Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/rWdIGHGtVod4w7_ObXpmefMCpTU.roa
File: rWdIGHGtVod4w7_ObXpmefMCpTU.roa (raw, json)
Hash identifier: RqN0DtauDjZ+RZFGKZRqy9F8DsRv5yAbnPsQy57WSDU=
Subject key identifier: AD:67:48:18:71:AD:56:87:78:C3:BF:CE:6D:7A:66:79:F3:02:A5:35
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 01941C11D872D9587E86F7292417D6277C21
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/rWdIGHGtVod4w7_ObXpmefMCpTU.roa
Signing time: Tue 31 Dec 2024 09:35:18 +0000
ROA not before: Tue 31 Dec 2024 09:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152911
IP address blocks: 2a01:ffc7:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1c:11:d8:72:d9:58:7e:86:f7:29:24:17:d6:27:7c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Dec 31 09:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad67481871ad568778c3bfce6d7a6679f302a535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:bd:73:04:26:22:20:4e:fd:e5:dd:75:a3:
12:eb:dd:04:d1:41:c9:01:99:f8:36:bf:a3:a6:32:
e8:37:67:f3:9d:d4:fa:6f:cd:78:64:e7:5b:28:26:
77:88:85:18:dd:61:91:b2:1a:cd:d1:ad:5f:d9:99:
de:e6:2c:a5:3e:cd:67:85:c9:a5:4e:dd:d4:5e:b7:
22:13:58:be:d0:f8:75:16:ca:3c:29:8f:98:05:9b:
b0:0c:56:75:75:d0:ca:32:1a:43:b5:6b:1d:92:7c:
b7:d8:c7:44:3f:93:ee:ae:38:b8:6b:c8:7b:bb:bc:
7e:a1:21:1a:f1:c9:46:6f:f3:cc:02:63:45:e9:76:
92:1e:26:7a:62:e2:2a:b0:77:e1:69:fa:60:83:48:
ed:a4:0d:e0:67:aa:81:8d:fb:39:e2:07:b5:be:42:
a9:aa:db:e5:a6:95:5b:57:46:fc:5f:1b:f7:57:3d:
3c:3f:f9:d7:cb:c9:9d:5f:0a:4e:a5:ec:cc:76:4f:
3d:4b:18:eb:61:8b:60:0a:fe:19:51:c8:ff:a1:13:
1e:8e:42:61:31:5b:f6:90:06:26:80:df:77:9e:a5:
52:bb:45:14:a1:d0:42:97:36:3e:06:5f:6d:97:26:
f1:82:ed:41:ca:4f:83:37:bf:3b:70:cf:ed:c2:bf:
22:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:67:48:18:71:AD:56:87:78:C3:BF:CE:6D:7A:66:79:F3:02:A5:35
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/rWdIGHGtVod4w7_ObXpmefMCpTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc7:100::/40
Signature Algorithm: sha256WithRSAEncryption
ba:84:fc:4a:5b:ee:a0:92:3b:f4:af:91:79:4f:44:81:82:fd:
31:9e:2a:de:15:a8:c5:a7:fa:78:2a:46:f7:6f:4d:6e:4e:cf:
68:d0:8c:93:cf:e0:63:7a:91:90:fe:d8:b6:7a:96:60:7d:0a:
0e:a1:3e:d7:c1:fc:96:fd:bf:65:56:25:b5:3f:c0:d0:23:09:
c8:09:d3:bb:cf:9b:4b:f5:82:5f:59:bf:b3:63:d4:5c:a9:13:
ab:8e:54:88:d7:74:7a:85:dc:2a:bb:2c:73:c9:81:fb:8f:2d:
53:6a:79:ab:2f:7b:0d:b3:28:1b:ea:4b:cd:c0:af:0f:02:07:
62:cc:8b:40:75:26:76:41:51:72:6b:a2:ff:04:97:ed:d9:d7:
b1:45:d7:12:86:73:43:cd:ee:55:90:bd:dd:a4:60:7e:a7:2f:
f6:4a:c0:92:2d:2e:e8:c9:41:36:84:39:84:84:a9:01:02:09:
d7:22:fb:b9:cd:0c:c3:11:66:04:15:bb:f6:0f:fe:df:0f:98:
fa:ae:82:a9:6f:25:60:9d:42:4b:cb:7a:22:d1:b2:b0:bd:ac:
8c:69:cb:e5:e3:1f:74:6e:d2:61:4c:59:23:8d:02:d2:ca:c7:
0b:8a:db:20:17:28:ae:be:cb:99:17:21:93:ec:8c:a1:a4:da:
bd:93:b3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:15:24 2025 by rpki-client