Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/SJEfSqF4kt1TsF_FgD4PY_fb3E8.roa
File: SJEfSqF4kt1TsF_FgD4PY_fb3E8.roa (raw, json)
Hash identifier: l5cNIllOu7X5r2wDnzy174aJc2mcK3xSctxqJGY7DU8=
Subject key identifier: 48:91:1F:4A:A1:78:92:DD:53:B0:5F:C5:80:3E:0F:63:F7:DB:DC:4F
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018D36237BBA82EDF361F142E90A00D834FD
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/SJEfSqF4kt1TsF_FgD4PY_fb3E8.roa
Signing time: Tue 23 Jan 2024 11:45:11 +0000
ROA not before: Tue 23 Jan 2024 11:45:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a04:5b81:2010::/44 maxlen: 48
2a04:5b81:2060::/44 maxlen: 48
2a04:5b81:2100::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 28 Jan 2024 16:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:23:7b:ba:82:ed:f3:61:f1:42:e9:0a:00:d8:34:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jan 23 11:45:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48911f4aa17892dd53b05fc5803e0f63f7dbdc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8e:2e:59:9c:19:3d:67:d9:57:2e:f0:c0:44:
19:55:a6:d8:e6:ea:d6:b6:1d:82:c6:35:3c:52:24:
96:68:b2:d8:51:2a:4a:8d:8c:e0:78:db:21:05:cb:
d5:84:b8:13:3c:6a:30:95:05:7d:46:a1:38:9e:e6:
f2:a5:c0:c7:77:ee:a5:a8:56:04:c8:cd:d8:55:2b:
69:f4:9b:68:98:80:7d:48:a3:fe:2d:db:1c:97:fa:
73:55:18:6b:bb:6b:15:72:09:41:91:66:54:07:aa:
b9:6d:19:bb:de:bf:57:1b:ec:3b:d8:a6:84:08:ec:
07:4d:3f:c9:1d:57:62:35:00:33:75:28:4b:ae:18:
4c:3b:ca:fc:77:fb:df:2c:34:d3:40:01:5c:75:64:
02:15:44:03:1a:fa:a9:6e:e7:e8:bf:cf:4b:3c:f9:
7c:17:0a:bb:32:6f:cb:a2:ed:88:c1:46:33:47:ee:
fe:ed:85:80:c3:9c:8f:28:20:12:ca:9f:31:33:99:
67:af:2b:c1:96:7c:c2:e6:4f:41:c7:8e:9d:d3:b6:
fc:b7:58:be:23:8b:51:6c:52:fb:12:18:05:10:ae:
19:50:7d:c6:d3:b1:c3:2a:27:3c:9e:0f:a2:f8:fc:
1a:b4:9f:29:93:ea:07:4e:48:c5:c2:58:e3:f2:56:
47:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:91:1F:4A:A1:78:92:DD:53:B0:5F:C5:80:3E:0F:63:F7:DB:DC:4F
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/SJEfSqF4kt1TsF_FgD4PY_fb3E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5b81:2010::/44
2a04:5b81:2060::/44
2a04:5b81:2100::/40
Signature Algorithm: sha256WithRSAEncryption
54:b9:eb:83:52:ce:ef:19:f8:17:eb:f7:57:c1:83:20:28:ec:
d4:34:46:a6:dd:f2:55:5e:9f:8e:42:b3:f1:14:3a:7a:9e:c8:
cc:94:a8:55:9b:0a:2b:07:ec:9a:a5:85:fa:1b:22:c9:44:4d:
f8:3b:67:ae:70:fd:5a:a7:9c:92:b6:bb:5f:ab:b2:f0:f3:f9:
9e:d9:68:39:6f:5c:91:e6:43:57:04:da:e3:af:9d:7a:d7:85:
c6:ac:a7:cb:56:a4:99:f2:f7:02:3b:a7:17:5a:d2:41:b3:4d:
6d:57:91:6a:ba:e7:e8:ce:3d:a1:ba:aa:49:c1:fb:bd:49:8d:
de:4f:c0:b5:db:eb:b0:a9:f0:cb:28:49:ad:93:33:91:60:a2:
73:d8:1d:95:17:28:db:fe:f7:1e:fb:f1:37:f5:17:5c:67:7c:
e8:4b:7d:e0:8a:5a:5e:7a:d2:4e:f1:65:6c:5f:4d:de:67:bc:
36:71:18:0b:f5:55:28:25:46:40:87:06:83:b2:11:21:73:dd:
77:78:81:74:27:df:34:b8:be:ed:6c:00:d9:02:5d:53:d4:eb:
b5:b0:8a:58:30:27:d1:6a:77:3b:c7:34:db:de:3f:03:f6:a9:
66:4e:7d:41:85:18:ca:f0:12:3a:9f:79:28:62:a3:b8:43:ec:
7b:c3:d2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:46 2025 by rpki-client