Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/KC1AWloxq4DwldZQjP4wrOuH56E.roa
File: KC1AWloxq4DwldZQjP4wrOuH56E.roa (raw, json)
Hash identifier: 7vO75EJPQOUdMJbm5p8WqMeNhdJtZjsP01Dpc5sH/aA=
Subject key identifier: 28:2D:40:5A:5A:31:AB:80:F0:95:D6:50:8C:FE:30:AC:EB:87:E7:A1
Certificate issuer: /CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Certificate serial: 018CC86F32B138478AE563F743AC7B29F55F
Authority key identifier: A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/KC1AWloxq4DwldZQjP4wrOuH56E.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212125
IP address blocks: 2001:67c:2904::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:32:b1:38:47:8a:e5:63:f7:43:ac:7b:29:f5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6ee76c4e8d94614e082505ffe8c991a24af8a
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=282d405a5a31ab80f095d6508cfe30aceb87e7a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:d9:16:e0:ae:63:1a:8b:fa:f5:5e:22:e6:
4e:b3:4e:1d:b3:4e:a5:c1:75:d4:bf:78:91:c7:51:
44:ed:2c:5a:66:67:65:5f:77:81:e6:c9:67:e7:03:
a8:a0:45:89:a9:b6:c2:41:4c:79:a2:69:22:ad:9f:
d3:03:80:c5:c1:43:ac:91:77:34:13:49:3b:8a:b1:
aa:13:8f:d4:31:d3:69:b5:09:09:4c:e6:f7:82:e8:
39:1c:13:5c:4e:c2:2b:4d:f9:3c:a5:aa:ec:f3:68:
ea:d3:35:d4:86:54:7f:4c:31:a9:5e:c6:66:af:ba:
c7:23:4c:e4:a4:91:48:1f:24:70:06:8e:a5:8a:c9:
1a:6f:e5:88:c0:66:42:ac:0b:d6:98:9e:6e:12:a6:
55:7b:4b:a9:60:a9:1e:03:e3:3f:5b:05:fd:04:1b:
8d:38:6a:26:73:e0:dc:2c:9c:0d:4d:77:83:f4:db:
f9:71:05:87:43:8b:71:4e:83:20:2b:c5:2c:4f:7e:
9f:a0:e6:29:f5:7f:ed:3f:67:1b:e6:4a:86:74:a4:
6f:98:32:d2:8f:22:ce:9b:cb:c8:a4:aa:7e:7f:9d:
a2:6e:da:4a:64:e8:b7:06:81:e1:9d:7e:c4:ce:6e:
a8:e9:29:07:62:a9:06:c1:82:3f:29:97:9d:ad:26:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2D:40:5A:5A:31:AB:80:F0:95:D6:50:8C:FE:30:AC:EB:87:E7:A1
X509v3 Authority Key Identifier:
keyid:A8:C6:EE:76:C4:E8:D9:46:14:E0:82:50:5F:FE:8C:99:1A:24:AF:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbudsTo2UYU4IJQX_6MmRokr4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/KC1AWloxq4DwldZQjP4wrOuH56E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/81bf03-695c-4bb1-a10c-e7edeba7b702/1/qMbudsTo2UYU4IJQX_6MmRokr4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2904::/48
Signature Algorithm: sha256WithRSAEncryption
9c:9c:00:7a:6e:41:37:0f:95:1d:74:ed:75:a6:36:3b:d8:7a:
10:83:18:3e:66:b2:56:3d:49:61:26:01:6e:31:2d:e9:17:48:
d3:db:4e:98:33:11:5e:c5:15:36:ca:c8:83:d7:d1:3d:01:a8:
83:80:52:41:0d:d8:52:4b:d2:81:ed:9d:a2:28:85:b6:dc:c3:
d0:8c:89:ed:80:b8:2c:df:12:e4:34:95:53:33:b1:f3:89:a8:
f4:15:73:bc:0a:42:19:20:39:55:53:65:86:6c:a7:67:0b:7d:
17:a2:de:c3:fa:aa:ae:39:e6:a1:49:43:99:86:0e:c1:c0:a9:
ab:c4:bf:4a:08:e0:0e:25:6c:27:af:5a:9c:8f:74:77:4f:52:
24:34:10:ed:28:12:4c:87:cc:fb:f4:9e:23:36:98:7c:c4:4c:
a8:cb:10:40:36:d3:b4:dd:f5:40:0a:f1:cf:71:37:25:42:02:
27:dd:c2:1b:9f:39:49:c7:20:76:7c:c9:25:06:9b:6a:1f:3b:
5f:dd:ab:a0:21:be:c0:70:26:1c:5d:34:8e:1d:ca:f7:21:e9:
14:77:0e:e1:b2:db:0d:20:d6:d2:f7:8f:18:49:ca:db:13:85:
ba:23:a4:12:76:e5:cd:43:eb:42:72:a7:4b:59:34:2a:0f:d2:
be:11:7b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:54:13 2025 by rpki-client