Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/GHqEL6JAVUmcta0ua1xiWmAJoGQ.roa
File: GHqEL6JAVUmcta0ua1xiWmAJoGQ.roa (raw, json)
Hash identifier: 7O+NBZ+TuBJTJteP/UXJTx1xycSzV918lhjqSNEUyfU=
Subject key identifier: 18:7A:84:2F:A2:40:55:49:9C:B5:AD:2E:6B:5C:62:5A:60:09:A0:64
Certificate issuer: /CN=68efcca8498f5d26c120af34d846c0281ff629af
Certificate serial: 0194221FB6E7F2FE1726F2AD67D33D4F0B54
Authority key identifier: 68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/GHqEL6JAVUmcta0ua1xiWmAJoGQ.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30931
IP address blocks: 2001:67c:1b24::/48 maxlen: 56
Validation: Failed, certificate revoked on Fri 14 Mar 2025 22:39:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b6:e7:f2:fe:17:26:f2:ad:67:d3:3d:4f:0b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68efcca8498f5d26c120af34d846c0281ff629af
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=187a842fa24055499cb5ad2e6b5c625a6009a064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:c7:14:1a:64:7c:c4:c0:4d:b5:54:65:de:
a8:56:0f:92:8b:6d:41:0d:ff:76:5f:4e:3b:e7:89:
42:2d:ef:42:7d:e0:82:e3:db:b9:1d:ff:d1:08:79:
86:a7:f3:95:c9:21:ee:6d:58:21:b0:98:c4:f1:26:
ad:2b:dd:ee:25:02:37:4b:eb:fe:84:46:a5:85:62:
d1:ae:4e:00:26:96:68:a6:79:47:d7:f6:df:8c:32:
c9:57:37:4c:6f:79:0a:b6:11:28:a7:f5:02:c2:26:
d0:b5:ed:97:ae:2b:7e:21:77:92:5f:45:b6:8c:c5:
7c:7c:28:33:6b:36:6f:4b:b9:d3:bb:44:ad:1f:27:
2e:f7:e5:5c:d8:21:78:3a:d0:b6:69:21:a9:01:be:
f7:84:a2:14:f1:a7:be:72:25:42:d9:a4:3b:aa:76:
25:31:98:13:89:07:9f:9b:2b:5d:c6:87:1b:8a:0d:
67:bb:34:fa:39:bf:47:c9:cb:c0:98:9c:5a:ce:b1:
5c:9b:da:aa:73:09:07:42:89:76:70:bb:b6:01:b5:
da:04:ec:12:77:a2:0e:24:73:cf:b6:16:ed:bc:42:
b3:95:4a:c6:cd:b0:3b:25:8b:13:0f:6a:b6:64:26:
c9:c0:79:bf:2a:dc:58:fa:56:73:28:e5:c8:bf:e2:
4c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:84:2F:A2:40:55:49:9C:B5:AD:2E:6B:5C:62:5A:60:09:A0:64
X509v3 Authority Key Identifier:
keyid:68:EF:CC:A8:49:8F:5D:26:C1:20:AF:34:D8:46:C0:28:1F:F6:29:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO_MqEmPXSbBIK802EbAKB_2Ka8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/GHqEL6JAVUmcta0ua1xiWmAJoGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/397b5c-8fc8-4b56-b603-358145d9a81d/1/aO_MqEmPXSbBIK802EbAKB_2Ka8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1b24::/48
Signature Algorithm: sha256WithRSAEncryption
3a:c8:98:76:2c:f2:aa:3e:f5:15:65:82:ba:d3:00:fd:85:80:
9f:af:5d:c0:56:84:03:f3:a2:6e:c8:a2:19:e5:cd:68:5d:cd:
9c:94:8a:06:8e:c2:c1:82:77:a4:1b:6e:88:a7:2c:d6:c2:03:
8c:1d:87:77:6b:7a:2a:e7:e9:28:59:0b:3d:87:1c:94:a4:ff:
42:af:5e:8e:d1:cb:78:72:97:3a:c1:00:68:7d:c7:83:78:0a:
f9:43:08:84:ec:30:8a:fb:d1:6a:97:f2:6b:70:2a:02:d9:fd:
96:84:99:ee:c9:d6:39:49:d8:b6:c2:5c:24:01:7c:cf:aa:8d:
b5:8c:35:8d:b8:1b:11:65:9d:c8:04:93:f2:ab:db:e1:89:0c:
5a:3f:ae:87:c3:b5:39:af:41:29:15:fc:21:9c:0e:bb:48:39:
f3:82:32:d7:5c:d6:80:68:c2:f9:f0:e0:f2:a1:8b:aa:ee:7b:
ec:ce:7d:5c:e9:6f:6e:73:15:f3:13:d6:08:b8:b7:c5:60:2b:
dc:3f:7e:6d:3f:b8:1a:05:0e:05:49:0d:e5:b1:28:d9:da:35:
28:39:85:e5:7c:49:b6:6c:b0:97:92:90:58:df:fa:b8:ba:bd:
82:60:6b:ae:a4:6b:99:28:d2:7d:22:1b:6a:53:f7:4d:b1:db:
ef:19:3d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:55 2025 by rpki-client