Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/OEFVAuP-18qqxGA3hS0r7rFL-Jg.roa
File: OEFVAuP-18qqxGA3hS0r7rFL-Jg.roa (raw, json)
Hash identifier: 545szyjzHgAyA6NL2yMdahmzdPSrUprQH71WJo+cn1A=
Subject key identifier: 38:41:55:02:E3:FE:D7:CA:AA:C4:60:37:85:2D:2B:EE:B1:4B:F8:98
Certificate issuer: /CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Certificate serial: 0193CFD4AF580DA05036BDD111F24D630744
Authority key identifier: 00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/OEFVAuP-18qqxGA3hS0r7rFL-Jg.roa
Signing time: Mon 16 Dec 2024 14:17:22 +0000
ROA not before: Mon 16 Dec 2024 14:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210756
IP address blocks: 2a03:90c0:b0::/44 maxlen: 44
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:cf:d4:af:58:0d:a0:50:36:bd:d1:11:f2:4d:63:07:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e4f6a77368b7cecfe67220b436576b1e008aec
Validity
Not Before: Dec 16 14:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38415502e3fed7caaac46037852d2beeb14bf898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b6:ee:4c:35:3c:a8:cf:74:35:32:5a:e7:e5:
a2:bb:44:66:06:96:0b:19:49:64:1f:4e:3c:7e:71:
28:f3:c5:d8:d1:54:8e:5f:91:14:95:3d:56:2b:df:
9e:af:47:8f:f0:17:36:ac:3f:6c:fc:a8:14:fc:83:
36:98:4c:6c:31:6b:dd:7b:21:12:a4:74:12:e3:09:
80:7b:a3:a7:ec:24:2d:c0:fe:42:57:05:6f:91:4d:
72:d2:fa:24:5f:c8:ae:ad:07:a2:f2:6f:d6:4e:2e:
e3:7d:55:f6:91:d4:12:e9:a7:c0:e8:89:78:7f:bd:
84:86:40:9e:7b:fb:eb:a4:7f:6d:b6:ed:44:da:77:
02:30:06:88:87:fe:05:05:c3:27:f1:09:1e:81:c4:
ae:cd:ad:62:9c:db:e2:2a:f4:13:0c:f8:ad:10:7e:
44:28:fd:2c:44:38:20:6a:b1:40:89:34:0f:b3:c0:
25:60:c9:fa:b3:9d:78:92:a9:95:81:38:38:2a:1f:
d6:14:bb:83:cd:aa:96:13:be:9a:2c:2f:55:8b:5b:
b4:28:bd:69:75:da:cd:57:60:04:7a:c8:71:59:ac:
07:1b:b3:d8:df:84:fc:62:d7:a7:74:f1:e7:4e:e2:
fe:95:99:8a:c6:44:c7:fd:17:8b:4f:99:eb:b2:4d:
56:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:41:55:02:E3:FE:D7:CA:AA:C4:60:37:85:2D:2B:EE:B1:4B:F8:98
X509v3 Authority Key Identifier:
keyid:00:E4:F6:A7:73:68:B7:CE:CF:E6:72:20:B4:36:57:6B:1E:00:8A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOT2p3Not87P5nIgtDZXax4Aiuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/OEFVAuP-18qqxGA3hS0r7rFL-Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/652da9-afc4-4e20-82fc-b07d8416ae4a/1/AOT2p3Not87P5nIgtDZXax4Aiuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:90c0:b0::/44
Signature Algorithm: sha256WithRSAEncryption
58:b2:c0:c9:7a:46:6e:bb:b7:3d:a6:b3:04:ae:5d:f6:96:29:
45:fa:21:bd:2b:55:a4:3a:9c:9c:fc:5c:2a:79:d6:48:65:7c:
32:65:51:18:36:bf:ba:84:ba:c2:e8:22:96:6f:24:6e:42:4b:
fb:c6:5b:49:66:bf:a1:d1:25:72:d3:be:42:c5:ca:91:02:37:
6a:41:5c:f3:79:9f:fa:31:ca:bf:cc:97:31:83:7c:cb:b7:ab:
ed:ec:c2:62:b2:26:e5:56:32:80:21:1e:93:79:bc:db:38:dc:
0c:0a:e6:46:01:00:fc:de:c1:92:51:6a:ed:69:7d:ea:2e:6e:
17:fe:47:ed:01:36:18:e3:30:3f:29:00:c5:b7:27:6f:74:bf:
1f:02:bc:70:ab:ad:1c:3f:c8:67:7f:a1:dc:b4:97:a6:0e:7f:
95:43:d4:d1:bf:1d:cb:47:a3:ec:f9:88:f7:3d:6d:13:a0:c9:
d4:f6:98:22:82:f2:9e:cd:8c:70:03:0c:1e:d2:d9:eb:8d:6b:
25:e6:29:26:97:dd:ef:2e:b2:b3:92:cd:67:02:bf:e0:da:d2:
6f:b2:31:ff:9f:ce:0e:77:67:6e:6c:08:c0:34:d4:57:db:fe:
59:39:39:54:3b:33:65:04:6d:53:59:16:f2:92:91:d1:06:99:
95:f1:8f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:41:01 2025 by rpki-client