Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/j7gw7rYg2Pl-XpXTxKaD6nc9CVg.roa
File: j7gw7rYg2Pl-XpXTxKaD6nc9CVg.roa (raw, json)
Hash identifier: U+RxVTjqQypmm+L3Y31nVPShdpYruK5thGy0tEHd9+k=
Subject key identifier: 8F:B8:30:EE:B6:20:D8:F9:7E:5E:95:D3:C4:A6:83:EA:77:3D:09:58
Certificate issuer: /CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Certificate serial: 019421B1DE7C2F17CA7E07EB8D30DB599DB3
Authority key identifier: C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/j7gw7rYg2Pl-XpXTxKaD6nc9CVg.roa
Signing time: Wed 01 Jan 2025 11:48:12 +0000
ROA not before: Wed 01 Jan 2025 11:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20860
IP address blocks: 2a04:de40::/42 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Mar 2025 17:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:de:7c:2f:17:ca:7e:07:eb:8d:30:db:59:9d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c0d0495acf9c78b9183bba0c05b8a29974382b14
Validity
Not Before: Jan 1 11:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fb830eeb620d8f97e5e95d3c4a683ea773d0958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:c6:05:72:c6:9f:38:73:98:87:16:7f:21:
2e:cb:c0:1c:57:7e:1e:d6:e9:75:74:b3:58:42:ce:
5a:90:5a:cd:6e:06:1e:dd:fa:b4:5e:1e:28:aa:dd:
59:79:f9:3c:df:5a:c8:0a:fe:f2:5a:a5:ba:86:07:
ab:b5:2d:df:33:41:c3:2a:22:b4:09:8f:74:8c:c9:
49:98:fa:7f:23:13:8f:c6:57:bc:84:78:44:1a:c0:
7d:e6:c7:a7:34:b1:f5:c3:2f:a9:89:96:a8:fe:6b:
95:63:ea:13:8b:a4:a6:d9:26:f4:5f:9c:fb:be:06:
89:56:d6:1e:b5:67:ea:2e:6f:c9:2a:15:81:dc:b0:
89:8b:e6:79:b1:35:5c:29:d4:e9:ad:46:61:ae:82:
80:11:4d:54:ab:22:5c:6f:c4:c6:45:e2:0d:94:a6:
0b:a5:9b:fb:db:08:95:83:4b:b1:e8:81:96:dd:8b:
22:5f:cf:f3:c9:86:e1:e8:21:c7:f2:46:08:ad:c8:
7b:74:65:fe:09:f3:f7:da:d1:71:72:56:28:b6:c6:
4f:7a:45:fc:cb:bc:49:dd:87:2a:b7:f2:9e:f9:27:
09:31:5a:93:9f:78:44:d5:1c:54:2f:bc:7f:9d:5c:
90:96:2b:02:52:95:29:bf:e0:ea:98:39:63:1a:b3:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:30:EE:B6:20:D8:F9:7E:5E:95:D3:C4:A6:83:EA:77:3D:09:58
X509v3 Authority Key Identifier:
keyid:C0:D0:49:5A:CF:9C:78:B9:18:3B:BA:0C:05:B8:A2:99:74:38:2B:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/j7gw7rYg2Pl-XpXTxKaD6nc9CVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c65398-a8eb-4d16-9c4e-3584e2ab1f0d/1/wNBJWs-ceLkYO7oMBbiimXQ4KxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:de40::/42
Signature Algorithm: sha256WithRSAEncryption
1a:32:b8:4d:a4:c6:f3:7d:92:9d:d0:3f:76:9a:97:af:46:ce:
29:0f:4a:49:d9:cb:62:87:b9:df:40:9a:1a:6c:01:37:d9:76:
0c:cb:a9:21:9b:b2:a1:08:8a:f6:9c:0c:d4:5a:79:16:e4:dd:
c6:2a:54:fe:58:c4:00:fb:79:79:24:37:67:54:b9:ec:fe:22:
6e:d0:72:2b:00:6f:b5:b0:bb:32:08:b8:b1:67:63:c7:dc:3c:
9b:92:74:09:51:f2:11:28:c6:14:43:d4:2b:67:dd:f2:92:f9:
22:04:1f:fc:48:2c:7d:03:bb:3a:68:8b:ae:e9:78:98:20:f5:
a7:c1:0b:43:c1:3d:78:b1:ce:cf:5c:d4:6e:d2:33:cf:eb:c1:
48:05:cb:a2:09:86:cf:09:c6:20:49:85:39:4c:a9:2b:6d:df:
7c:a3:65:a4:a0:fc:9a:eb:f6:16:d0:f9:b6:b4:60:20:a2:61:
60:2a:a1:f8:44:3a:28:c9:e6:29:09:8a:9b:a0:ea:98:2a:82:
68:7d:28:39:09:f2:68:72:fe:fb:8f:e8:22:97:b3:d3:a4:bd:
03:a2:1e:0a:77:0d:86:36:12:4b:fa:68:d3:db:f3:15:8d:99:
4b:48:91:70:36:fb:16:02:dd:8f:ec:c2:0b:7f:ac:14:ad:55:
d5:28:17:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:25:02 2025 by rpki-client