Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/4cQ2bk9tyDj6eUhtsBf4eMs7a7g.roa
File: 4cQ2bk9tyDj6eUhtsBf4eMs7a7g.roa (raw, json)
Hash identifier: xv+ZYRG4qC+JEK2SHW0yfkYILGavEsxwwWzU0uPNKcw=
Subject key identifier: E1:C4:36:6E:4F:6D:C8:38:FA:79:48:6D:B0:17:F8:78:CB:3B:6B:B8
Certificate issuer: /CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Certificate serial: 018CC26D6554DE09A2C734CC476A282FB1CD
Authority key identifier: 84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/4cQ2bk9tyDj6eUhtsBf4eMs7a7g.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20640
IP address blocks: 217.173.128.0/19 maxlen: 23
2001:4b88::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:49:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:65:54:de:09:a2:c7:34:cc:47:6a:28:2f:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84470af0d89d785ba18ba617dc09e3f72c5996f3
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1c4366e4f6dc838fa79486db017f878cb3b6bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:55:d7:9b:9e:80:19:17:69:34:08:79:21:7a:
bd:8b:f2:d1:ae:96:27:72:9d:64:bb:2f:b9:cf:35:
a2:94:ad:16:f2:5d:a0:2d:15:94:35:a5:cb:e7:89:
a2:ea:bc:fe:f1:d1:82:b5:64:f9:0d:10:ae:7d:29:
43:a5:01:b4:d7:95:bb:01:71:fb:35:be:0c:93:56:
8d:c8:d8:00:40:5d:33:20:bd:ca:e6:cd:aa:1b:d3:
4a:bc:f3:53:bd:14:0e:bf:4a:98:3a:7a:ac:11:6e:
a9:87:3f:32:1f:54:4a:68:b1:f0:25:e7:1e:02:e1:
35:6b:d2:9f:21:77:e5:46:e9:e6:b0:13:7f:2b:e0:
14:67:f3:28:f6:6f:75:1f:e3:bc:6b:b2:2b:d2:44:
d8:11:58:26:b9:78:91:90:60:b2:ad:4d:db:16:d5:
f9:b9:a5:af:c6:aa:dd:41:52:c1:6a:89:9c:a3:9e:
94:69:10:01:76:aa:36:c3:cd:c6:f9:e8:3a:d1:43:
a6:ba:66:3d:2f:94:77:2f:78:ab:9d:c7:cb:7f:2c:
05:9f:65:0d:6e:eb:59:66:78:03:d5:31:5d:43:09:
49:ac:47:05:d9:32:0c:6d:81:85:6f:e0:89:a3:85:
3b:1d:9a:55:b7:06:ad:6d:f0:cf:0e:92:1c:36:b4:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C4:36:6E:4F:6D:C8:38:FA:79:48:6D:B0:17:F8:78:CB:3B:6B:B8
X509v3 Authority Key Identifier:
keyid:84:47:0A:F0:D8:9D:78:5B:A1:8B:A6:17:DC:09:E3:F7:2C:59:96:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEcK8NideFuhi6YX3Anj9yxZlvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/4cQ2bk9tyDj6eUhtsBf4eMs7a7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/660f1d-5753-4516-8002-e76e3e293e02/1/hEcK8NideFuhi6YX3Anj9yxZlvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.173.128.0/19
IPv6:
2001:4b88::/32
Signature Algorithm: sha256WithRSAEncryption
c7:44:59:32:26:99:c6:3c:c1:69:90:03:69:f7:1a:06:64:02:
c6:3d:51:96:f5:d3:fc:75:1c:a3:93:4e:a2:a5:43:ed:48:09:
fd:ee:ff:13:e1:b1:96:48:be:d9:a4:a6:2c:bc:85:a2:5c:8e:
92:db:42:b9:08:19:78:43:f4:ed:2c:e5:fb:97:98:62:42:74:
77:ae:8d:2c:a2:bf:ce:07:92:bb:1c:13:06:84:60:80:ee:99:
d0:ad:47:49:5d:18:ad:2e:49:64:45:e5:02:ef:ee:23:fd:af:
7b:fd:b1:85:32:52:73:21:64:ee:b8:b1:03:64:4d:ee:46:66:
b0:73:78:b5:2e:c9:a3:79:35:43:b2:db:b1:5c:b3:7c:c8:76:
07:7e:7c:c4:9e:e4:a4:e7:17:9c:cd:cc:e4:7f:66:a0:d1:b2:
bd:1d:10:64:83:7e:f1:da:92:99:1b:85:c3:5c:0b:ca:b4:95:
b9:3c:e3:28:eb:13:9d:b5:05:27:c1:c3:49:44:40:b0:09:bc:
cb:2e:96:71:83:c6:d3:11:fb:23:e8:50:66:03:d8:89:79:39:
e6:71:8b:2e:d2:cf:fc:2a:88:6a:2b:4a:5a:48:19:ce:46:74:
43:80:16:0e:43:ff:9b:38:b5:89:63:02:d2:b2:8f:56:35:b6:
ff:af:3f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:45:01 2025 by rpki-client