Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/4ibQDYZJzweHilnrXqoLzu5G4Xk.roa
File: 4ibQDYZJzweHilnrXqoLzu5G4Xk.roa (raw, json)
Hash identifier: pAMXra4TBazmg9HR1zewSZoKkBsjFOktlAo7Dg2JtkE=
Subject key identifier: E2:26:D0:0D:86:49:CF:07:87:8A:59:EB:5E:AA:0B:CE:EE:46:E1:79
Certificate issuer: /CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Certificate serial: 018CC4923B79F7FDCD8A908FA2BFA3C13023
Authority key identifier: 8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/4ibQDYZJzweHilnrXqoLzu5G4Xk.roa
Signing time: Mon 01 Jan 2024 10:29:26 +0000
ROA not before: Mon 01 Jan 2024 10:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50572
IP address blocks: 2001:67c:2834::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:3b:79:f7:fd:cd:8a:90:8f:a2:bf:a3:c1:30:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e9f898cf75daf6800093f2567aaf72aa986e29c
Validity
Not Before: Jan 1 10:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e226d00d8649cf07878a59eb5eaa0bceee46e179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:72:81:2e:9f:b3:c0:a7:ae:69:a0:18:47:19:
88:2b:24:2b:0f:09:b2:7f:06:f0:8f:b7:16:a5:f8:
ab:1f:14:3a:34:0e:e6:a7:62:e0:90:20:ec:51:6e:
8a:23:4c:89:6d:c7:22:bf:6b:e7:58:f2:cb:70:c6:
a7:f2:ca:e0:1e:ad:e3:5d:0c:43:5c:a4:93:6e:4e:
39:7d:4f:57:1d:19:dd:be:1c:18:6e:fe:1f:97:5e:
3b:10:f6:12:d3:9d:64:5a:7d:f5:07:dc:05:fc:0f:
45:99:e5:91:9c:06:d8:ac:7d:57:bb:1a:e8:bc:f0:
3e:89:ff:1f:57:09:94:fc:62:2e:1a:be:a0:67:1d:
4a:ac:fa:7f:c8:58:ab:69:78:2c:3f:32:d4:f2:6f:
65:d6:24:fd:00:0a:da:b8:f2:40:10:ba:34:9b:59:
8d:48:a6:e4:00:33:f5:f1:82:62:95:b0:b9:2d:30:
21:04:d6:27:5f:a3:68:89:b3:c3:8e:9b:79:72:1e:
d4:1c:aa:08:9e:d2:55:44:4c:b6:a4:25:d5:e7:00:
83:5e:95:d1:62:2a:3e:b7:fe:98:15:06:cf:7b:9b:
2a:a4:f6:9c:a9:6c:21:d0:3f:ba:45:5a:8b:48:19:
6c:46:6e:cd:58:c2:9f:b8:e0:cb:23:f8:c2:4b:5c:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:26:D0:0D:86:49:CF:07:87:8A:59:EB:5E:AA:0B:CE:EE:46:E1:79
X509v3 Authority Key Identifier:
keyid:8E:9F:89:8C:F7:5D:AF:68:00:09:3F:25:67:AA:F7:2A:A9:86:E2:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jp-JjPddr2gACT8lZ6r3KqmG4pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/4ibQDYZJzweHilnrXqoLzu5G4Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/e16361-9030-4b52-806d-b3cec9d10611/1/jp-JjPddr2gACT8lZ6r3KqmG4pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2834::/48
Signature Algorithm: sha256WithRSAEncryption
72:46:33:93:91:d4:5c:73:88:72:04:d0:88:2e:4e:16:e5:59:
39:7b:86:f0:c9:86:c1:b7:0c:fb:12:28:af:6f:20:a0:18:f6:
79:ce:0b:dc:1e:e8:92:11:f3:5d:9d:f1:f0:3e:1b:fa:40:02:
04:2c:f7:1a:02:44:4a:6e:cc:21:88:8c:c4:60:43:41:44:cf:
99:ab:07:c1:a3:48:91:69:8f:fa:db:d1:4b:b9:d4:93:9d:4a:
b2:bc:0d:5a:0c:23:26:bf:fe:2c:39:f2:fe:07:c3:95:2c:97:
29:5f:c5:33:2c:f2:47:06:32:c9:c0:f8:32:fa:1d:c4:92:f4:
8d:1f:4a:b8:88:58:07:a6:87:27:04:e2:bc:76:05:23:7a:7d:
ba:b7:06:1d:bc:ff:60:f1:7f:6e:5e:6e:85:6a:a3:fa:b6:6c:
0e:d9:a4:d9:b6:d0:f8:bd:d9:72:c6:b0:54:f2:cd:23:3d:27:
b6:0b:08:9a:79:6e:a9:59:f1:3b:f3:9f:24:de:f7:73:14:99:
31:7a:80:d4:75:db:4d:73:43:71:a5:0d:49:96:af:22:be:89:
7b:43:89:2d:d8:a1:b2:cd:9e:97:71:8d:cb:e9:5b:87:81:70:
ec:79:29:df:63:8c:8d:60:53:ba:37:d6:c0:a1:34:09:0b:7b:
77:65:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:40:51 2025 by rpki-client