Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/4eZ1XoEUC3u7WDR-_-ODbjB60vc.roa
File: 4eZ1XoEUC3u7WDR-_-ODbjB60vc.roa (raw, json)
Hash identifier: ADLATnP0W2rMIwyaL4LxSpe/bYQWig1I4LZy3EioMoQ=
Subject key identifier: E1:E6:75:5E:81:14:0B:7B:BB:58:34:7E:FF:E3:83:6E:30:7A:D2:F7
Certificate issuer: /CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Certificate serial: 019421B19790B78C6E5942683813777BF6EA
Authority key identifier: 3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/4eZ1XoEUC3u7WDR-_-ODbjB60vc.roa
Signing time: Wed 01 Jan 2025 11:47:54 +0000
ROA not before: Wed 01 Jan 2025 11:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198150
IP address blocks: 2a13:9cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 14 Jan 2025 17:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:97:90:b7:8c:6e:59:42:68:38:13:77:7b:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c859ed693ce3de059caa0a0c1e4245c5e9e37e4
Validity
Not Before: Jan 1 11:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1e6755e81140b7bbb58347effe3836e307ad2f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:39:ab:2f:64:55:73:e4:b4:47:ea:4a:5f:
6a:dc:e1:1a:f0:c2:a6:4f:47:ce:a4:30:84:32:3b:
3f:6d:ab:e1:ee:b5:7f:78:e4:5f:79:65:4d:fe:1a:
6b:c5:8f:0d:47:fc:46:f3:74:a2:fe:97:ad:73:9d:
97:6a:87:35:5e:40:b0:58:6b:23:9f:52:da:a5:d3:
e4:52:d6:35:94:9d:eb:c5:1d:63:53:2c:14:5d:0b:
b4:cd:b8:85:2b:41:f9:39:16:06:0a:fc:71:cf:64:
9e:47:46:49:30:ab:40:66:2b:17:4f:4f:87:85:c9:
09:64:eb:65:c1:82:d3:7c:be:34:e6:9e:20:31:84:
9d:e4:5e:95:ba:a1:ca:b5:5c:98:9e:23:f8:93:70:
7e:b0:13:0e:08:9c:3a:79:68:09:83:a6:3a:c2:0e:
06:8a:d9:1a:5e:03:0c:d7:26:13:2e:21:00:b6:ea:
de:b1:f3:e0:12:dc:bf:3f:6e:82:b3:df:5b:ca:cc:
30:85:b2:7c:16:84:5c:f9:42:36:20:be:3e:1a:ab:
07:a4:d3:bc:a1:f3:56:db:43:6d:15:5e:03:2a:6b:
30:a1:3b:25:83:eb:cd:fb:7d:dc:92:6e:48:f2:36:
ad:cf:36:e4:d5:13:e1:91:c3:ad:03:ef:0c:89:91:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:75:5E:81:14:0B:7B:BB:58:34:7E:FF:E3:83:6E:30:7A:D2:F7
X509v3 Authority Key Identifier:
keyid:3C:85:9E:D6:93:CE:3D:E0:59:CA:A0:A0:C1:E4:24:5C:5E:9E:37:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIWe1pPOPeBZyqCgweQkXF6eN-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/4eZ1XoEUC3u7WDR-_-ODbjB60vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/fd9054-778d-413d-9e95-5511daa72778/1/PIWe1pPOPeBZyqCgweQkXF6eN-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
30:72:fc:19:71:28:1a:a0:8c:31:d4:a4:9c:cd:23:33:84:51:
31:95:f0:be:b2:e7:e1:29:ce:9d:76:eb:42:66:ad:d5:fb:f6:
bf:95:93:85:7d:e8:2c:b0:76:5c:ad:cd:f1:6b:6d:bd:a1:99:
f0:81:92:73:10:8f:31:c6:76:e9:e2:92:33:91:da:87:48:91:
81:d4:c4:e1:39:22:11:65:9c:9a:f4:5b:7c:09:e0:ac:f2:64:
e3:1b:3a:58:cc:aa:60:07:aa:85:b7:e4:5f:33:56:3c:d1:e0:
68:78:f7:75:b8:fe:4b:16:aa:aa:04:b8:11:fa:ae:73:17:4e:
99:eb:6e:fc:fd:10:f4:66:13:02:3d:a8:b8:30:bc:f7:bb:f8:
5d:3c:3b:73:9e:99:fb:b4:02:45:ab:a7:a2:cc:72:88:06:f0:
2e:ab:2f:2f:99:28:89:94:5a:28:4e:9f:1c:56:54:6d:64:f9:
13:80:62:89:78:18:80:cf:79:47:12:a7:4e:d1:f1:7f:48:81:
67:ea:e3:e9:67:96:ba:f6:94:aa:42:dd:fe:40:3b:d0:47:ae:
f4:ee:ec:41:2c:31:43:17:bf:f2:6b:a4:cf:38:c1:15:06:f5:
83:55:6a:11:a7:8e:52:0d:1f:ab:b5:71:25:74:6d:b6:e5:cd:
a9:25:8a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:57 2025 by rpki-client