Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/S8jwzJXqaGDrFqYz8TPGTLOpyKI.roa
File: S8jwzJXqaGDrFqYz8TPGTLOpyKI.roa (raw, json)
Hash identifier: gRr2rHAmRoGzxwaMIEjOoOiSKnzn+32RoUUGqW95mP0=
Subject key identifier: 4B:C8:F0:CC:95:EA:68:60:EB:16:A6:33:F1:33:C6:4C:B3:A9:C8:A2
Certificate issuer: /CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Certificate serial: 01946BF4B41F48E0537A413ED77C7003C717
Authority key identifier: FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/S8jwzJXqaGDrFqYz8TPGTLOpyKI.roa
Signing time: Wed 15 Jan 2025 21:53:06 +0000
ROA not before: Wed 15 Jan 2025 21:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44966
IP address blocks: 2a13:76c0::/29 maxlen: 64
Validation: Failed, certificate revoked on Sat 01 Feb 2025 22:41:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6b:f4:b4:1f:48:e0:53:7a:41:3e:d7:7c:70:03:c7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc83525d142fbf4b94b3d169445365c66ddfddfd
Validity
Not Before: Jan 15 21:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bc8f0cc95ea6860eb16a633f133c64cb3a9c8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:e7:cb:7b:9a:56:c8:ea:ab:ed:43:07:d7:
59:5a:bc:01:f3:16:22:e9:01:d3:eb:72:48:f5:8e:
0a:cd:3c:9c:28:c9:48:c3:33:0c:70:29:57:77:00:
1a:55:62:ab:be:51:ba:21:1b:89:d1:d4:2a:c7:39:
82:3e:d5:1d:88:7f:c5:48:78:b9:3a:a2:e5:a9:f4:
80:0d:5d:dd:2c:77:b6:d2:35:cb:a8:5f:85:3b:1c:
60:6d:bb:25:2a:42:72:b5:35:d4:4f:0f:54:da:6f:
c4:45:08:da:6c:6c:7f:4a:57:7f:4a:8f:72:9f:fc:
0e:f0:02:5d:40:7e:4f:2b:9e:a7:52:5f:c8:45:9d:
58:bd:ac:fc:d1:e0:7f:34:83:22:2a:db:e3:12:b6:
d3:4c:4f:b7:8e:3e:12:a9:f3:12:45:34:fc:64:bb:
62:e1:c1:4f:22:13:3c:f4:2d:7a:ce:d8:f9:37:d3:
ca:1e:ae:9b:4d:cf:e1:08:84:42:ad:4b:de:19:4e:
a0:65:22:f8:db:be:2e:1d:34:e0:f8:e7:b5:de:46:
db:12:6b:24:4b:f7:e8:91:83:76:ca:59:21:39:25:
0b:bd:3f:81:09:90:1e:66:4b:5c:13:3f:1a:b9:35:
d5:ae:de:32:fe:09:da:6e:67:68:cb:1a:d7:cd:40:
fa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:F0:CC:95:EA:68:60:EB:16:A6:33:F1:33:C6:4C:B3:A9:C8:A2
X509v3 Authority Key Identifier:
keyid:FC:83:52:5D:14:2F:BF:4B:94:B3:D1:69:44:53:65:C6:6D:DF:DD:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_INSXRQvv0uUs9FpRFNlxm3f3f0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/S8jwzJXqaGDrFqYz8TPGTLOpyKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/854e86-51bb-458c-a014-6923a7e61a6b/1/_INSXRQvv0uUs9FpRFNlxm3f3f0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:76c0::/29
Signature Algorithm: sha256WithRSAEncryption
7c:17:56:cd:98:81:40:9f:c5:a0:7b:af:70:90:89:8c:f0:18:
01:9a:d8:f9:3a:05:0d:87:f3:52:66:50:bc:3f:a5:07:f6:d1:
ff:bf:5c:18:70:58:43:e4:6f:df:d1:76:a0:f2:45:d4:23:dd:
5d:74:38:28:8a:f7:2d:56:09:6d:89:84:82:f5:95:3f:f2:d1:
17:9b:7c:59:ef:03:95:14:01:71:89:19:5e:c6:d2:58:c7:62:
9e:53:e6:ea:58:0a:36:c9:50:ef:b9:53:0c:f8:2d:68:57:6e:
89:cf:01:1a:2b:bf:07:2c:1c:f8:14:63:e8:ec:cf:9e:1d:9e:
19:19:e3:f0:ff:0e:8e:fb:aa:dd:08:34:d4:24:e7:1d:92:15:
a3:13:ad:92:b4:cd:05:c9:77:1f:dc:98:b9:1f:01:db:25:d4:
cc:22:12:0e:2f:db:2a:6e:44:38:d0:a4:03:2b:da:89:f2:f0:
cc:59:37:4f:57:fe:a3:ae:a8:3f:8f:82:b4:6f:86:b9:0f:bc:
07:1d:83:73:56:56:88:d0:26:b7:70:86:ea:97:d7:dc:65:1a:
20:2e:e0:b7:90:77:3e:3a:38:87:13:af:09:35:a0:09:23:0d:
08:06:ed:e9:92:ff:2f:77:0f:f2:89:f4:af:e8:be:2a:24:d2:
cc:ec:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:09 2025 by rpki-client