Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/K0jjPNJHQlih5ZP4rzEHuCyso4w.roa
File: K0jjPNJHQlih5ZP4rzEHuCyso4w.roa (raw, json)
Hash identifier: Lwsw4OWi34GvPuK9MY4pRcrccnvm2+sMHLq1GYiD1VU=
Subject key identifier: 2B:48:E3:3C:D2:47:42:58:A1:E5:93:F8:AF:31:07:B8:2C:AC:A3:8C
Certificate issuer: /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial: 018CC3B6B1C798679CECADD4E715A114DED7
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/K0jjPNJHQlih5ZP4rzEHuCyso4w.roa
Signing time: Mon 01 Jan 2024 06:29:39 +0000
ROA not before: Mon 01 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35332
IP address blocks: 2001:678:880::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b1:c7:98:67:9c:ec:ad:d4:e7:15:a1:14:de:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
Validity
Not Before: Jan 1 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b48e33cd2474258a1e593f8af3107b82caca38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c6:f5:d1:a9:e3:93:b8:0f:e7:58:26:49:eb:
33:cf:0b:48:31:2e:bb:39:ac:8b:48:12:ca:08:a8:
f2:37:27:c2:4e:97:f9:eb:9a:b7:9d:bc:23:bc:c3:
4b:da:67:88:e5:aa:dc:ce:14:e7:05:77:9b:14:1a:
f1:35:39:ff:da:ff:94:74:47:84:34:55:76:48:d9:
72:81:10:c8:97:e8:cf:52:15:21:e8:a7:ab:ee:8e:
27:a7:3c:d8:db:b8:04:f1:af:0c:48:26:b5:4a:84:
c1:d9:2d:13:82:1d:75:f6:ef:19:4e:5f:bc:7f:d1:
5b:78:5f:69:47:01:5b:ea:61:15:d0:36:2b:9f:6b:
91:03:73:70:6f:34:9d:c1:1f:68:0a:69:fe:9a:80:
1c:c8:c6:0a:f6:5a:06:62:3d:86:5d:4d:68:f6:b5:
b6:b2:08:20:e6:e2:45:c4:96:96:b0:ed:c6:44:22:
3f:09:eb:d2:f7:dd:6d:c9:f4:ad:69:88:36:47:f1:
d6:5d:a4:e8:38:37:e2:a0:d9:9e:fd:e7:51:0d:67:
4c:97:73:ab:0d:7d:70:b9:97:90:23:7b:ea:e2:de:
fd:b6:b7:aa:6c:88:95:48:18:10:31:e7:02:43:21:
cd:c7:4c:9a:ae:96:57:6d:58:8a:4c:5f:89:26:19:
c1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:48:E3:3C:D2:47:42:58:A1:E5:93:F8:AF:31:07:B8:2C:AC:A3:8C
X509v3 Authority Key Identifier:
keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/K0jjPNJHQlih5ZP4rzEHuCyso4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:880::/48
Signature Algorithm: sha256WithRSAEncryption
a9:99:e6:a7:b1:26:09:f9:9a:fb:0f:9f:45:bc:dc:6a:02:df:
64:9b:b9:7e:e7:94:d7:b7:6f:88:11:dd:04:3c:d7:e9:5d:5c:
dd:38:f5:b7:fa:bf:fc:27:19:f9:1e:ea:6a:9c:fb:2c:35:93:
4d:2e:a4:06:95:0b:97:72:6f:bf:f0:94:8d:e4:43:32:48:60:
7d:23:9f:73:3c:ee:31:46:12:a4:29:60:67:b0:68:46:86:54:
f7:a4:a1:bf:20:31:8f:a3:ea:8a:b0:d7:c0:49:bc:60:1b:c0:
82:99:24:5e:24:71:c9:41:52:3a:f5:b3:03:c5:cc:08:f3:4b:
e3:74:ef:87:47:a8:3b:83:21:fd:c7:26:b9:16:49:50:16:55:
f2:f7:20:75:22:75:c0:de:00:17:a0:92:54:2a:40:f8:e3:a8:
e7:b7:e9:39:c6:83:ef:7a:3a:69:81:11:f9:2a:19:d7:70:15:
2c:cc:2e:03:21:55:69:c5:6b:8d:27:29:3f:15:52:f7:5c:09:
2a:fc:38:57:8e:3c:4e:3e:24:69:c4:50:8c:8f:79:6f:6e:29:
a9:0e:85:bf:f2:b7:9c:6b:95:36:1a:d9:95:ea:11:f0:ba:48:
ca:ec:5e:eb:85:ed:8b:53:fe:b4:57:5b:49:0f:7c:ba:5f:81:
cf:fa:ee:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:13 2025 by rpki-client