Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Q5-K_AbSCzS_P0HDp_PIAKBWaYM.roa
File: Q5-K_AbSCzS_P0HDp_PIAKBWaYM.roa (raw, json)
Hash identifier: 2vqXGuHFVM4b/o6QrXlSmW8uVRxeX9y6//8w0VYuWfI=
Subject key identifier: 43:9F:8A:FC:06:D2:0B:34:BF:3F:41:C3:A7:F3:C8:00:A0:56:69:83
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0193ACDE8083DBC8AB758181BB31E287146B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Q5-K_AbSCzS_P0HDp_PIAKBWaYM.roa
Signing time: Mon 09 Dec 2024 19:21:23 +0000
ROA not before: Mon 09 Dec 2024 19:21:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213861
IP address blocks: 2a11:aac5::/32 maxlen: 32
2a14:7b80::/32 maxlen: 32
2a14:7b81::/32 maxlen: 32
2a14:7b82::/32 maxlen: 32
2a14:7b83::/32 maxlen: 32
2a14:7b84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ac:de:80:83:db:c8:ab:75:81:81:bb:31:e2:87:14:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Dec 9 19:21:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439f8afc06d20b34bf3f41c3a7f3c800a0566983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e4:3a:c8:b1:42:97:de:00:70:42:b3:11:06:
07:68:4f:1f:a5:7b:2e:0b:ec:80:e0:25:4c:df:4b:
fd:99:97:71:48:2a:90:30:40:54:fa:30:38:c9:7f:
2f:54:bd:4b:59:c7:f7:76:55:93:13:6f:b2:2f:6b:
97:81:e5:81:58:65:0b:fb:10:c0:d4:4b:d9:ce:be:
2d:8f:13:dd:55:88:d8:dc:16:8a:f8:f4:3e:26:63:
ea:05:43:9b:64:1b:1b:19:c2:01:9d:6a:a5:6e:bd:
c1:9d:8a:7f:4c:cf:d0:a8:9e:80:71:b5:c6:7f:66:
c1:c4:b5:c3:00:d3:8a:71:e2:b2:4a:bf:40:6e:35:
4d:ae:a7:ea:d3:62:32:99:ee:43:fb:fa:94:75:f4:
90:77:af:64:b8:6f:14:1c:4c:f1:2a:53:3f:e7:32:
06:ea:c9:50:af:d4:3b:18:eb:47:b8:e7:ce:e8:a5:
54:1e:0c:4b:73:a8:32:42:a8:aa:76:57:76:85:84:
2e:b3:49:0d:a2:52:88:b5:5e:bd:8a:58:bf:f1:c7:
9e:f6:2e:06:17:b1:85:bd:a0:33:5f:3e:80:e3:d0:
6c:76:42:dc:b3:81:45:68:74:9a:65:4a:09:95:2a:
06:ab:2e:43:19:19:9c:c6:78:66:11:5f:5f:76:fb:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9F:8A:FC:06:D2:0B:34:BF:3F:41:C3:A7:F3:C8:00:A0:56:69:83
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/Q5-K_AbSCzS_P0HDp_PIAKBWaYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:aac5::/32
2a14:7b80::-2a14:7b84:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
92:7f:26:a5:9e:3e:44:ef:f4:3c:a2:38:3c:1a:a1:c5:8b:54:
8a:a8:bd:8a:19:40:dd:c6:92:9a:c3:de:da:fb:58:91:7f:c4:
b6:1c:57:b4:2e:bb:70:98:47:6f:06:06:ae:94:23:16:4e:2e:
8e:9f:af:9e:3e:58:54:6b:92:6d:71:bf:6b:6b:5b:3c:d8:d7:
32:18:39:26:c2:04:e7:f2:f3:69:e0:0c:73:9a:16:06:9d:7f:
9a:12:ff:d7:96:a0:dd:6e:9f:65:0e:32:64:42:c6:66:b8:de:
79:33:69:72:52:99:94:85:7e:13:37:43:6b:c2:f7:c7:d3:70:
66:ac:02:e7:2f:61:8c:89:5b:20:87:14:4a:14:33:ec:8c:67:
a1:32:5a:b0:98:ee:21:68:5f:eb:27:a8:5d:cf:44:ef:0e:3e:
de:84:0c:12:24:6b:a9:88:8d:f0:22:d3:cd:83:41:54:23:23:
fb:d4:d1:e5:13:ab:a7:2f:56:68:d7:d2:a8:a7:56:48:a7:7c:
d6:af:ca:6b:a1:87:58:5a:0c:c3:f4:a7:fc:08:9f:56:cf:70:
2f:6c:da:de:42:19:d8:5c:64:1f:d6:cd:fd:94:40:a3:68:c8:
f9:30:ac:05:c4:54:27:4b:c2:0a:ae:e5:5a:a6:76:f2:6d:1e:
81:b7:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:49:58 2025 by rpki-client