Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/8eY7lq--znh0foeFDyom9vWYP_w.roa
File: 8eY7lq--znh0foeFDyom9vWYP_w.roa (raw, json)
Hash identifier: o4+cgju+BDPHX8d5rnRt3np1YvvTYtF0wSW7N8cVpws=
Subject key identifier: F1:E6:3B:96:AF:BE:CE:78:74:7E:87:85:0F:2A:26:F6:F5:98:3F:FC
Certificate issuer: /CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Certificate serial: 018DC12E6DB91C6542FEC8BCF59AB8DC6A2D
Authority key identifier: 77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/8eY7lq--znh0foeFDyom9vWYP_w.roa
Signing time: Mon 19 Feb 2024 11:44:21 +0000
ROA not before: Mon 19 Feb 2024 11:44:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210021
IP address blocks: 2a0b:81c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Feb 2024 17:44:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:2e:6d:b9:1c:65:42:fe:c8:bc:f5:9a:b8:dc:6a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c6fb655461d73fcf21e8612c318706a089a5c2
Validity
Not Before: Feb 19 11:44:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1e63b96afbece78747e87850f2a26f6f5983ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b9:2a:9b:8f:dd:46:d3:ac:71:6e:ff:42:64:
cd:19:d0:c5:d9:31:e0:82:f1:56:0b:08:a4:fe:da:
60:f1:78:50:18:5a:8d:b3:ea:99:bc:3f:f0:2c:52:
02:a0:07:08:52:96:ae:06:6a:c1:7b:b2:0f:95:7e:
c5:00:10:6c:7c:49:2b:90:f3:f8:6c:a4:9e:4c:37:
58:af:1d:bb:a4:f7:f5:31:26:91:73:0d:93:ad:27:
71:55:cc:94:d8:cc:71:40:89:cf:2f:a9:fb:c8:c1:
02:98:7a:ba:4b:be:03:dc:57:92:5f:ab:e8:91:64:
a8:e0:10:e9:72:21:a5:94:89:ad:ee:bd:82:2b:9d:
94:78:2f:85:78:85:9e:bc:ac:2e:f3:f4:d0:13:5b:
e6:10:fc:b7:62:68:aa:b7:ce:76:9f:4b:70:c0:5e:
35:b2:4d:0a:5c:08:bc:0d:15:34:d3:b9:e5:c9:dd:
d9:88:28:d0:ca:f1:f9:7b:97:79:17:31:a7:6d:d0:
30:79:29:0b:9e:d9:38:48:ee:ca:5c:1c:25:65:16:
66:05:21:13:99:c8:db:26:d1:41:7c:bc:70:62:0a:
f9:ac:aa:24:36:03:a6:06:9c:ae:3b:00:87:ac:a2:
ed:e0:f0:71:0c:66:f0:68:b5:4b:09:08:47:53:94:
1c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E6:3B:96:AF:BE:CE:78:74:7E:87:85:0F:2A:26:F6:F5:98:3F:FC
X509v3 Authority Key Identifier:
keyid:77:C6:FB:65:54:61:D7:3F:CF:21:E8:61:2C:31:87:06:A0:89:A5:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8b7ZVRh1z_PIehhLDGHBqCJpcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/8eY7lq--znh0foeFDyom9vWYP_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/df0e11-593a-4ee4-8dcf-ab3081b2aba4/1/d8b7ZVRh1z_PIehhLDGHBqCJpcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:81c0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:c1:92:14:00:1f:a4:a3:8a:c5:55:54:bd:ef:05:05:53:c2:
97:a4:8a:ce:dc:b5:8d:3e:16:2b:38:97:fc:fc:f4:ad:8b:4a:
f4:51:d3:9c:92:8d:b6:53:aa:cd:b4:b5:3f:29:28:06:aa:73:
bd:c3:66:8a:2d:d8:91:ab:09:d6:08:6b:0f:09:3b:a8:5b:ec:
f4:08:20:bb:00:d8:11:51:57:e8:a6:3a:5d:60:58:c2:fd:91:
6b:34:9a:a9:65:3e:38:58:a1:ee:d5:2e:f4:4d:1f:26:d4:8b:
fd:a6:23:8d:25:5c:45:cb:4c:e4:90:ee:ae:91:9b:ce:22:9e:
2a:2b:5f:2f:0a:db:06:d7:5b:69:06:d4:75:89:97:a4:d1:03:
5c:b5:cd:ba:02:4b:95:ba:61:1e:aa:1a:6c:09:b7:48:9e:ec:
2e:f9:03:61:f9:b7:95:59:9a:40:cf:9c:e5:6b:28:9d:6e:95:
23:82:dd:67:f0:5a:2b:dc:3f:59:ef:dc:8c:04:e6:8b:66:e7:
e5:36:be:bb:1a:9f:6c:65:6f:fb:ac:e7:37:0a:f0:a5:2d:33:
e4:4c:8a:78:0e:aa:4f:13:3a:bf:99:e6:9d:ea:24:75:63:c8:
60:b0:e6:ea:52:0f:df:e1:8a:59:5f:62:ba:d6:57:c4:9a:d7:
32:9d:ec:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:51:08 2025 by rpki-client