Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/967jHKlTGHF6p_fnIQffTEiFSY8.roa
File: 967jHKlTGHF6p_fnIQffTEiFSY8.roa (raw, json)
Hash identifier: W26pGP/iFrXvCsXem8n6fHGpte6sengtAh99pPRu1W8=
Subject key identifier: F7:AE:E3:1C:A9:53:18:71:7A:A7:F7:E7:21:07:DF:4C:48:85:49:8F
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 019082C7EC47195754FE4D19DBA7362DAD98
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/967jHKlTGHF6p_fnIQffTEiFSY8.roa
Signing time: Fri 05 Jul 2024 12:04:18 +0000
ROA not before: Fri 05 Jul 2024 12:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 2a11:e104::/32 maxlen: 48
2a11:e104:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:c7:ec:47:19:57:54:fe:4d:19:db:a7:36:2d:ad:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Jul 5 12:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7aee31ca95318717aa7f7e72107df4c4885498f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f0:e3:96:c5:0b:20:e9:7e:ea:d2:35:88:1c:
0f:c5:d7:51:4c:32:85:92:42:f2:17:84:5e:7e:38:
28:d4:f9:20:23:40:a9:8e:f9:3c:f5:1e:7c:36:37:
c3:f1:40:3e:5f:f0:0a:31:f6:63:47:b6:fc:2d:96:
79:eb:48:c6:af:ff:c4:dd:a8:33:70:79:41:e2:be:
cf:54:3c:9b:de:82:d8:0c:13:34:85:e5:ce:77:24:
35:99:b3:45:c5:a1:3b:84:54:a3:62:60:8e:ae:a7:
98:ea:23:9f:ae:a1:48:97:b7:3d:d0:94:b7:aa:6b:
c2:7e:1b:ea:81:6b:7c:0b:74:0b:ea:f4:ba:65:ba:
a3:e0:0d:3f:dd:43:5b:2e:00:07:67:cb:45:9e:7c:
93:31:b1:64:56:15:26:92:38:a3:36:23:26:7b:f2:
04:0b:c5:7b:0a:e3:42:3d:42:2b:de:9f:b2:5f:ca:
17:c2:a6:78:a1:dd:3c:56:c3:f3:4d:50:d9:3b:64:
f3:40:e8:e7:86:5e:8b:04:ce:06:6d:09:02:6f:bf:
96:85:df:cc:ec:39:90:f1:20:4e:b3:b8:59:d4:e7:
e7:12:e5:62:43:e8:86:a9:df:8a:f2:f9:1f:1a:46:
be:b5:11:27:02:b9:c9:49:b0:f8:5f:76:f1:08:2e:
63:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:E3:1C:A9:53:18:71:7A:A7:F7:E7:21:07:DF:4C:48:85:49:8F
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/967jHKlTGHF6p_fnIQffTEiFSY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:e104::/32
Signature Algorithm: sha256WithRSAEncryption
19:69:c0:90:ef:94:ef:17:43:1a:fd:b4:db:47:de:b5:84:b2:
ff:cf:84:c4:8c:59:db:56:f9:3f:15:e1:0c:36:82:df:61:34:
38:83:b3:0f:a5:f5:e4:59:80:f8:99:31:e9:62:f3:bb:bd:3a:
ad:b1:a3:2a:5a:bc:7b:9e:cb:f0:4b:96:80:9c:26:c5:a4:b8:
88:89:4c:56:f5:52:78:ca:86:55:df:1c:d9:a7:f7:c4:7e:95:
52:a9:e1:92:ac:3c:61:83:e2:ec:9e:ca:ea:18:6b:d2:91:14:
84:6b:db:be:ee:36:da:ca:b0:39:ae:4f:0c:85:61:c7:d9:a7:
f5:aa:b2:be:e6:89:d7:88:09:74:4e:e0:3e:a2:54:ab:76:ac:
aa:6e:b5:08:d2:7e:06:55:c4:9c:e4:ac:56:c0:de:e5:e3:d3:
b6:ad:c9:bc:f2:ab:43:23:f7:47:07:7e:c0:15:c5:bc:e4:64:
ae:ee:9a:5f:26:0c:2e:cd:c0:ef:8b:70:c0:4b:39:bb:29:d8:
58:4e:ad:f7:37:87:c6:2e:d7:8b:7a:c2:2f:a5:7d:a3:86:16:
44:a4:16:ee:2f:f4:b4:77:33:eb:20:fa:ae:3c:98:0a:3d:dd:
6b:93:ac:1c:70:f2:84:a4:e5:4a:a2:09:09:b9:a8:43:67:89:
65:a9:a4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:12 2025 by rpki-client