Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/fJOV8qfkfbQkBf3E5ChdkqslIzk.roa
File: fJOV8qfkfbQkBf3E5ChdkqslIzk.roa (raw, json)
Hash identifier: j6SHiBqQpndz3/IX+PJXsEyjKr/Yiy03sVgXpS8Yvy0=
Subject key identifier: 7C:93:95:F2:A7:E4:7D:B4:24:05:FD:C4:E4:28:5D:92:AB:25:23:39
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521E6DE9E5F036ACF096E9FCCF97BF7
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/fJOV8qfkfbQkBf3E5ChdkqslIzk.roa
Signing time: Thu 02 Jan 2025 03:49:26 +0000
ROA not before: Thu 02 Jan 2025 03:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210633
IP address blocks: 2a0a:280:1a00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e6:de:9e:5f:03:6a:cf:09:6e:9f:cc:f9:7b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9395f2a7e47db42405fdc4e4285d92ab252339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:67:12:d2:d3:64:eb:a9:61:45:ab:62:e7:
d2:c5:2d:a6:95:b9:df:78:df:cd:e1:bd:f5:dc:87:
f1:b6:17:1a:a3:7f:7d:6d:7c:28:75:34:69:d0:4f:
4c:c3:fb:b4:0e:82:08:42:b6:ef:cc:88:bd:a4:25:
ac:99:d5:06:bb:14:77:17:78:9f:94:32:6b:7f:f1:
7b:7a:2b:a5:14:85:04:7f:f7:43:5c:10:e0:b7:bc:
47:28:a2:c8:bd:a1:a7:cf:4c:f1:20:34:b6:ff:8f:
a1:9e:b2:ae:f3:69:35:55:a8:23:43:c5:b2:09:34:
02:c4:1b:91:86:d6:5f:97:d4:f0:26:ef:46:9f:19:
29:82:9d:7d:3a:ef:f4:a5:d8:99:26:10:9d:1f:6a:
40:0f:82:73:27:0e:cb:96:a7:5c:f3:05:e4:05:59:
44:4e:4c:4f:87:49:bc:63:9b:56:7e:90:ff:ec:b6:
da:60:27:12:a9:16:59:bc:b0:81:ad:54:f6:e9:a9:
5c:cb:84:34:3f:24:56:98:f1:f9:e5:54:d3:af:88:
4f:70:1c:ab:d6:6e:7c:bf:41:89:4f:e2:0b:9e:ca:
c1:24:ca:30:df:1c:10:78:93:f0:77:97:63:4e:fd:
79:53:1d:ad:4e:01:6b:7c:76:4e:19:a1:1b:ba:ec:
bc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:95:F2:A7:E4:7D:B4:24:05:FD:C4:E4:28:5D:92:AB:25:23:39
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/fJOV8qfkfbQkBf3E5ChdkqslIzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1a00::/40
Signature Algorithm: sha256WithRSAEncryption
75:c6:ca:71:d9:fc:94:df:9e:af:0d:75:17:d5:3c:b0:10:c2:
48:81:25:83:18:13:a6:cb:ef:06:f6:a5:12:01:b1:1c:9f:f4:
ca:d8:e6:ee:59:ed:f4:7d:0c:66:49:16:b8:63:f4:51:0d:7c:
59:fd:9c:ec:b3:3f:ca:34:0a:d6:bc:59:0e:b6:39:f0:09:3f:
25:60:10:cd:20:e1:47:f1:e5:d1:77:9d:b2:23:93:03:7b:97:
1c:b2:d1:53:e3:a1:c8:f8:5f:78:8f:63:32:15:ab:de:39:c7:
2a:ea:2f:63:4a:c0:f8:59:07:79:1d:a8:db:d5:ad:6a:11:8e:
68:b4:51:5c:e0:af:f4:22:ba:c8:22:a5:c0:50:f0:29:b1:88:
4f:aa:18:ad:de:d7:b0:f5:09:48:25:30:30:f6:c3:50:a0:8d:
f0:18:d5:1b:34:db:6a:87:9b:29:2f:a8:55:43:c3:00:ad:c3:
c1:a8:5e:74:d9:8e:b6:4c:41:8f:1f:40:39:55:35:f3:77:26:
84:d7:2b:2c:d2:67:19:54:2a:56:a2:08:b4:b4:b2:37:b2:5b:
7a:f9:9e:22:3b:90:ee:9b:5f:d8:51:a7:58:4c:9d:24:70:03:
f9:40:a4:99:c3:6e:19:32:84:b7:ac:d3:38:c2:64:03:1e:a1:
7b:3f:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:42:47 2025 by rpki-client