Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/jD_6A8C3Y9vjr6OpK0xh68P8Qi8.roa
File: jD_6A8C3Y9vjr6OpK0xh68P8Qi8.roa (raw, json)
Hash identifier: Q0EHwZnnWZi6DXZ7piqjkKHV1s21YZhcRjUsw61DN34=
Subject key identifier: 8C:3F:FA:03:C0:B7:63:DB:E3:AF:A3:A9:2B:4C:61:EB:C3:FC:42:2F
Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Certificate serial: 019195858AA449E9A00BBB85DBB6783B08DA
Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/jD_6A8C3Y9vjr6OpK0xh68P8Qi8.roa
Signing time: Tue 27 Aug 2024 20:27:22 +0000
ROA not before: Tue 27 Aug 2024 20:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204873
IP address blocks: 2001:90f::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:95:85:8a:a4:49:e9:a0:0b:bb:85:db:b6:78:3b:08:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0
Validity
Not Before: Aug 27 20:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c3ffa03c0b763dbe3afa3a92b4c61ebc3fc422f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:69:31:63:85:cb:57:da:03:ce:38:96:95:bb:
55:46:65:dc:33:73:10:ad:b5:cf:da:3a:71:56:8e:
b6:cc:93:dd:6f:81:78:29:ba:04:40:dd:c8:c5:89:
a3:24:2d:37:0c:08:ef:f1:63:56:08:98:22:fd:61:
1c:e8:a4:68:a8:f2:67:b4:ea:bf:79:95:3b:aa:92:
74:7f:f2:fc:5f:4d:97:75:b4:12:ca:ce:06:0e:c6:
e5:b7:5f:9c:3b:ff:f1:8b:a2:0c:dc:bd:91:40:ee:
61:aa:22:10:d6:18:ad:38:38:19:cc:8c:94:c6:cb:
65:97:cc:aa:35:6f:0a:19:bd:c5:53:16:b6:e2:f1:
cc:46:45:2b:35:b8:7f:f2:28:38:7e:02:d2:76:8b:
fe:0b:7c:d1:81:5f:1e:11:33:22:ca:9c:2e:80:0d:
b4:77:43:53:94:73:38:ba:74:ab:7f:05:cd:18:7f:
00:04:b4:3b:6e:bd:dd:c1:7d:2a:b1:da:d8:f0:e9:
84:e7:3f:6b:85:18:e6:d7:c2:28:f6:cf:3e:5a:6b:
91:20:60:19:29:d3:7d:c9:a6:6d:e3:08:86:f2:2e:
48:99:78:34:f1:fb:84:24:99:fe:be:82:00:91:12:
a0:d9:44:81:76:c5:0a:9b:46:93:96:2b:1e:77:32:
50:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3F:FA:03:C0:B7:63:DB:E3:AF:A3:A9:2B:4C:61:EB:C3:FC:42:2F
X509v3 Authority Key Identifier:
keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/jD_6A8C3Y9vjr6OpK0xh68P8Qi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:90f::/32
Signature Algorithm: sha256WithRSAEncryption
9a:32:dd:1e:a7:a7:38:15:55:b8:dd:1c:f5:ac:77:50:c2:dd:
fe:4a:c7:a9:a0:88:26:18:cd:ff:00:38:89:cc:e5:37:2e:9d:
cc:f7:0b:17:79:84:a1:ef:58:9a:47:4e:68:a7:94:a8:12:c8:
e9:a9:81:04:58:7d:bd:cf:0c:3b:f6:65:4e:4e:ba:a3:af:99:
ab:59:8d:0c:6c:6e:0b:44:98:63:77:3a:08:b5:21:7a:d3:35:
74:03:bc:6e:fe:91:18:81:74:81:d3:33:36:74:2c:7d:f0:79:
a4:65:c3:4e:69:95:e8:02:38:1e:ef:1e:19:a9:7b:d7:b8:cb:
9c:3c:0b:b8:bc:16:aa:42:6a:9b:56:d5:f2:f8:a4:6c:39:01:
65:7b:df:c6:a5:bc:f5:c3:30:30:66:b2:8b:87:d9:fc:1b:d0:
f3:4b:18:e9:38:9d:e0:72:d4:d9:96:b8:cd:65:70:07:2e:2b:
1b:cb:1b:3f:31:7f:25:68:d5:b0:82:73:b7:5e:84:44:cf:da:
f1:ff:a4:c1:92:ea:da:ee:cd:1e:ed:33:aa:2c:24:19:3a:b7:
c2:c6:dc:ef:8a:18:63:4d:17:76:1f:77:86:bf:14:b6:c6:61:
66:32:79:00:5f:fd:d3:59:bc:5d:ce:e6:de:f0:8e:8a:1f:2f:
10:94:21:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:56 2025 by rpki-client