Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ohEhWZeM5ipCdzdIAyZjO84tBXs.roa
File: ohEhWZeM5ipCdzdIAyZjO84tBXs.roa (raw, json)
Hash identifier: I3ej3sloqeUpSOuP5z3N57MY9/cai1QhDgMbNOq+RTY=
Subject key identifier: A2:11:21:59:97:8C:E6:2A:42:77:37:48:03:26:63:3B:CE:2D:05:7B
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 018CCA99EE478AB94176E98483F3F44CB682
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ohEhWZeM5ipCdzdIAyZjO84tBXs.roa
Signing time: Tue 02 Jan 2024 14:35:34 +0000
ROA not before: Tue 02 Jan 2024 14:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208328
IP address blocks: 2a0e:800:fff0::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:ee:47:8a:b9:41:76:e9:84:83:f3:f4:4c:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Jan 2 14:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2112159978ce62a427737480326633bce2d057b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:41:d2:30:9d:f3:73:44:e0:5c:bc:41:b2:e5:
77:85:33:34:d2:42:02:d8:01:0a:d4:19:18:99:b5:
aa:de:be:cc:7c:85:68:9b:85:dc:ee:aa:1d:7a:1b:
65:6f:da:08:bd:be:df:25:f2:18:b4:63:6d:6d:a8:
86:16:22:35:6a:58:3d:0f:22:d0:aa:f8:a5:05:05:
85:a8:54:61:53:7a:32:12:6f:36:b3:d7:6f:8d:a5:
9b:3a:c1:6c:5d:dc:93:68:c1:da:f9:63:13:81:65:
d3:db:78:6a:91:44:d3:61:44:6a:8f:48:b9:45:ab:
db:d5:b3:35:21:38:43:ab:12:1c:a7:1c:41:7f:7a:
a1:10:c6:7f:0a:ee:21:cf:2c:b2:b4:d6:5d:ca:2e:
b9:ef:7a:fd:ae:e7:b3:a1:a8:43:9d:18:c9:af:6d:
9c:f6:fc:6d:18:4d:98:fc:28:26:ec:7f:a7:1b:f7:
15:cb:c4:2b:6c:38:6f:32:14:ec:a4:dc:2a:d9:2e:
1c:16:50:3b:87:23:8c:7b:2e:03:b8:52:e6:ed:ef:
34:0a:a5:1e:38:55:20:d5:b9:d8:54:ce:2f:78:ce:
ec:f8:8a:72:66:e3:b5:33:bc:48:b1:7a:27:7e:3c:
ae:d8:9e:06:7d:e0:04:68:10:d2:aa:0b:31:65:68:
56:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:21:59:97:8C:E6:2A:42:77:37:48:03:26:63:3B:CE:2D:05:7B
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/ohEhWZeM5ipCdzdIAyZjO84tBXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:800:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
06:7d:39:88:a9:69:e8:61:77:1d:fa:e3:b7:a3:1e:b5:52:f8:
53:b1:21:6a:05:20:91:31:e5:7d:e0:50:74:f2:ba:24:92:20:
19:3c:1c:bd:49:60:76:f4:c6:ad:e0:7f:ce:51:49:b7:fe:41:
48:6d:b3:99:60:c2:9e:5e:a7:3b:bc:a2:9d:71:35:22:8e:3f:
2c:af:61:39:33:ca:b8:bc:8a:41:29:de:86:23:cd:f4:4d:dc:
e7:35:60:3c:0c:ed:ba:a3:02:57:37:de:ce:3a:12:50:5d:c7:
b5:95:55:94:56:1d:6a:01:73:2d:97:d7:b8:ba:bf:0d:d2:1a:
a1:f4:30:74:f8:9c:8d:42:b9:c7:27:a8:6b:3a:74:bc:3b:b8:
a3:74:f7:b1:9f:bf:ff:46:72:7f:de:e5:7a:67:6a:01:82:3f:
7b:4b:93:a4:2c:ec:92:ab:62:44:76:f6:ef:86:5f:e6:12:eb:
ad:7a:29:6b:07:ff:61:47:43:59:a3:b6:40:4d:ab:4a:84:e2:
95:16:b2:81:bf:c2:65:e8:a3:ff:87:68:6f:55:8c:9d:c1:cf:
32:d5:0a:de:04:b9:8d:19:06:2a:a6:3a:5e:41:b0:40:34:7a:
02:18:22:0a:3c:f0:8a:6a:9b:e7:c4:03:4d:f0:ec:41:ee:33:
dd:2e:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:58 2025 by rpki-client