Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/JJVhCW803ae93WVyMGRh1jXvMlM.roa
File: JJVhCW803ae93WVyMGRh1jXvMlM.roa (raw, json)
Hash identifier: lVzI7nmNO0sGSAtzBTqChRPj1ZSNr2d1GL0UYPPXfVI=
Subject key identifier: 24:95:61:09:6F:34:DD:A7:BD:DD:65:72:30:64:61:D6:35:EF:32:53
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 018CC492FC39DE85E2E7EEA847C503824BA1
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/JJVhCW803ae93WVyMGRh1jXvMlM.roa
Signing time: Mon 01 Jan 2024 10:30:16 +0000
ROA not before: Mon 01 Jan 2024 10:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:2e02::/36 maxlen: 48
2a13:2e01::/36 maxlen: 48
2a13:2e00::/36 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:fc:39:de:85:e2:e7:ee:a8:47:c5:03:82:4b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jan 1 10:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=249561096f34dda7bddd6572306461d635ef3253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c3:85:eb:48:e2:44:cc:37:bc:50:b0:ee:b2:
43:d1:c9:c6:50:73:0b:02:4b:d2:5e:87:48:3c:f5:
e2:06:e9:f8:13:bd:c9:21:86:e0:3a:68:1e:0c:e0:
02:8d:45:dc:73:70:c2:b1:7c:b3:52:aa:cf:f6:33:
c6:d6:bc:fe:f7:2d:ef:5a:0d:e9:0a:4e:40:da:cf:
0e:de:ad:26:96:a5:c6:2e:4d:68:e8:f9:dd:1e:8c:
c6:d5:b9:ce:2a:90:70:d4:fe:ee:7e:d3:0e:72:7d:
86:b7:8b:86:98:99:c1:d3:9b:26:a0:b8:65:e7:fd:
b5:59:9d:90:7d:ae:c9:8c:28:41:2f:ad:a5:ca:bb:
08:1c:f7:6a:90:d1:72:32:ea:1d:1e:4b:1c:ed:4b:
a2:9d:d3:e2:36:32:61:7d:0e:6a:e2:a1:9f:71:3c:
4c:b5:0d:b7:31:c7:79:ac:c6:bd:75:3d:06:59:62:
ba:a1:f5:c5:0d:b1:30:47:a4:10:9e:e8:bb:da:41:
7f:ec:6e:28:46:a2:97:0b:4a:f9:3d:3e:33:70:4f:
94:83:fd:96:90:bc:99:ae:23:f0:8e:9a:4d:af:d5:
07:bb:ae:e1:61:cc:ef:f4:11:8f:2f:f8:4b:d3:dc:
af:ae:ee:d7:1f:89:d7:98:01:99:1f:82:39:db:bd:
98:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:95:61:09:6F:34:DD:A7:BD:DD:65:72:30:64:61:D6:35:EF:32:53
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/JJVhCW803ae93WVyMGRh1jXvMlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2e00::/36
2a13:2e01::/36
2a13:2e02::/36
Signature Algorithm: sha256WithRSAEncryption
64:56:a3:5f:6c:c9:87:75:9e:79:fc:db:c6:47:a7:91:55:6f:
fc:cd:48:ff:3f:c6:08:08:12:1e:10:a0:0d:cd:dc:59:16:55:
fb:0b:0b:5e:6f:a0:90:9d:ef:f7:27:87:cc:7f:b1:79:d9:04:
5b:5c:58:0f:15:d2:83:4c:44:5b:e0:ca:9d:7d:a7:25:ab:92:
3f:b8:55:ee:b3:89:ff:ef:9c:e2:01:8c:ca:c4:df:b0:19:69:
83:ef:b3:7c:2f:0a:09:e5:e8:47:f1:d5:6b:8a:20:86:53:9a:
2e:ac:88:67:b8:cd:36:64:07:c2:df:5f:53:a4:a3:0d:06:33:
8e:91:2f:aa:86:3a:32:af:be:b3:a9:90:d5:b1:7e:96:f6:f1:
6c:bb:32:8d:3f:1d:2c:de:01:e8:1a:f4:ac:5f:4f:1f:40:b9:
57:d1:6e:13:d5:46:9d:dd:3f:0e:2a:b4:74:70:87:e4:df:92:
e0:75:41:6f:99:f4:c5:51:fb:c7:b4:a5:3c:d6:71:66:90:74:
d2:45:3a:43:5f:9d:bb:e2:5d:05:61:a5:aa:7e:b3:f5:15:21:
6c:88:f3:6d:ed:a2:84:dd:29:43:f5:b4:ad:0d:f8:69:cb:42:
11:48:b4:e0:a9:b5:27:49:56:ef:d5:24:46:3b:99:b2:e0:73:
e1:c7:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:27 2025 by rpki-client