IP address blocks: 2a10:c940:100::/48 maxlen: 48
2a10:c940:200::/48 maxlen: 48
2a10:c941::/32 maxlen: 32
2a10:c941:100::/48 maxlen: 48
2a10:c941:200::/48 maxlen: 48
2a10:c942:100::/48 maxlen: 48
2a10:c942:200::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 16 Mar 2025 10:57:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:85:24:dc:b8:80:b5:f2:6b:60:9f:f2:11:4d:8b:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421cba589920beebb19bc572ae6d501b8cf6bbf0
Validity
Not Before: Jan 13 07:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57e5d486363c3fc80979d660e72e463f7e06dc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6e:dc:8e:4a:f2:7e:b7:0d:4b:f2:89:0a:b1:
f4:c5:b2:3f:14:64:9e:b5:c5:d2:c7:7a:de:9d:98:
ea:27:c4:78:19:4b:3c:46:da:24:40:c1:70:4b:b3:
1a:f1:bf:08:1c:1a:b2:1d:91:1b:db:a1:72:75:e2:
04:e6:2d:b4:ab:c0:59:24:19:bf:cb:77:a4:f6:65:
df:dc:a1:d0:d4:dc:04:3b:0e:31:33:44:2d:d9:ad:
70:dd:b1:fb:ff:a4:a7:33:b0:ca:1d:44:47:88:89:
41:f4:37:3a:d6:2b:7f:c6:5d:f3:90:e0:05:27:ab:
23:69:98:9e:0e:87:7a:16:eb:66:79:07:1f:59:8e:
c0:58:6f:da:d5:4a:21:fe:d6:ca:7f:3f:e8:15:0b:
c9:8e:55:e3:be:00:0a:67:08:fc:6e:aa:4f:21:09:
11:93:bf:f0:e9:eb:cb:21:fb:76:8e:d0:ee:a5:ba:
a6:85:1b:91:ba:7d:cb:64:08:ff:31:d3:fe:35:c8:
96:c8:ab:1a:3b:95:42:66:10:33:fa:5c:7d:6b:30:
94:64:27:06:9b:b3:19:31:ee:9e:d9:e1:f2:02:01:
b5:4f:80:e5:f9:c9:30:f6:49:4b:15:bf:2b:d0:66:
ce:57:05:03:49:5c:bc:5a:57:0d:79:17:04:10:1a:
bf:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E5:D4:86:36:3C:3F:C8:09:79:D6:60:E7:2E:46:3F:7E:06:DC:23
X509v3 Authority Key Identifier:
keyid:42:1C:BA:58:99:20:BE:EB:B1:9B:C5:72:AE:6D:50:1B:8C:F6:BB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/V-XUhjY8P8gJedZg5y5GP34G3CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1c49eb-4dda-44ef-bf04-ec00e1a27cc8/1/Qhy6WJkgvuuxm8Vyrm1QG4z2u_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:c940:100::/48
2a10:c940:200::/48
2a10:c941::/32
2a10:c942:100::/48
2a10:c942:200::/48
Signature Algorithm: sha256WithRSAEncryption
b0:ef:da:51:e0:14:2e:0e:46:f4:e7:ad:fb:ba:08:92:b9:ef:
bb:45:f1:97:1c:0f:8a:9f:db:49:27:20:04:3c:74:1f:00:24:
f5:18:99:ca:f3:9b:58:a4:76:e1:d2:05:1e:39:11:a0:0e:db:
3b:32:9b:ce:ab:5b:22:2b:b4:61:aa:6d:9f:b2:39:15:e0:d5:
2d:e8:9a:e4:2e:1c:85:5f:f8:c4:7c:73:ef:2f:c8:b2:38:4d:
77:bd:04:64:b6:4f:1d:b3:43:75:9e:22:88:f6:96:53:ec:48:
b1:08:8f:30:ec:f8:d0:1f:aa:e4:a6:76:ae:64:a6:c6:83:60:
ce:cf:1f:bf:d0:a7:7d:d0:e4:21:9d:b0:4b:b1:83:65:40:ad:
8b:0c:74:96:16:03:cf:24:f3:63:bf:06:1a:1d:5a:cd:2c:14:
34:b0:19:6b:14:46:f4:38:50:3b:bf:d2:be:47:96:23:c3:7e:
64:6a:59:a7:ab:b5:18:10:ff:f1:42:db:58:e8:83:89:89:20:
b5:f1:fa:5f:c5:72:0c:0e:6d:c6:cb:2a:16:84:1c:47:26:d0:
53:fa:80:24:44:cb:0b:22:29:c9:51:78:85:e1:7a:06:07:fd:
8a:79:2a:f3:4a:ae:46:a6:4f:5e:d5:27:87:be:7e:70:97:96:
de:98:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:41:32 2025 by rpki-client