Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cjNvqt1qqXDTgl7Xl4oK5kos0b8.roa
File: cjNvqt1qqXDTgl7Xl4oK5kos0b8.roa (raw, json)
Hash identifier: Rv67xVt90AxUICOnyXsM7FBeYAcxs6LAWAPxn45Mu4M=
Subject key identifier: 72:33:6F:AA:DD:6A:A9:70:D3:82:5E:D7:97:8A:0A:E6:4A:2C:D1:BF
Certificate issuer: /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial: 0194AD833C1F8C9E0EE41E03A484EE2612C4
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cjNvqt1qqXDTgl7Xl4oK5kos0b8.roa
Signing time: Tue 28 Jan 2025 15:24:06 +0000
ROA not before: Tue 28 Jan 2025 15:24:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31367
IP address blocks: 2a00:16f8:100::/40 maxlen: 56
Validation: Failed, certificate revoked on Tue 25 Mar 2025 08:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ad:83:3c:1f:8c:9e:0e:e4:1e:03:a4:84:ee:26:12:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Validity
Not Before: Jan 28 15:24:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72336faadd6aa970d3825ed7978a0ae64a2cd1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ba:a0:f0:93:da:4d:27:8f:45:87:01:e6:dc:
11:97:1d:3e:52:71:37:11:a6:55:35:0a:c4:3c:0e:
09:26:90:f7:85:ee:48:ed:83:fe:56:1a:d8:cb:d2:
e7:ee:de:44:e0:23:43:92:36:b2:83:f3:09:4d:c6:
7e:37:15:7d:5c:82:c0:88:9b:b0:63:21:12:b8:50:
13:62:52:2c:dc:52:34:3d:5e:1f:7e:aa:93:89:0f:
d5:e9:f7:3c:79:64:66:53:c1:2e:99:17:04:73:7b:
e7:c8:6c:8a:28:97:0f:04:05:87:b0:ce:a2:d1:9c:
58:20:74:e6:df:2e:62:8c:78:3e:0d:54:33:7b:e7:
11:34:c5:dd:1f:5d:4e:e9:da:b4:85:16:40:2d:76:
60:bc:d2:16:23:21:20:ec:35:26:3f:20:43:7e:3a:
3e:d7:88:ca:45:bb:40:a2:c7:b0:3f:b4:fc:7e:49:
11:6e:84:bb:0a:ca:dc:e2:a3:79:ee:d1:7a:6d:8b:
29:11:3f:8a:5c:73:b2:39:e2:94:9f:03:31:dc:13:
9a:17:7e:45:6e:33:6f:a3:b3:b6:bc:50:bc:4b:17:
1a:f3:2a:c2:eb:09:1a:ad:b4:4f:1a:13:93:ca:0b:
86:9e:4b:d5:f6:24:bc:6b:7d:93:e1:15:f7:3d:b8:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:33:6F:AA:DD:6A:A9:70:D3:82:5E:D7:97:8A:0A:E6:4A:2C:D1:BF
X509v3 Authority Key Identifier:
keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/cjNvqt1qqXDTgl7Xl4oK5kos0b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:16f8:100::/40
Signature Algorithm: sha256WithRSAEncryption
bc:4d:f4:9d:da:81:e9:90:ef:7f:ee:89:59:f3:26:7d:76:1e:
93:01:33:c4:55:f1:d7:15:e9:15:4d:5f:20:29:26:71:76:18:
f4:c8:82:81:c9:37:d9:12:04:a0:70:1a:8e:d3:e2:45:f0:3a:
6e:c7:ab:6b:8a:cb:06:d6:7f:f0:08:a4:0b:a5:c9:07:09:e6:
35:31:e6:d5:1e:f3:bd:2d:11:6f:31:83:5f:9d:56:00:be:ea:
87:51:38:38:15:a9:b7:ff:c0:00:77:7b:55:e5:42:36:ee:18:
7e:a8:ee:39:00:dc:8c:ae:bf:e4:b1:80:6f:34:df:fc:b0:b8:
a6:c9:ea:ca:27:60:f1:e8:99:00:50:f7:b2:82:5b:7d:92:f1:
27:a9:65:56:5b:6e:24:dd:52:a0:3a:7e:2b:11:b9:ca:3b:77:
77:30:1d:b8:6c:79:7b:9c:61:91:c1:94:25:80:42:30:62:d1:
db:e6:96:aa:25:95:69:2d:d7:7d:bc:b4:77:c9:c2:01:e7:0a:
63:31:4a:33:e8:0a:77:9c:8f:56:5b:8c:b4:a0:cc:29:81:c0:
24:11:29:5d:d2:6d:d1:5f:b4:fe:be:14:ff:96:ff:0c:c2:c1:
6a:8d:45:83:bc:15:7e:59:18:23:24:37:cd:3d:14:9d:d4:f6:
35:72:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:40 2025 by rpki-client