Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/0GHXsim_6TAeXDY1UAU5hlbXycw.roa
File: 0GHXsim_6TAeXDY1UAU5hlbXycw.roa (raw, json)
Hash identifier: zcieD5JB9FHp+3zTYf8X8NfZfdIKOxNC9/MwBzhlfIw=
Subject key identifier: D0:61:D7:B2:29:BF:E9:30:1E:5C:36:35:50:05:39:86:56:D7:C9:CC
Certificate issuer: /CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Certificate serial: 019433CC6035CDE4DD3A8F864EF49ACFCA67
Authority key identifier: 4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/0GHXsim_6TAeXDY1UAU5hlbXycw.roa
Signing time: Sun 05 Jan 2025 00:10:19 +0000
ROA not before: Sun 05 Jan 2025 00:10:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212123
IP address blocks: 2001:67c:e70::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 Jan 2025 14:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:33:cc:60:35:cd:e4:dd:3a:8f:86:4e:f4:9a:cf:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaf14b67e051cfbd5e1b1d51693d44682392792
Validity
Not Before: Jan 5 00:10:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d061d7b229bfe9301e5c36355005398656d7c9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:45:19:37:b4:bb:7f:9b:1b:0b:d7:3a:19:3b:
6b:2a:10:a7:63:9c:fb:b1:02:c1:16:44:4b:16:c0:
54:55:af:08:e9:ea:09:e4:b9:80:1b:eb:18:d4:d3:
5b:78:24:ec:88:7e:d8:16:ce:09:3f:23:1d:5e:bd:
b3:a1:ff:d2:06:d9:f5:65:c8:a5:26:b5:f3:92:8b:
8f:91:99:0c:0f:5a:0a:9e:10:05:a2:39:aa:42:9b:
0f:3e:a7:60:ca:bc:38:6a:c5:a1:4b:b1:8d:c5:4e:
a3:88:df:41:2a:58:9a:0c:b9:c7:db:b9:48:95:51:
6e:4c:a9:53:1c:89:e3:ae:4d:47:62:cd:80:03:a1:
bf:eb:c8:1a:b8:c7:16:cd:dd:84:32:91:62:94:a5:
fc:02:00:aa:53:fd:59:11:64:d9:e2:77:fc:18:0d:
05:38:be:4f:3d:4b:f6:ab:b2:e4:a4:bb:08:e2:bd:
0e:9b:d5:2b:24:00:cb:4e:9b:b3:58:c8:73:73:8f:
32:d9:45:7a:cd:9b:83:1c:85:05:84:cd:ab:e1:c0:
b2:ae:ee:c3:e5:8a:64:ed:65:8d:82:d5:bd:c2:7c:
09:68:1b:48:b1:e3:bb:8b:43:c0:05:e9:89:32:d1:
b2:88:05:cf:e0:1f:72:78:31:f5:73:57:ad:b6:05:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:61:D7:B2:29:BF:E9:30:1E:5C:36:35:50:05:39:86:56:D7:C9:CC
X509v3 Authority Key Identifier:
keyid:4E:AF:14:B6:7E:05:1C:FB:D5:E1:B1:D5:16:93:D4:46:82:39:27:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq8Utn4FHPvV4bHVFpPURoI5J5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/0GHXsim_6TAeXDY1UAU5hlbXycw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8cf51c-54d7-4c3a-90c4-bd512ed58f78/1/Tq8Utn4FHPvV4bHVFpPURoI5J5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e70::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e8:84:14:78:41:98:9c:18:33:f6:a0:38:3e:23:c7:b0:b4:
65:d7:5e:f5:69:43:a7:23:42:4a:4f:cf:88:b1:a9:84:12:aa:
19:3d:b3:ee:25:bb:4f:91:ac:58:7e:ef:4e:9c:1e:71:c4:10:
b7:d2:48:d2:5f:91:f5:93:4c:19:d3:97:20:95:bd:45:69:be:
06:d5:48:d6:2a:78:69:a8:3b:59:07:23:2c:92:07:2f:1e:d3:
89:f3:41:aa:48:7d:7b:85:84:68:c6:c5:8f:28:58:ed:23:4f:
3a:b3:25:e8:f2:72:b5:32:7f:be:aa:29:67:c7:b5:a0:3c:df:
52:82:37:d6:cb:04:48:96:72:48:dc:79:21:18:b1:1f:1e:13:
a2:09:03:a8:47:5b:9c:80:cf:e5:95:1d:b0:cd:28:bf:c2:48:
6b:e8:9e:cb:94:26:20:19:6e:43:06:79:1c:78:02:0c:03:fe:
57:95:93:57:92:33:be:23:0a:56:0e:ec:64:84:08:0d:23:57:
9d:82:71:34:4e:62:6b:3c:3c:1d:f5:35:c4:7a:a9:f2:a3:73:
16:72:e1:1d:7d:cd:02:86:d7:8b:05:51:46:b4:5e:86:4f:42:
bf:89:28:a5:b4:c6:2f:94:1b:f6:de:b9:41:a3:fc:51:2c:93:
a4:e2:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:15 2025 by rpki-client