Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/R_qUgDBXrlRuKCy8zAJPcbrlRlA.roa
File: R_qUgDBXrlRuKCy8zAJPcbrlRlA.roa (raw, json)
Hash identifier: AFqPR937OMZQHEfmVQRKn438pogzV5nRHe2ZhYfzCrQ=
Subject key identifier: 47:FA:94:80:30:57:AE:54:6E:28:2C:BC:CC:02:4F:71:BA:E5:46:50
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E66AFD1F82E6F0F8F15019B85E5B
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/R_qUgDBXrlRuKCy8zAJPcbrlRlA.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209025
IP address blocks: 2a0a:280:2b00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e6:6a:fd:1f:82:e6:f0:f8:f1:50:19:b8:5e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47fa94803057ae546e282cbccc024f71bae54650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d0:9f:0e:4c:c0:dd:b5:f3:2c:00:ee:1e:7e:
89:a3:fd:e3:e2:51:31:cf:ee:49:82:48:38:97:50:
74:25:5a:3f:2b:cb:63:40:3b:a4:d1:38:07:68:41:
82:eb:c1:e2:3a:ad:90:4a:5c:1b:4e:3b:78:e2:27:
29:d1:c0:ad:57:8d:fa:a6:f2:f7:be:38:cc:32:d7:
8d:32:8c:0d:b7:c9:b3:ea:fc:a7:c9:a4:38:63:34:
df:43:1c:fb:e8:3e:fa:a5:4b:ba:2d:90:92:7b:6d:
df:55:ad:84:7d:36:20:37:28:e4:71:12:93:c4:4c:
a2:93:70:34:82:b7:ac:81:67:c2:29:16:25:f6:03:
29:bc:dd:cb:6a:27:97:78:78:94:12:21:c1:f9:c4:
53:9a:e8:a8:0d:b4:00:20:e3:be:2d:43:7e:4f:d7:
e0:b9:74:51:1e:a9:51:7c:c0:55:83:d1:0d:ed:cf:
8b:04:33:4f:46:00:37:b0:9d:91:df:52:98:08:51:
3d:c7:96:28:12:78:0a:1c:1f:76:86:d5:7f:cc:e2:
f3:1c:7e:96:61:93:0f:14:08:83:69:bb:66:ff:d4:
5c:5a:4c:e7:1a:b9:6d:6c:cb:0f:a3:5d:2a:1a:fd:
40:5b:be:50:42:e7:12:37:b1:38:d3:52:fd:22:0d:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:94:80:30:57:AE:54:6E:28:2C:BC:CC:02:4F:71:BA:E5:46:50
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/R_qUgDBXrlRuKCy8zAJPcbrlRlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2b00::/40
Signature Algorithm: sha256WithRSAEncryption
41:cd:ef:d4:82:50:34:62:92:35:5f:d9:73:5b:f1:22:88:46:
1e:af:69:6d:4b:cc:91:47:83:72:77:3d:61:1f:e5:31:88:be:
5a:47:98:fb:0c:38:03:83:ae:3a:3d:e1:75:68:66:5b:55:29:
20:ec:18:08:33:2f:9c:c4:df:ca:c7:d9:9c:af:23:f5:c0:b2:
de:5a:35:49:43:d5:84:71:ed:3a:64:2e:40:31:25:d3:09:94:
2a:67:be:7c:d5:28:c2:a4:86:7f:e2:be:71:77:8a:40:9a:f9:
00:38:d6:f4:af:3a:6c:05:78:f4:99:21:38:62:b6:2f:b2:fd:
e4:a1:1e:9a:91:0c:0c:a4:d1:f6:76:4d:29:ef:b5:2f:60:dd:
b5:78:da:b4:6c:94:52:d3:33:b2:b6:c5:b7:cc:5f:65:e9:99:
e6:f5:57:fc:40:91:18:6e:f3:06:b8:a2:be:0b:b2:a3:59:10:
4f:c4:ab:4b:4b:ad:80:52:5e:b6:2d:02:00:ff:01:66:7c:04:
67:0e:e2:15:42:1a:2f:4b:7a:a9:07:5e:13:5f:e5:ac:c3:bb:
a8:49:dd:cb:5d:64:a7:3c:bc:9a:f1:2b:75:fc:55:bc:1d:66:
61:5f:fc:26:89:15:74:86:4a:84:ff:e6:89:56:0e:5e:54:2b:
29:9d:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:28:27 2025 by rpki-client