Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/KADqTYs5Hzhbe3fUXdkLs5huidg.roa
File: KADqTYs5Hzhbe3fUXdkLs5huidg.roa (raw, json)
Hash identifier: RTE2nnUClIcUb+66CUeJRDWjD0TnasIL1FfBbyvukkI=
Subject key identifier: 28:00:EA:4D:8B:39:1F:38:5B:7B:77:D4:5D:D9:0B:B3:98:6E:89:D8
Certificate issuer: /CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Certificate serial: 0191BDC9780885196E2544BDFEBCA4AE9137
Authority key identifier: EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/KADqTYs5Hzhbe3fUXdkLs5huidg.roa
Signing time: Wed 04 Sep 2024 16:06:22 +0000
ROA not before: Wed 04 Sep 2024 16:06:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214285
IP address blocks: 2a01:f480::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Sep 2024 21:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bd:c9:78:08:85:19:6e:25:44:bd:fe:bc:a4:ae:91:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eed154f96adceb9bcee0bdc0b835afbe0509751a
Validity
Not Before: Sep 4 16:06:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2800ea4d8b391f385b7b77d45dd90bb3986e89d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:bc:b6:03:ac:4d:ff:8c:77:c5:ba:e0:51:c7:
71:1e:8b:69:78:dd:87:5d:f7:03:6c:5e:2d:06:64:
3e:0b:01:92:fa:2d:67:7b:c3:35:ae:46:f7:0c:4d:
8d:b0:37:4f:9a:1a:39:5a:18:e8:1c:88:c1:bc:25:
f8:15:af:30:8d:17:0e:36:7e:59:a5:7d:30:b9:51:
a9:5b:26:9a:40:92:e4:c8:62:99:01:05:a5:34:0f:
03:d9:28:e1:f1:af:73:75:73:9b:52:2c:ef:34:3d:
c1:39:c1:6a:e0:0b:b5:fb:38:4c:dd:07:cd:f7:31:
47:eb:00:70:b5:66:37:5d:98:cf:a4:3d:35:7a:2a:
47:0c:6c:67:99:18:d2:0e:24:52:95:2e:f1:46:38:
99:1d:e5:89:04:22:a1:7d:0a:f8:2c:87:e7:b8:e6:
db:dc:6c:e9:11:97:14:36:c3:ff:a8:de:40:37:fe:
42:6c:00:bc:d2:24:fe:58:55:a1:c6:16:34:3a:87:
a0:2d:6d:a2:58:9d:03:a4:41:15:0d:6d:2a:78:99:
e3:19:ea:7f:dd:61:10:71:7d:81:08:23:1f:e5:20:
fe:31:74:4c:b5:e4:0e:ea:6d:8f:82:4f:a5:7c:26:
4e:cf:fc:f0:ec:23:f4:1c:5d:97:ca:4b:05:ec:53:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:00:EA:4D:8B:39:1F:38:5B:7B:77:D4:5D:D9:0B:B3:98:6E:89:D8
X509v3 Authority Key Identifier:
keyid:EE:D1:54:F9:6A:DC:EB:9B:CE:E0:BD:C0:B8:35:AF:BE:05:09:75:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tFU-Wrc65vO4L3AuDWvvgUJdRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/KADqTYs5Hzhbe3fUXdkLs5huidg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b79420-8901-4169-b7f6-76b7eed51e4a/1/7tFU-Wrc65vO4L3AuDWvvgUJdRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f480::/32
Signature Algorithm: sha256WithRSAEncryption
a1:60:8c:35:0c:07:9a:89:2a:7e:f2:04:3f:cd:5b:de:e5:28:
ea:b6:e1:0a:32:d6:fb:c5:28:fe:2f:94:17:d3:77:fa:62:ae:
17:dc:0b:70:cc:21:0e:a5:c1:ff:26:37:af:a7:e3:88:5a:86:
40:9a:86:dd:ac:73:7b:4e:d2:c8:48:d9:48:d7:97:7d:c6:eb:
91:5f:f0:5f:c8:94:de:10:4e:2b:c1:91:28:7e:b9:47:f2:c2:
b5:31:5e:c0:50:b8:dd:b5:e4:34:fa:e1:a0:a4:c1:82:48:ef:
85:83:54:d5:e8:be:78:d8:fc:46:d4:25:eb:f3:18:24:02:93:
40:46:1a:c7:18:56:61:b1:13:cb:ea:65:28:fa:83:20:3f:0e:
48:1c:74:2a:d4:12:99:f1:7b:a2:5d:83:b0:21:64:7f:15:b5:
96:a3:54:8d:83:89:45:e2:91:42:0d:96:8c:17:b2:7c:7a:2e:
bf:6b:20:6c:9f:fd:73:76:04:65:22:85:c8:df:62:01:df:fc:
a5:85:12:85:74:7a:38:ed:a3:1a:a4:33:19:65:3c:76:9e:0c:
10:de:68:89:2f:93:ad:28:6d:f6:1d:08:ac:0f:1a:84:4f:a9:
0c:68:b2:0b:5a:c8:5e:4f:e3:d4:4d:bd:d0:b2:90:81:fd:03:
3c:96:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:48:39 2025 by rpki-client