Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jd1soXrXnr2VV0XYU018Ty5XjR4.roa
File: jd1soXrXnr2VV0XYU018Ty5XjR4.roa (raw, json)
Hash identifier: cQaeIbq3K+81hTSDCqiGPTwtn5/NkhMm9J8PMH4ZNJk=
Subject key identifier: 8D:DD:6C:A1:7A:D7:9E:BD:95:57:45:D8:53:4D:7C:4F:2E:57:8D:1E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 018CC801675A6275283818B73AFC67D66026
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jd1soXrXnr2VV0XYU018Ty5XjR4.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208063
IP address blocks: 2a0c:b641:460::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 27 Aug 2024 13:12:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:67:5a:62:75:28:38:18:b7:3a:fc:67:d6:60:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ddd6ca17ad79ebd955745d8534d7c4f2e578d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:d7:a6:a5:65:c4:7d:65:59:f5:0d:a1:57:
ee:e3:69:16:b8:b7:ca:8a:f5:60:93:d7:e0:5d:1d:
60:1a:d8:5a:80:62:18:a7:b8:61:ad:57:56:20:62:
5e:02:9b:aa:ae:3f:78:54:0e:1c:ea:54:1e:59:2b:
57:d5:97:9b:78:e4:64:65:1a:e7:33:74:0d:e6:97:
34:38:c7:90:2d:f2:ec:fc:89:09:3a:e5:67:5a:f9:
52:6b:5e:df:eb:aa:fb:c1:62:38:6e:6e:81:19:c2:
08:ff:30:08:a1:c6:ac:7b:a9:b8:7c:8a:3c:ee:12:
36:1f:20:21:fb:56:cc:f4:93:7a:61:58:d6:b6:8f:
01:bf:b4:eb:77:1d:83:7b:b7:a9:39:f0:31:42:ac:
0d:bd:ef:0a:ec:8b:6b:bf:04:b1:9c:1a:e8:95:67:
f0:de:7f:6c:f7:3e:df:8b:09:24:20:6e:32:ac:5b:
4e:e5:9d:3f:28:4d:14:74:f5:8d:cc:5f:ae:33:8b:
0b:19:5a:c4:14:dd:12:59:07:d7:83:91:b7:f5:ba:
80:c3:9f:73:1d:fd:21:eb:3f:75:56:1f:d7:d0:20:
88:ad:ef:91:7d:95:40:44:06:f0:57:bd:ed:ec:3d:
a4:64:cb:38:e8:3b:79:d1:f2:70:25:4d:fb:57:be:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:DD:6C:A1:7A:D7:9E:BD:95:57:45:D8:53:4D:7C:4F:2E:57:8D:1E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/jd1soXrXnr2VV0XYU018Ty5XjR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:460::/44
Signature Algorithm: sha256WithRSAEncryption
33:9e:b5:90:13:66:79:04:50:14:bb:23:ea:91:3d:2c:e1:73:
4a:01:67:84:b5:b6:e6:0d:64:f0:03:37:30:ad:a8:40:b5:3d:
93:73:5a:49:08:a0:ee:d6:54:10:ef:4d:44:c7:44:32:6c:64:
02:b3:d3:4a:fc:98:68:a2:95:d6:82:eb:40:01:38:11:8e:07:
9d:93:17:0d:a5:4f:32:e5:56:88:09:68:c0:5a:7a:8d:49:a8:
4e:74:f9:e6:23:3d:fd:16:2b:88:93:4c:f5:33:1d:4f:f1:39:
0e:80:d1:ab:c5:98:e0:fc:40:14:e1:f6:00:d5:9b:c7:77:44:
3c:a9:00:46:dc:42:4c:6a:8b:71:e2:75:5b:8f:3f:51:95:78:
3d:ad:a1:1b:57:d1:bc:1b:d0:58:0a:d2:f1:2d:fc:49:f0:a4:
78:ab:2f:e1:30:ad:79:ef:4a:64:30:dc:fa:35:e3:a0:44:51:
6d:d2:ac:ba:dc:0f:24:bc:88:f0:fa:22:39:4a:08:a0:b4:06:
0b:5b:96:03:07:a7:6c:53:54:8d:63:9a:93:58:31:c2:68:c8:
70:9b:7d:9c:e7:c9:8a:1d:f5:82:46:77:ec:b9:46:e3:9e:4c:
be:37:ed:d0:47:4f:33:c8:21:c4:e4:13:ac:8b:5c:14:65:46:
1e:06:36:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:55 2025 by rpki-client