Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/RoePIkUVVGDMZur7OneWFbXQbRE.roa
File: RoePIkUVVGDMZur7OneWFbXQbRE.roa (raw, json)
Hash identifier: Fuo8dn+s26LkuLbc8J3UQISkH8LfmecLIh9pmX+XwHg=
Subject key identifier: 46:87:8F:22:45:15:54:60:CC:66:EA:FB:3A:77:96:15:B5:D0:6D:11
Certificate issuer: /CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Certificate serial: 019468D3B0F64B0B8B29AD17660574658CC8
Authority key identifier: 66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/RoePIkUVVGDMZur7OneWFbXQbRE.roa
Signing time: Wed 15 Jan 2025 07:18:11 +0000
ROA not before: Wed 15 Jan 2025 07:18:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20712
IP address blocks: 2001:678:c40::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Feb 2025 11:53:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:68:d3:b0:f6:4b:0b:8b:29:ad:17:66:05:74:65:8c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663a24480f04d1318bf1a70dabffa4b27ef32da2
Validity
Not Before: Jan 15 07:18:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46878f2245155460cc66eafb3a779615b5d06d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:5a:0a:6f:b1:08:23:45:48:ec:f8:d8:15:ab:
f8:77:6f:2f:90:10:32:4a:00:30:e2:c9:1a:36:19:
8d:83:23:f4:7c:17:fe:a4:3f:f5:76:da:d9:ce:31:
a5:13:0d:74:92:fa:74:0e:98:14:21:6d:68:b9:3f:
14:fc:55:df:a8:7b:54:2f:ef:10:8b:b0:54:97:9d:
12:8f:c8:d3:75:ff:fc:81:85:ac:2d:97:6f:7b:0b:
98:32:78:15:8c:f1:66:01:1f:55:18:d1:4e:5b:bc:
5a:68:79:f7:3f:83:4b:91:1b:12:e5:29:67:0e:5a:
62:45:86:44:7d:b4:78:f5:b1:c1:36:d5:cb:a8:28:
0c:16:b2:ec:23:ae:2d:ba:44:b3:c5:0a:56:0f:3a:
a8:ef:a6:c9:bd:b5:e3:83:c3:7a:90:23:64:6e:89:
65:fb:2a:7f:98:85:2e:ce:1b:5b:37:d2:4b:45:64:
60:39:aa:f6:42:fd:3a:19:e6:cf:bd:16:5d:f2:da:
69:d5:b5:e5:94:e4:df:5a:cd:fd:f3:1f:32:f9:b5:
8c:1d:ae:ec:9e:a9:70:40:11:2c:72:5d:d5:93:bc:
a3:b8:e3:1a:89:7d:39:7a:58:82:05:14:43:25:ca:
0a:3c:c5:ae:3e:1b:4c:7f:6e:20:05:e9:79:81:71:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:87:8F:22:45:15:54:60:CC:66:EA:FB:3A:77:96:15:B5:D0:6D:11
X509v3 Authority Key Identifier:
keyid:66:3A:24:48:0F:04:D1:31:8B:F1:A7:0D:AB:FF:A4:B2:7E:F3:2D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjokSA8E0TGL8acNq_-ksn7zLaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/RoePIkUVVGDMZur7OneWFbXQbRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f80a8-6b6a-4d96-bf49-775f5f74d581/1/ZjokSA8E0TGL8acNq_-ksn7zLaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c40::/48
Signature Algorithm: sha256WithRSAEncryption
4e:ff:f2:3d:eb:de:dc:78:d9:4c:bf:d5:60:03:3c:b1:61:ec:
ec:5b:05:5b:b8:2a:18:21:bd:8e:24:6f:38:f9:d8:1d:41:85:
47:2d:1f:48:3a:27:ab:ac:1c:1a:26:23:71:69:1c:e1:df:d0:
d5:ae:31:17:a1:fb:a0:c3:34:6e:1d:56:07:70:00:75:a2:36:
44:85:cd:a9:0e:53:d4:c0:00:73:ac:cf:b8:76:db:2e:a4:bd:
1f:17:48:b1:1d:d5:1f:c7:af:a7:f3:4c:68:b9:7d:89:bf:1e:
02:c6:6b:98:e0:3b:cf:76:d0:db:83:6e:f3:d7:ae:6f:38:7b:
f2:4e:bd:e2:d2:a0:c6:f2:2f:41:5f:6c:c2:7a:54:ae:a6:95:
e5:d2:32:f1:b0:9c:5c:46:0f:89:52:c8:82:12:49:de:91:a5:
d0:7b:69:07:8f:d6:6a:4e:f5:7c:85:20:7a:9c:16:22:62:fe:
ab:47:28:38:8d:82:5b:56:2c:a8:03:6a:f2:29:5c:59:f1:1e:
39:7e:6c:2a:aa:aa:af:29:35:17:fc:1e:ef:66:d3:69:3a:6b:
7e:0e:f5:16:07:06:6c:66:9e:e0:6d:88:35:44:26:f6:00:13:
8d:67:93:95:89:59:4b:a0:f1:7a:e5:1a:df:dc:93:af:3b:97:
54:e8:f8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 20:22:55 2025 by rpki-client