Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/X3giN9-2U-ynpNmb3WYB_vQyD_8.roa
File: X3giN9-2U-ynpNmb3WYB_vQyD_8.roa (raw, json)
Hash identifier: QI4z4qwecOYZTQuRBwZ84VPtaHOaHOZBuwMICKp8dtA=
Subject key identifier: 5F:78:22:37:DF:B6:53:EC:A7:A4:D9:9B:DD:66:01:FE:F4:32:0F:FF
Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Certificate serial: 018CC56EE9AE0CFA49EC0328CF8580C3F25E
Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/X3giN9-2U-ynpNmb3WYB_vQyD_8.roa
Signing time: Mon 01 Jan 2024 14:30:29 +0000
ROA not before: Mon 01 Jan 2024 14:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206033
IP address blocks: 2a07:d840::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 16 May 2024 08:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e9:ae:0c:fa:49:ec:03:28:cf:85:80:c3:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72
Validity
Not Before: Jan 1 14:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f782237dfb653eca7a4d99bdd6601fef4320fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:ff:ec:ed:29:eb:81:ae:37:95:8f:e8:30:
b3:50:b1:41:52:e0:59:ce:10:9f:cb:5c:f7:e4:87:
a6:93:ee:dd:a1:a9:e9:9b:cd:80:5d:67:c8:82:5a:
f4:72:4e:fd:33:2a:d0:83:22:ce:d1:a2:56:cf:75:
8d:c0:6d:a2:30:2c:dc:bc:f3:e1:70:75:1d:b7:ca:
71:95:02:b6:fc:f1:53:12:95:55:f3:5b:3f:80:59:
e4:a8:73:67:68:5e:26:3b:a2:70:f6:bd:15:ae:6b:
e0:82:bc:36:f4:0f:e0:00:47:a9:58:20:e6:09:95:
8a:f3:0e:c7:b4:08:09:a5:c2:40:70:38:08:2f:25:
be:38:26:7d:dc:eb:7c:72:59:7f:f3:2d:8d:ca:e8:
d5:aa:80:70:f9:79:a0:f3:e0:a1:d6:9e:d1:23:3b:
c8:e3:f0:8c:1b:54:a3:77:34:e6:90:17:67:83:74:
fc:ad:08:3d:78:af:7c:97:02:10:4b:c3:cb:2a:87:
93:c8:ae:7b:31:e9:eb:ee:bb:2e:bf:0e:80:d5:7f:
bf:cd:bf:d1:d6:c1:8d:c5:69:65:55:c1:2e:64:b1:
f0:77:85:a9:34:01:ce:b2:21:30:61:27:a9:4c:f4:
19:74:00:ec:67:a9:a5:f2:e0:62:94:f7:69:3c:0d:
84:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:78:22:37:DF:B6:53:EC:A7:A4:D9:9B:DD:66:01:FE:F4:32:0F:FF
X509v3 Authority Key Identifier:
keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/X3giN9-2U-ynpNmb3WYB_vQyD_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:d840::/32
Signature Algorithm: sha256WithRSAEncryption
89:94:83:31:bc:de:d1:d3:e6:7d:5b:88:52:2f:06:74:cd:21:
9e:79:01:56:1f:5b:07:40:47:24:5d:22:55:a2:e1:35:cc:ed:
ab:f4:75:9a:4d:bf:73:40:b0:67:ff:b8:64:09:aa:97:7b:05:
e2:d8:4e:ec:9e:de:6e:9f:dd:08:03:2c:81:5b:ce:9f:d1:e9:
a3:5a:e0:47:53:c9:6a:c2:b5:92:91:ee:1b:c5:2d:36:59:9b:
69:68:05:d3:df:93:fd:8c:46:e5:90:a2:b9:f1:db:70:f9:a3:
f2:8b:fa:bd:43:a8:7c:a9:22:cd:d3:6d:fb:7f:21:04:fa:89:
0d:e9:a1:96:85:02:31:e2:7b:65:85:cc:5c:9e:30:17:aa:64:
90:07:dd:a9:25:cd:e6:95:92:2c:38:c3:61:7c:03:e5:82:4e:
38:29:06:7b:8f:46:78:b8:85:66:7b:6d:c9:5c:af:88:36:a2:
f2:20:ce:37:f1:bb:f2:d6:c0:a0:77:c7:25:6a:68:3b:fb:a1:
24:cf:d8:9d:eb:77:6f:30:2c:6d:72:6b:85:c4:b7:30:2c:90:
c9:57:99:9e:c6:54:e3:73:51:88:be:e6:ab:e5:a8:82:48:16:
b4:61:ef:46:49:73:32:78:a6:0b:0d:55:d1:f2:43:64:fc:35:
8b:a9:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:52 2025 by rpki-client