Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/O1yXhkpsije07ZP5ZhjzRHfJCjU.roa
File: O1yXhkpsije07ZP5ZhjzRHfJCjU.roa (raw, json)
Hash identifier: UG6xuX/jYlaDXjO+cE1mcSoyNdjGtwXnmSStRG2o0mA=
Subject key identifier: 3B:5C:97:86:4A:6C:8A:37:B4:ED:93:F9:66:18:F3:44:77:C9:0A:35
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 01931D9C1C7BAFA7252848D284D0649834DA
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/O1yXhkpsije07ZP5ZhjzRHfJCjU.roa
Signing time: Mon 11 Nov 2024 23:43:10 +0000
ROA not before: Mon 11 Nov 2024 23:43:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 2a01:e281:a600::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1d:9c:1c:7b:af:a7:25:28:48:d2:84:d0:64:98:34:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Nov 11 23:43:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b5c97864a6c8a37b4ed93f96618f34477c90a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:74:ff:ee:94:c2:d2:c5:9e:f4:63:7f:38:
77:05:cb:cd:a6:51:cf:ef:aa:ee:51:97:20:66:ae:
4c:46:20:1a:58:da:a0:20:96:18:9d:04:b4:a3:61:
c4:8c:7a:cf:26:09:bc:00:4b:17:43:4c:e0:36:2e:
67:41:74:56:b4:b9:78:40:b9:9a:ad:c8:3c:4f:65:
af:34:8e:a5:ce:dd:12:f9:8c:f0:5b:d3:86:49:fe:
4b:16:e6:8d:dd:f5:60:1b:d0:b9:aa:9e:68:c0:20:
21:c5:4b:fb:c5:e7:79:ef:1e:19:c3:5f:0e:42:dd:
17:cd:29:ec:50:a4:51:8c:00:d1:5e:87:93:26:a7:
3d:63:3b:1a:f2:ca:3e:2e:86:cb:ab:2c:0f:a5:ed:
cb:1b:7c:35:26:a5:cf:2a:4c:98:98:71:5e:0c:7a:
7b:33:ca:10:5d:ba:3a:7d:db:2d:af:34:59:1e:19:
fd:0a:9c:7f:0e:4b:0e:ef:f8:40:1e:e1:3f:27:b3:
27:40:99:6b:47:50:8d:21:96:2d:99:32:9c:fa:d2:
19:38:22:99:46:c4:60:cc:64:7f:94:1f:eb:42:23:
33:88:be:0a:97:e1:66:64:d3:71:94:79:58:a5:a8:
78:ee:28:36:1f:a6:0a:a7:b0:54:96:57:6f:5a:80:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:97:86:4A:6C:8A:37:B4:ED:93:F9:66:18:F3:44:77:C9:0A:35
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/O1yXhkpsije07ZP5ZhjzRHfJCjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a600::/40
Signature Algorithm: sha256WithRSAEncryption
31:54:23:ee:a5:47:4a:c2:33:56:0c:54:a7:ee:9d:33:b3:ef:
e8:e8:d5:76:3e:47:e4:d9:32:b6:20:7c:20:5d:7c:f2:bb:00:
6c:47:cc:74:1a:9c:bf:54:61:f8:5b:95:26:0b:d2:8b:99:71:
d5:7c:84:d9:71:8c:2a:17:0e:17:61:5a:c7:df:8d:6d:e4:fa:
5c:cf:c7:6a:6f:d4:58:b3:8d:fd:78:10:57:fb:4f:d6:7d:2a:
e5:d5:8f:3e:30:9a:63:fc:41:70:8a:65:a4:85:a7:1c:e0:61:
ef:bf:da:43:59:61:9f:30:be:73:d6:2f:7a:72:7d:bf:eb:1e:
37:80:35:98:f1:48:45:11:aa:98:a3:9e:76:07:ac:a1:6e:0a:
69:fe:47:1e:88:aa:ff:79:a5:4d:fc:07:07:7d:09:6f:4a:88:
ef:b6:5b:82:1f:fe:0b:42:87:a2:25:8b:7a:a0:8a:88:cb:c2:
25:d2:d0:4e:10:e9:f5:27:8b:ae:2f:5a:1c:e6:75:27:fe:88:
cb:33:23:de:e8:99:9e:71:84:a8:6e:df:bc:a7:87:ed:7d:c0:
0e:6e:49:10:71:83:df:fc:99:a5:c0:ab:f3:6c:ca:d4:c9:24:
0a:cc:79:7a:c6:15:7c:31:66:c1:a1:42:09:ff:2e:e3:c6:89:
d1:6d:9f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:32 2025 by rpki-client