Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/gce2ZX3yUIrb-CCnWO-vOY6P7mE.roa
File: gce2ZX3yUIrb-CCnWO-vOY6P7mE.roa (raw, json)
Hash identifier: A9T8LRRMRk0tynvg0/XtlCyV06M4sAL+c3vFuWVpklc=
Subject key identifier: 81:C7:B6:65:7D:F2:50:8A:DB:F8:20:A7:58:EF:AF:39:8E:8F:EE:61
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0193A4DA2F68962C6DA1ECD87FF92E7935C2
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/gce2ZX3yUIrb-CCnWO-vOY6P7mE.roa
Signing time: Sun 08 Dec 2024 05:59:42 +0000
ROA not before: Sun 08 Dec 2024 05:59:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50104
IP address blocks: 2a01:e281:a764::/48 maxlen: 48
2a01:e281:b300::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a4:da:2f:68:96:2c:6d:a1:ec:d8:7f:f9:2e:79:35:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Dec 8 05:59:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81c7b6657df2508adbf820a758efaf398e8fee61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7f:e3:5f:99:f8:88:43:65:54:5a:81:30:35:
0c:d3:26:d3:c9:53:7f:40:94:43:c3:20:cd:47:64:
1c:c4:3a:a2:f1:af:91:b0:dc:bf:1b:9a:39:86:de:
ea:bf:7a:6b:19:a9:56:56:f9:97:a9:91:f4:49:7c:
39:fb:7e:b9:e6:80:58:a7:b9:82:e2:fd:6e:43:59:
16:fc:ec:da:19:a4:14:42:3a:16:95:da:b9:8c:ee:
2d:0d:00:4c:4f:71:49:d4:9e:9b:57:b4:c0:3f:9e:
e5:a2:e1:d1:a7:54:2d:25:cf:87:37:ec:c6:13:a7:
65:d6:c1:1f:a5:63:4f:41:06:85:4e:78:cf:19:1f:
83:09:a1:bb:64:76:a0:19:82:7a:45:a1:f6:cd:47:
b6:6c:4b:a6:93:bb:d9:73:4f:5b:20:16:6b:7c:97:
27:ad:41:6b:e7:48:9d:9f:64:a3:ff:30:20:44:0a:
a5:c3:b3:8e:18:90:38:40:97:28:c6:4c:15:86:20:
99:d6:51:0e:f1:f3:22:8d:bf:b4:fd:8d:6e:71:f3:
f4:fd:8f:62:59:14:ce:4a:3b:e1:30:a9:ed:38:6f:
58:3a:a2:e1:38:82:67:64:40:71:25:61:3a:37:ce:
f8:ec:5e:38:f4:b6:43:77:82:7a:d3:0f:1e:84:ca:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C7:B6:65:7D:F2:50:8A:DB:F8:20:A7:58:EF:AF:39:8E:8F:EE:61
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/gce2ZX3yUIrb-CCnWO-vOY6P7mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a764::/48
2a01:e281:b300::/40
Signature Algorithm: sha256WithRSAEncryption
5b:b9:52:88:b1:62:51:97:00:7a:0e:74:7b:f1:11:71:cb:fc:
e6:65:f7:da:9f:c5:23:dc:b3:fb:25:01:71:e5:83:4e:93:96:
0e:c6:79:13:6b:fe:b4:d4:b6:c4:52:ea:3e:ca:5c:27:22:12:
ee:81:ba:cc:cc:c3:5c:92:24:a0:94:41:54:7b:02:e7:a4:3e:
91:f0:50:9b:d4:9c:fb:ba:3b:b8:8d:ac:e2:06:2f:c4:b5:80:
c9:d2:1d:3f:67:39:6e:11:72:79:2d:fc:9e:e3:36:ee:b8:a0:
15:52:4d:98:78:9f:f8:84:d9:75:4c:8e:4f:44:f0:e9:38:1c:
a4:47:55:6f:bd:76:b6:bc:bb:b2:4e:c4:90:da:3b:bf:f8:c1:
e0:ec:2f:3d:7a:bf:e9:5c:58:ec:3d:f5:6b:bd:3c:fd:21:05:
77:df:76:16:48:ca:b1:d1:8d:eb:03:60:ea:29:fa:2d:d3:d3:
2a:cf:08:40:07:04:12:ca:a2:b5:eb:a7:f8:56:a8:d6:db:d8:
96:84:43:7e:76:fc:8a:b1:38:50:d2:5c:a8:0e:19:48:38:21:
7d:2d:aa:24:ac:81:e8:2d:9a:b8:38:5b:71:a7:5a:7b:32:12:
8c:2a:e5:8e:88:ca:8c:b7:42:da:f3:34:35:b8:33:8e:3e:f7:
ba:78:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:43:51 2025 by rpki-client