Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/l3ir2ETCd5qypgAIZn8OjY-Wiwc.roa
File: l3ir2ETCd5qypgAIZn8OjY-Wiwc.roa (raw, json)
Hash identifier: GYxsrJgHBtjew8r6WhbGLzg5XtgT4WOmTf1X33nQPyE=
Subject key identifier: 97:78:AB:D8:44:C2:77:9A:B2:A6:00:08:66:7F:0E:8D:8F:96:8B:07
Certificate issuer: /CN=8fe692658aef093d9e3603132b965bf1be075d37
Certificate serial: 0192AF60431AA1B578DA93786D11413FB0EC
Authority key identifier: 8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/l3ir2ETCd5qypgAIZn8OjY-Wiwc.roa
Signing time: Mon 21 Oct 2024 13:59:34 +0000
ROA not before: Mon 21 Oct 2024 13:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213997
IP address blocks: 2001:67c:f48::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:af:60:43:1a:a1:b5:78:da:93:78:6d:11:41:3f:b0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe692658aef093d9e3603132b965bf1be075d37
Validity
Not Before: Oct 21 13:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9778abd844c2779ab2a60008667f0e8d8f968b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:37:65:8d:f2:d8:a8:e3:b0:04:11:5c:c9:64:
57:26:57:68:8e:f7:b1:89:22:71:64:42:2b:71:9f:
64:3b:4e:4c:2f:9f:15:03:56:5a:56:6c:56:ab:60:
08:0a:c4:11:76:0a:23:ad:79:25:52:3c:c2:b2:bf:
c0:22:ba:ab:c0:cc:5d:b5:75:37:94:0f:3b:a5:72:
39:e3:fb:9b:b0:bd:ae:68:45:e4:ec:08:5e:c6:73:
6e:71:bb:1d:10:f5:a8:b4:66:1c:c0:e9:6c:94:a6:
b5:fd:a0:d7:c8:41:e9:e2:b2:4c:4a:1c:65:08:fd:
a4:aa:59:48:5d:f9:6f:a1:bd:5d:ca:f6:b7:70:dd:
f7:ce:7d:b1:b4:66:0e:a7:d7:7b:10:f2:f7:d4:b2:
7d:cc:74:f7:b3:5c:e2:5f:d6:48:8f:10:ed:6f:9f:
67:71:b0:9b:bb:79:04:9a:73:26:dc:82:61:52:78:
8c:f0:84:ca:81:ac:99:46:7a:5f:56:14:8f:17:cd:
d1:43:c3:29:e8:25:6a:6c:fa:cb:64:43:78:c7:8a:
1a:f2:6b:83:ed:5e:52:7b:74:6b:ba:7e:02:a9:a1:
0d:ed:66:62:50:ad:00:5b:03:fa:98:84:7e:c2:37:
0e:fb:90:09:91:4a:61:d0:8a:8f:ea:b6:af:36:3c:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:78:AB:D8:44:C2:77:9A:B2:A6:00:08:66:7F:0E:8D:8F:96:8B:07
X509v3 Authority Key Identifier:
keyid:8F:E6:92:65:8A:EF:09:3D:9E:36:03:13:2B:96:5B:F1:BE:07:5D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/l3ir2ETCd5qypgAIZn8OjY-Wiwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0a9b31-7ed7-48ca-a304-aee567173615/1/j-aSZYrvCT2eNgMTK5Zb8b4HXTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f48::/48
Signature Algorithm: sha256WithRSAEncryption
c4:22:84:2e:1c:b6:15:2e:e1:35:e6:ab:d4:2e:42:a9:29:4c:
6b:74:78:01:d5:80:32:36:98:c5:6c:52:3b:92:09:1d:13:b5:
77:58:2e:88:3d:e3:08:d1:11:0d:4d:3c:86:f9:6d:48:50:c4:
36:fb:73:3f:2c:46:8f:d0:2b:56:13:16:e5:83:bc:9f:d0:29:
17:17:c6:05:bf:d9:30:fe:2b:0f:c1:a4:b4:c9:bb:ee:8d:f2:
c2:ae:e2:2b:7b:d2:74:bc:9f:7f:dd:45:3e:01:2a:97:cc:99:
69:95:b1:18:9d:ce:14:66:91:da:cb:45:25:7d:19:08:ff:b1:
32:fc:67:2e:92:e2:16:d5:4e:ab:58:33:1f:1e:e8:7d:d6:ef:
ec:65:65:27:bc:f1:b8:97:d0:ca:9f:6d:06:d9:71:2e:a7:7d:
6e:51:5e:89:0e:39:1f:72:72:f1:2c:29:20:fe:73:02:b4:ce:
26:56:dd:b4:55:71:1c:a7:96:d8:5f:f4:fa:61:18:e1:16:c9:
fa:70:4a:69:26:4f:57:8a:bc:05:af:a6:4f:cc:2b:bf:22:46:
07:5e:db:4b:70:0e:75:29:f9:df:9e:fa:6d:50:ea:d1:97:1d:
e0:90:1f:2f:85:cb:61:74:f1:80:b1:b4:c1:25:fc:6f:21:b1:
36:b7:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:43 2025 by rpki-client