Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/kPF5JI8dH_ajNoR84blKpL4epy4.roa
File: kPF5JI8dH_ajNoR84blKpL4epy4.roa (raw, json)
Hash identifier: rhikJrdHKRgteQfRbxZDZ5hIW2wko+7NLmQ4/8W731I=
Subject key identifier: 90:F1:79:24:8F:1D:1F:F6:A3:36:84:7C:E1:B9:4A:A4:BE:1E:A7:2E
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 01942521DFAA4DE1D9F0E0C2B8087AAE6520
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/kPF5JI8dH_ajNoR84blKpL4epy4.roa
Signing time: Thu 02 Jan 2025 03:49:24 +0000
ROA not before: Thu 02 Jan 2025 03:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200676
IP address blocks: 2a0a:280:1c00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 09:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:df:aa:4d:e1:d9:f0:e0:c2:b8:08:7a:ae:65:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 03:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=90f179248f1d1ff6a336847ce1b94aa4be1ea72e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:e2:31:f0:27:b4:e3:2b:32:29:0f:ce:5a:
84:fb:31:5d:81:f7:3b:ed:22:75:16:19:97:ae:10:
e3:39:0c:df:14:dc:30:ee:68:f5:9f:19:73:55:41:
e7:2a:43:4b:55:eb:27:cd:bc:ad:88:26:59:de:8a:
5c:43:0a:78:59:2a:87:b0:c2:e6:a4:e7:f8:46:42:
55:c1:00:6a:e7:46:73:67:12:a4:74:60:d9:4a:6f:
a4:ec:71:b3:47:29:8c:55:bb:82:1c:c9:aa:f0:a0:
c4:ab:7b:ad:2a:56:b0:4f:19:b2:ba:b5:97:43:4c:
46:bf:7e:aa:72:3b:26:5a:71:26:f9:16:97:02:27:
28:91:11:f5:97:78:2f:2e:d2:fc:cb:54:00:42:c3:
c2:07:ac:c4:5a:5b:fa:95:14:c8:ef:11:a2:ee:00:
d6:22:21:29:5f:e4:67:65:84:28:0e:a3:74:88:4c:
17:4e:01:42:da:99:4d:ce:a9:6f:f4:26:97:2f:82:
a0:4f:ee:b8:c1:f9:6f:64:a4:a2:f9:fc:d1:3b:84:
6c:0c:01:66:8f:7f:82:54:45:e5:ca:ae:dd:ba:70:
bb:6b:ea:a8:80:d8:e1:72:80:c2:73:62:6f:8a:c8:
7a:d9:92:27:da:66:91:4d:10:fd:ff:f9:2f:ae:bc:
79:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F1:79:24:8F:1D:1F:F6:A3:36:84:7C:E1:B9:4A:A4:BE:1E:A7:2E
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/kPF5JI8dH_ajNoR84blKpL4epy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1c00::/40
Signature Algorithm: sha256WithRSAEncryption
27:f1:34:76:51:fa:61:a6:a2:1f:20:0b:f8:e3:f0:e3:b4:13:
a2:86:7f:df:3f:16:b6:65:d9:f2:2e:b8:35:70:b5:41:a8:00:
84:69:87:62:c2:79:2e:b7:7a:b0:8c:19:65:29:55:a1:11:65:
d3:87:b1:88:e7:6f:3f:88:2d:bd:e5:d1:87:d2:33:37:98:cd:
f7:4b:95:14:7f:35:8f:e6:4d:23:62:a2:86:3d:75:cf:7f:95:
5b:87:1a:ed:85:e4:59:25:aa:6d:ca:2e:be:6d:17:c0:4a:70:
81:b7:85:6e:3e:b4:c6:71:9b:b5:cf:16:dd:17:cd:7c:e7:12:
8d:a1:f4:c1:ce:38:ba:df:56:1e:57:65:3d:b4:ea:21:27:9f:
3a:c6:16:66:94:57:25:04:f8:ca:50:8d:79:27:49:04:2c:29:
fb:5d:96:08:05:85:b4:49:4d:a3:9d:e0:31:25:18:54:c1:6c:
53:fa:f0:2f:28:b6:96:fd:8f:a5:b5:25:78:1f:3d:eb:c2:3e:
c3:06:01:8e:ef:1a:28:59:8d:5f:9f:2d:bf:4d:d7:ef:10:ff:
86:7a:d2:f0:35:22:a8:8f:70:43:6a:bd:16:3b:8b:95:02:13:
24:5a:cf:b1:77:a0:64:e2:c5:40:6b:a5:ed:14:6a:a0:92:93:
3e:44:85:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:41:31 2025 by rpki-client