Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/X-iCnqmNG6j885gxiyPbYDqPEtc.roa
File: X-iCnqmNG6j885gxiyPbYDqPEtc.roa (raw, json)
Hash identifier: cB3ZnO+ne1w3OWuzgaqgeTrJOUkZQMqe2HjvqHud/S0=
Subject key identifier: 5F:E8:82:9E:A9:8D:1B:A8:FC:F3:98:31:8B:23:DB:60:3A:8F:12:D7
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 018CC6B94E5079BDACC4EEE20E35B7AACBF6
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/X-iCnqmNG6j885gxiyPbYDqPEtc.roa
Signing time: Mon 01 Jan 2024 20:31:22 +0000
ROA not before: Mon 01 Jan 2024 20:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61163
IP address blocks: 2a03:f87:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:50:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:4e:50:79:bd:ac:c4:ee:e2:0e:35:b7:aa:cb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jan 1 20:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fe8829ea98d1ba8fcf398318b23db603a8f12d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:66:32:e4:ff:d1:73:a3:96:7e:3d:e3:30:
24:52:31:84:f2:db:32:27:a7:5d:d7:12:a1:a0:99:
a6:92:c3:83:76:27:8a:ce:ff:1a:a0:75:2e:45:12:
f7:61:d5:43:8e:6b:3a:e4:20:10:a1:fe:ad:da:7d:
72:4c:06:48:da:67:93:82:a3:b3:1a:b9:e8:48:b5:
69:52:22:5b:7a:24:92:ba:20:ed:20:b1:7e:c6:57:
08:87:2a:7f:52:4e:4b:3e:9e:18:ab:5a:26:50:f3:
48:15:f6:15:a1:a2:d0:bc:41:e5:4d:c9:63:a2:4b:
be:62:58:da:05:0e:66:20:f6:e5:ee:86:f0:e7:7f:
03:df:15:f3:9f:43:28:bb:e7:ac:ee:93:3d:c8:8e:
e7:d9:dc:16:c7:7a:39:f3:9f:a0:d3:6c:b7:63:60:
ce:2a:10:e8:3a:ed:81:3a:34:41:c0:0c:6e:9d:a1:
02:92:54:fa:34:fd:0f:95:21:2d:27:44:7e:b8:0e:
04:db:61:89:32:42:2c:d2:90:c9:a3:37:f9:a2:36:
b3:79:43:7c:eb:ac:f7:59:19:c3:a3:0b:ef:ac:cd:
74:0a:b5:d8:d5:b0:a3:d3:9a:1e:ba:80:3e:d7:bd:
6d:26:4a:c4:d8:3c:20:0c:56:f4:f6:7d:b8:6b:2f:
6d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E8:82:9E:A9:8D:1B:A8:FC:F3:98:31:8B:23:DB:60:3A:8F:12:D7
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/X-iCnqmNG6j885gxiyPbYDqPEtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:f87:3::/48
Signature Algorithm: sha256WithRSAEncryption
56:62:a9:d2:a7:c2:1a:e1:c2:58:b6:09:3c:98:13:2b:a8:f1:
54:86:72:58:cf:f0:ed:48:7e:1e:c3:2f:54:14:21:ab:d6:9f:
15:ad:5d:07:8e:db:e9:c8:66:74:a5:4f:0a:c8:77:e5:d8:55:
70:55:95:92:ff:14:63:42:99:15:69:45:a9:29:67:89:b7:6b:
0a:1c:bc:9d:55:ae:56:82:30:a8:c6:d7:02:55:1b:2c:a5:f3:
0f:ba:51:c6:90:19:bd:c8:26:13:49:19:bf:13:48:b6:9c:fb:
a1:c9:2f:8f:54:90:f1:b6:38:55:9c:b7:d5:8f:78:1e:a7:3f:
d6:11:8a:55:33:08:a8:bc:a2:12:5a:e0:9e:1a:f1:3f:b0:b3:
d0:a9:96:0b:c2:66:d7:fe:26:fb:18:d5:ec:8c:87:c3:34:dc:
4f:2e:7e:4e:ff:03:8d:20:38:1f:74:90:2c:07:e8:67:fa:9d:
82:43:1a:1b:95:31:71:05:8a:e0:03:25:c2:0d:d1:f4:41:bc:
64:cd:a1:41:70:45:f1:be:54:1c:d0:9a:39:f6:f1:02:a1:16:
5f:aa:aa:75:5c:96:dd:1f:24:2a:33:2e:a8:a3:d6:7f:73:1b:
e0:04:ab:81:ba:27:47:e1:a6:7e:1e:30:fe:b8:d3:c2:bb:21:
cd:87:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:06:47 2025 by rpki-client