Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/SSaIEg8bf4aXs5NL1iCvo17jld8.roa
File: SSaIEg8bf4aXs5NL1iCvo17jld8.roa (raw, json)
Hash identifier: dZX/ugcHjaxIvcTwYtk9JOyTv0HWUSDlh2Q0u1gEfbw=
Subject key identifier: 49:26:88:12:0F:1B:7F:86:97:B3:93:4B:D6:20:AF:A3:5E:E3:95:DF
Certificate issuer: /CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Certificate serial: 0191B2FF510E62113DFB439200858A1E040D
Authority key identifier: 68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/SSaIEg8bf4aXs5NL1iCvo17jld8.roa
Signing time: Mon 02 Sep 2024 13:49:22 +0000
ROA not before: Mon 02 Sep 2024 13:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39704
IP address blocks: 2001:67c:f14::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:ff:51:0e:62:11:3d:fb:43:92:00:85:8a:1e:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68bc3940055d1574f263b5f96ab0900c6bb4c5f9
Validity
Not Before: Sep 2 13:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=492688120f1b7f8697b3934bd620afa35ee395df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:41:a7:3a:ed:a5:8e:9f:94:5a:af:16:99:39:
19:e7:87:8e:a9:15:cd:31:b6:93:e7:6d:2a:c6:0a:
04:2d:3b:f4:0d:8e:9d:d4:3c:4d:bc:12:2d:67:3a:
6b:b6:d8:90:4f:35:48:56:6e:d9:45:c7:96:40:4a:
51:45:dc:9b:6c:7c:5f:c8:0e:af:7d:12:4b:bb:5f:
ac:02:89:4c:bf:ad:06:c9:f0:67:aa:9a:e2:5a:df:
33:cd:20:84:53:ad:26:ff:71:ce:71:ca:a7:27:20:
75:f2:5d:d7:1a:58:6d:17:30:90:a4:f9:2c:6b:a5:
d1:36:60:38:05:c9:29:2b:ce:a2:8b:b1:dc:e1:ae:
51:7b:ff:9e:03:dc:05:da:77:58:c2:af:8d:72:58:
68:2a:0b:a9:51:6f:9f:de:12:4b:5e:3a:2f:75:00:
b2:aa:4b:67:d8:c0:69:c8:e2:51:88:a4:e2:7f:d4:
e2:3b:3e:71:5c:79:36:89:45:ff:a4:9e:da:37:8c:
05:80:58:28:76:89:ab:fa:f9:57:ef:de:a6:6e:22:
d1:6b:53:a0:ce:9f:49:e0:56:34:88:83:5b:ac:d6:
eb:af:7d:38:dc:05:fe:c3:8c:43:19:ae:be:14:e0:
66:1b:65:e0:b8:de:7d:a1:f9:2a:b1:7c:90:72:6a:
9d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:88:12:0F:1B:7F:86:97:B3:93:4B:D6:20:AF:A3:5E:E3:95:DF
X509v3 Authority Key Identifier:
keyid:68:BC:39:40:05:5D:15:74:F2:63:B5:F9:6A:B0:90:0C:6B:B4:C5:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLw5QAVdFXTyY7X5arCQDGu0xfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/SSaIEg8bf4aXs5NL1iCvo17jld8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/d02b32-967d-4751-82d3-121a14a9a40e/1/aLw5QAVdFXTyY7X5arCQDGu0xfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f14::/48
Signature Algorithm: sha256WithRSAEncryption
80:16:54:a5:11:6f:2f:1c:3d:4f:4b:3d:4c:06:68:64:e7:24:
48:60:cd:9c:56:34:8b:0d:55:4d:fb:aa:d1:c8:07:77:a4:68:
20:91:f8:52:99:9f:d2:34:c3:65:47:64:1b:5b:e9:51:6a:c2:
a8:85:00:95:46:9b:a8:1b:c4:ab:08:de:04:1e:2f:42:8d:1a:
76:82:9b:ba:35:80:d5:59:fc:b5:8d:c9:cd:79:db:de:6c:6c:
e6:40:9a:42:1c:cb:c9:5a:f2:c6:bd:7c:d1:ef:56:c1:eb:fa:
68:5c:ba:a9:ca:e2:21:d5:59:d3:1b:6f:e0:49:54:79:62:00:
4b:de:fa:d8:c2:ca:ae:96:ef:b2:0f:41:63:f1:a0:e6:b5:4f:
e2:39:ba:e8:be:9f:70:35:4e:43:7e:ca:fb:d2:8d:cb:d5:ea:
75:68:db:18:a4:6f:1c:b8:a5:74:d9:53:7d:fa:88:bd:9c:cd:
a5:12:2c:8d:63:35:bd:bc:63:33:55:0e:e0:ac:2f:71:65:e7:
d4:b7:c3:0e:ef:6c:4b:86:65:b3:e2:72:c2:d3:07:86:71:98:
c1:c4:46:3b:cd:b1:e0:fc:f5:6b:6e:eb:54:77:3e:be:5a:bb:
9c:07:29:20:76:37:fd:18:4d:67:79:c8:00:4f:89:84:66:19:
cd:69:1b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:10 2025 by rpki-client