Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/P8Oh8t_IxOJ7P3XcIZBNMT7z0tk.roa
File: P8Oh8t_IxOJ7P3XcIZBNMT7z0tk.roa (raw, json)
Hash identifier: 72cXaOUmg2zX+HlVwP3cOws+HVIHDdQ09kbrqNSc1Sc=
Subject key identifier: 3F:C3:A1:F2:DF:C8:C4:E2:7B:3F:75:DC:21:90:4D:31:3E:F3:D2:D9
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0191E1F1D89EF6ECD034B3B38AC5FCF6C904
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/P8Oh8t_IxOJ7P3XcIZBNMT7z0tk.roa
Signing time: Wed 11 Sep 2024 16:36:48 +0000
ROA not before: Wed 11 Sep 2024 16:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c240::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 29 Sep 2024 20:16:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:f1:d8:9e:f6:ec:d0:34:b3:b3:8a:c5:fc:f6:c9:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 11 16:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fc3a1f2dfc8c4e27b3f75dc21904d313ef3d2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:90:da:50:85:14:05:4d:2e:37:47:3f:9d:97:
b9:23:2a:c8:f8:27:9c:31:17:f4:37:40:93:40:f4:
e8:36:2b:e4:c7:ad:0e:77:c1:c4:95:e4:04:54:3b:
5c:ed:58:05:b6:91:14:46:96:fb:4f:39:11:a1:0e:
bb:3d:30:9e:e0:2b:29:c9:50:17:75:ba:7a:c3:ba:
ff:24:12:11:c4:d4:06:2a:ff:81:00:30:8a:f8:61:
b7:ef:ac:3f:09:23:a2:5b:f7:22:78:87:fe:62:89:
7f:e0:ee:d4:d1:0d:5c:7f:c6:48:e9:09:2a:ee:61:
ba:ad:9b:c1:93:ce:c4:ee:c6:83:c9:d5:b8:67:f6:
ab:e2:ec:20:70:e9:0d:5d:36:e5:fd:03:90:29:17:
81:e0:91:af:fc:96:62:4c:36:a7:29:ba:47:ca:ca:
97:58:81:dc:f8:60:62:5d:a9:f4:18:7c:7b:88:f6:
dc:53:72:c1:a3:5c:f5:28:04:db:ce:bb:e7:78:63:
f3:d4:0d:ea:c7:e4:74:63:b6:de:3c:0a:bf:10:02:
24:e6:08:67:80:55:10:e6:e1:7c:3c:aa:de:43:c3:
d7:a3:3a:de:bb:1a:ab:87:3b:96:c6:0c:b9:36:34:
2c:bb:fc:aa:db:20:17:30:72:aa:1e:ad:fe:01:4a:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C3:A1:F2:DF:C8:C4:E2:7B:3F:75:DC:21:90:4D:31:3E:F3:D2:D9
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/P8Oh8t_IxOJ7P3XcIZBNMT7z0tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a13:b9c0::/29
2a13:bb40::/29
2a13:c240::/29
2a14:1100::/29
Signature Algorithm: sha256WithRSAEncryption
90:26:4d:90:b9:a3:cf:2c:8c:64:22:33:42:a7:c0:fa:24:46:
00:e3:9a:4a:33:75:0c:86:25:16:3a:c3:0b:7b:e1:d4:5a:29:
f7:d3:60:34:76:4e:ec:f1:1d:cb:a5:ad:d7:7f:77:0b:81:e7:
be:80:c3:1d:ab:28:8f:ae:37:e0:32:a1:91:72:9c:18:e6:27:
79:f0:65:85:52:85:72:ad:76:ac:f6:55:85:02:b6:e2:f1:c4:
e8:3a:42:88:a9:72:34:a6:f3:d2:f2:b4:53:6e:be:5d:16:58:
59:d2:f2:3f:20:ae:04:51:ed:a6:56:82:d9:77:44:ae:e5:b9:
5e:dd:bc:51:e7:23:4f:0b:e5:e0:8b:26:d6:9b:84:14:e3:03:
61:36:32:e5:80:ed:cb:33:47:da:9e:f5:c6:d5:51:54:bf:d8:
b9:fa:39:d4:9b:8b:a1:9a:ea:27:ec:88:9e:00:f3:13:0a:f7:
e9:5f:79:eb:a4:a2:17:66:21:6d:65:2c:6a:33:31:70:8a:77:
fc:fa:fb:c6:47:28:76:84:a8:38:91:d5:af:6e:e8:45:e7:ef:
d9:8f:71:c1:95:f4:42:0a:22:ce:c7:89:bb:19:d8:97:61:5c:
d1:8e:3d:c1:e8:0f:fb:a1:8f:55:4b:8e:e1:94:7a:34:5a:d1:
b0:f6:c2:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:55:38 2025 by rpki-client