Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vAI7VsgpesjcJ_wah32WZvz3ryw.roa
File: vAI7VsgpesjcJ_wah32WZvz3ryw.roa (raw, json)
Hash identifier: uiEmnSl6UuSzD7V4GK8EE+kXvrh/RKCxSP6Unn8TS/I=
Subject key identifier: BC:02:3B:56:C8:29:7A:C8:DC:27:FC:1A:87:7D:96:66:FC:F7:AF:2C
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018CFF9011FF21124D8BE85930565F1F289B
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vAI7VsgpesjcJ_wah32WZvz3ryw.roa
Signing time: Fri 12 Jan 2024 21:24:40 +0000
ROA not before: Fri 12 Jan 2024 21:24:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216387
IP address blocks: 2a0d:6f80:587a::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ff:90:11:ff:21:12:4d:8b:e8:59:30:56:5f:1f:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 12 21:24:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc023b56c8297ac8dc27fc1a877d9666fcf7af2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:65:af:23:b9:0f:34:12:40:74:37:15:be:a1:
c8:98:82:fa:93:b9:eb:ff:4f:32:03:b9:11:0d:33:
d8:bb:29:db:09:6d:c0:c7:a1:00:4f:fd:1b:f5:9c:
94:2b:8a:45:60:a0:42:e8:3c:fc:3b:b3:f0:19:57:
ed:4b:54:e8:bf:fa:8a:e2:06:7f:65:71:0a:95:02:
f6:0d:3c:38:87:c1:23:bf:6d:55:7e:5d:bb:6b:83:
7a:d3:db:b6:30:a7:b0:aa:ce:a4:9d:7d:02:45:a8:
7e:95:71:36:46:c5:aa:c2:53:10:0f:a3:46:dd:d0:
fd:a7:59:f4:d3:ce:d8:5c:a5:a8:32:09:53:e1:9a:
dc:b2:bb:d8:5d:bb:a2:42:0b:98:57:6d:ba:35:95:
e0:a8:8c:b4:8d:db:bd:8f:a6:59:f2:e8:b4:1f:f4:
f0:fa:30:53:4c:e7:f7:bf:a7:91:11:2e:c9:08:77:
e5:70:e7:17:94:f9:b6:e5:e7:e1:25:90:70:37:2e:
a1:b1:7a:08:d9:f4:46:75:66:14:1d:0c:c4:26:09:
03:96:a7:0c:e3:e2:97:4d:db:16:b0:37:bd:05:46:
c4:53:99:63:0c:da:e1:3a:1a:5d:66:43:dc:2c:82:
fd:34:c7:eb:26:9e:41:f5:cc:df:fb:5f:8b:65:d8:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:02:3B:56:C8:29:7A:C8:DC:27:FC:1A:87:7D:96:66:FC:F7:AF:2C
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/vAI7VsgpesjcJ_wah32WZvz3ryw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:587a::/48
Signature Algorithm: sha256WithRSAEncryption
ac:a5:b4:02:6d:10:6e:08:60:7b:dd:9e:40:89:cd:03:6e:01:
83:ab:47:7a:ad:1d:66:6c:af:37:7f:d7:d5:05:91:76:c1:09:
76:f0:f7:7f:71:85:47:9c:fd:25:52:c4:f4:ac:aa:a7:f8:85:
27:14:a6:2b:bf:78:17:c8:90:b1:29:34:73:e3:e6:70:ba:a0:
fa:b9:14:f6:a2:d0:92:b1:53:85:94:23:44:65:cc:8b:91:ff:
86:c5:04:e2:b5:9c:f7:40:2a:9a:37:bd:7e:a1:d4:e3:06:84:
d8:4a:59:39:53:c5:25:63:b8:76:96:98:ca:3e:f6:6f:67:e1:
4c:bd:fb:5c:33:f6:f4:ce:58:12:e5:8f:df:8d:ad:58:6e:7c:
90:f7:4c:38:29:d4:14:d2:e9:4c:3b:99:dd:2e:24:6b:de:49:
cd:4c:96:d2:ea:38:ff:70:ac:d5:a6:7b:ef:be:60:72:6e:5b:
d8:53:74:74:04:60:6d:27:75:7e:33:18:25:8c:a0:42:df:28:
1c:ff:a6:a6:9a:e4:06:20:6f:2d:f6:f3:55:a6:3a:f6:d2:8d:
73:3d:5a:f0:90:f8:d4:64:cc:6a:c0:14:5f:da:af:14:76:cb:
88:c9:3c:4f:9c:80:47:44:3b:b7:40:99:3d:a3:b4:70:f4:25:
ab:9a:df:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:23:25 2025 by rpki-client