Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/W_q7xlCkBj6Ns5TPv4Dl9Lc9TjY.roa
File: W_q7xlCkBj6Ns5TPv4Dl9Lc9TjY.roa (raw, json)
Hash identifier: 6iBtFLMIW8pM4/p1QKMQ59uvvg+WiOCfH2lC/VHbsfk=
Subject key identifier: 5B:FA:BB:C6:50:A4:06:3E:8D:B3:94:CF:BF:80:E5:F4:B7:3D:4E:36
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 0194E2DB6AD498A877293E3B8BE51FEF748A
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/W_q7xlCkBj6Ns5TPv4Dl9Lc9TjY.roa
Signing time: Sat 08 Feb 2025 00:00:18 +0000
ROA not before: Sat 08 Feb 2025 00:00:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213527
IP address blocks: 2a14:47c0::/32 maxlen: 32
2a14:47c0::/40 maxlen: 40
2a14:47c0::/48 maxlen: 48
2a14:47c0:e::/48 maxlen: 48
2a14:47c0:fffe::/48 maxlen: 48
2a14:47c0:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 15 Feb 2025 01:35:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e2:db:6a:d4:98:a8:77:29:3e:3b:8b:e5:1f:ef:74:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Feb 8 00:00:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bfabbc650a4063e8db394cfbf80e5f4b73d4e36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1f:1b:40:c0:d8:92:f8:9c:25:e2:c1:0a:df:
c3:50:23:33:dd:54:82:6b:44:2d:b5:c6:b9:05:9d:
0e:eb:d9:20:cb:b4:33:2d:d9:5f:bf:a2:99:8b:d1:
d4:23:78:d7:6c:42:09:6f:4f:5f:6e:97:ee:72:fa:
14:5a:70:22:a1:12:d8:2a:fb:17:1b:b5:45:e9:6d:
05:1f:b9:cd:0a:a4:4b:12:9e:5e:a1:9f:46:8e:57:
b3:07:1c:07:3e:1b:c0:6e:1d:ea:35:62:c4:00:78:
75:88:a7:b5:a6:6e:73:c4:07:89:b3:59:0e:b0:33:
e0:a5:bb:0f:19:bb:60:3b:55:44:e3:07:68:39:6d:
55:45:f2:39:12:61:4b:f8:1d:54:dd:00:86:5b:81:
ac:5b:94:a6:ec:50:fe:ba:2c:e2:f2:9a:9c:f2:25:
69:d9:94:aa:f9:50:93:5b:9d:42:ff:72:22:28:27:
c6:a0:ef:3f:11:41:a8:f4:24:8f:2f:a6:b3:54:07:
f3:ab:30:a3:b4:9f:2b:ad:f5:af:9e:29:09:36:e1:
d2:8f:94:76:c4:4b:b9:0b:f5:e4:f6:4a:5a:44:76:
c3:7d:a5:af:5a:2c:c4:3a:06:da:26:fe:5b:57:2e:
ee:45:e9:05:2e:31:82:4b:b2:6f:f7:b0:5a:f1:a6:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FA:BB:C6:50:A4:06:3E:8D:B3:94:CF:BF:80:E5:F4:B7:3D:4E:36
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/W_q7xlCkBj6Ns5TPv4Dl9Lc9TjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:47c0::/32
Signature Algorithm: sha256WithRSAEncryption
50:9f:bd:d5:36:cb:33:b0:6f:21:57:79:77:d9:19:c2:68:6e:
a5:19:64:d2:ca:bf:29:f5:d5:af:39:29:2b:41:a1:ec:36:a2:
d4:49:cf:bf:9c:5e:84:51:f0:35:dd:4c:e1:8f:f2:26:a7:de:
24:2e:73:5d:47:2e:39:23:88:de:0c:a3:ad:b3:d6:23:99:a4:
b6:d9:41:16:6f:48:05:fb:f4:5c:74:1e:ec:5e:25:39:64:0e:
10:8d:c3:03:c2:50:c2:7a:5d:2e:04:4a:27:12:d7:8c:4b:0e:
08:9a:70:2b:e1:55:ec:f2:25:0d:e2:9f:ab:36:c5:50:5b:f1:
47:00:a5:4d:92:4a:13:2a:27:c2:59:b1:26:ba:f6:ae:31:c3:
05:00:27:45:70:7c:e3:61:9e:b6:91:da:d2:ab:a8:54:bc:5b:
e4:bb:25:7d:a4:2f:6e:12:e5:91:ee:72:cb:82:18:2f:60:a3:
20:e7:8d:05:9c:1a:4f:1e:1e:d3:70:74:9f:0c:d0:b6:0f:65:
c9:9f:72:ff:7f:fb:1c:90:3e:11:e7:06:15:c3:9c:2c:2c:70:
4e:59:c2:88:4b:85:4e:00:76:37:db:21:b6:17:31:af:28:0f:
ec:b9:8c:94:7f:29:22:84:b2:fd:5c:0b:ca:dc:0e:ec:f6:f4:
92:66:94:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:44 2025 by rpki-client