Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/hSz3H9J3YoUwwG1Kyb2Z6cFJ6oI.roa
File: hSz3H9J3YoUwwG1Kyb2Z6cFJ6oI.roa (raw, json)
Hash identifier: xWWYwNBt1Gvrd4jQPIKDBfXxI0d9nLCTturg36+QTI8=
Subject key identifier: 85:2C:F7:1F:D2:77:62:85:30:C0:6D:4A:C9:BD:99:E9:C1:49:EA:82
Certificate issuer: /CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Certificate serial: 018CC56E2CD0C6A4389B5B862B93FE6ED079
Authority key identifier: 1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/hSz3H9J3YoUwwG1Kyb2Z6cFJ6oI.roa
Signing time: Mon 01 Jan 2024 14:29:41 +0000
ROA not before: Mon 01 Jan 2024 14:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213103
IP address blocks: 2001:678:800::/48 maxlen: 48
2001:678:fd0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:2c:d0:c6:a4:38:9b:5b:86:2b:93:fe:6e:d0:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a88af93845bd25386452dbdfaa0216e13caf8c7
Validity
Not Before: Jan 1 14:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=852cf71fd277628530c06d4ac9bd99e9c149ea82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7c:99:07:b0:3b:e8:da:dd:15:63:1d:01:7b:
f7:94:00:06:e2:54:ee:be:0d:3e:81:d0:99:44:b6:
5b:86:45:ca:ce:ca:e3:99:ad:ad:99:d4:4f:74:55:
03:be:47:48:c2:39:ab:3b:59:fa:e5:c2:67:6e:f3:
14:81:03:d1:a7:51:61:62:65:b8:f2:6f:e9:11:89:
99:3c:79:61:91:15:27:18:8c:85:55:83:68:7b:51:
0d:74:d7:3d:5d:1f:b9:a2:16:06:30:77:cc:6d:b8:
60:59:f4:4c:19:33:72:d4:73:c5:72:a2:9a:6a:81:
88:7d:d7:ab:e0:13:d8:0a:c9:3a:27:9e:85:6e:1c:
43:10:a2:66:64:b5:30:14:fd:ec:0c:c9:b1:51:38:
72:65:7d:03:df:52:83:91:23:cf:66:00:20:d3:c0:
ac:e1:a2:18:93:5c:77:74:80:03:ed:1e:69:5e:f0:
8a:1b:0b:2d:d5:a9:74:af:2a:24:03:cb:88:9d:ae:
05:f4:4a:39:19:48:93:8b:31:0a:7c:3f:b0:1c:66:
d3:ec:ae:e4:52:08:b0:85:dc:7b:20:1a:53:5f:44:
ec:89:a2:91:6a:22:c7:4b:49:d2:40:4e:eb:b1:2f:
19:63:7b:d4:d8:45:a8:06:e1:be:11:a6:a9:25:25:
2b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:F7:1F:D2:77:62:85:30:C0:6D:4A:C9:BD:99:E9:C1:49:EA:82
X509v3 Authority Key Identifier:
keyid:1A:88:AF:93:84:5B:D2:53:86:45:2D:BD:FA:A0:21:6E:13:CA:F8:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Goivk4Rb0lOGRS29-qAhbhPK-Mc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/hSz3H9J3YoUwwG1Kyb2Z6cFJ6oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4c7b8c-f131-4996-b8f5-5f9f0ac0fae7/1/Goivk4Rb0lOGRS29-qAhbhPK-Mc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:800::/48
2001:678:fd0::/48
Signature Algorithm: sha256WithRSAEncryption
1c:d6:46:d7:26:e6:50:d0:7c:74:30:65:9f:e8:37:97:02:bd:
1d:48:67:92:35:1b:e6:c2:f0:c7:ad:fe:a9:2d:43:ff:5a:19:
32:23:05:de:a3:af:81:5f:85:db:3b:3b:e5:6e:bf:d5:34:fe:
14:d5:93:2d:54:89:96:72:de:93:15:dc:f0:58:a8:49:27:ae:
28:fc:76:9d:7c:e0:aa:dd:e2:4c:c2:7f:7d:b2:6e:28:a8:aa:
ba:be:ae:0f:88:83:96:54:13:7f:77:e8:8e:89:dc:d6:51:40:
08:71:ae:ac:d9:e8:2e:07:86:9c:ad:89:19:03:90:c1:45:a3:
4e:03:b5:2c:b3:c7:0d:c3:14:90:f7:b3:4c:53:c0:5f:fc:3b:
40:3f:05:e1:9b:4f:d3:f8:36:af:6a:07:33:75:4b:81:66:db:
3e:66:60:83:6d:8d:c8:13:86:9e:19:c0:62:50:67:27:cf:ee:
a7:e1:3b:92:cd:86:b6:9d:83:f4:52:d0:8a:9b:10:e9:85:a3:
79:da:96:f4:ab:57:35:56:aa:f3:fe:06:0d:ac:5e:f9:77:04:
46:da:2b:09:f5:21:06:44:7e:0f:56:96:ba:ea:d6:22:bb:47:
f0:4d:e9:bb:75:08:2d:f1:20:b5:fe:6e:48:4d:a9:a2:05:76:
3e:a4:3d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:24 2025 by rpki-client