Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/XbTDa8IaQ1tzOvC9-IulFPD3Cks.roa
File: XbTDa8IaQ1tzOvC9-IulFPD3Cks.roa (raw, json)
Hash identifier: 4NUTUueNOe+yEEi0R1vfvZUKHT7yabLx847rfX1eNmI=
Subject key identifier: 5D:B4:C3:6B:C2:1A:43:5B:73:3A:F0:BD:F8:8B:A5:14:F0:F7:0A:4B
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019371D396C64F239632DAC2F2B71B5FC1A9
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/XbTDa8IaQ1tzOvC9-IulFPD3Cks.roa
Signing time: Thu 28 Nov 2024 08:11:52 +0000
ROA not before: Thu 28 Nov 2024 08:11:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a0d:3c42::/32 maxlen: 32
2a0d:95c2::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0d:c104::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 30 Nov 2024 08:19:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:71:d3:96:c6:4f:23:96:32:da:c2:f2:b7:1b:5f:c1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 28 08:11:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5db4c36bc21a435b733af0bdf88ba514f0f70a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:bc:88:cb:8c:b0:a6:b7:d0:ac:18:43:3b:
f4:37:63:6a:e0:18:31:6e:d7:8b:d5:21:cc:9e:5a:
45:2d:ed:cf:b7:05:51:cd:c1:96:a8:bb:43:7c:3f:
fb:9e:87:7d:6d:93:d9:30:90:bc:80:c8:81:8b:aa:
34:85:3b:69:6c:f9:0e:7b:66:0d:0b:0f:e1:2d:c9:
a1:70:66:8c:24:a9:9b:d3:46:94:95:52:25:0e:e8:
9f:b6:1c:cb:6c:8c:db:d2:47:d7:f8:f8:84:e3:8f:
d6:30:25:3f:ee:75:20:23:6c:17:96:a4:f5:aa:04:
bf:9c:7e:3c:03:3c:6c:1b:ab:30:99:09:1f:ff:d8:
e6:03:8e:76:b2:94:f6:1f:cb:77:8e:5b:af:56:e2:
61:aa:34:13:97:dc:57:1e:92:50:80:d5:21:73:da:
32:12:85:4a:7d:7f:4b:75:b1:c5:7e:08:85:9b:e8:
47:3a:70:c4:93:03:30:cf:39:32:ef:6e:74:34:87:
ac:f1:ca:c2:11:1e:2f:6d:2c:e9:8e:55:61:0f:2e:
c6:99:44:1f:7a:30:6b:50:c9:d1:3b:14:7b:d1:db:
46:30:bd:83:68:67:6e:6a:4b:36:2d:70:db:cb:11:
08:81:ed:fb:cc:c8:bc:61:00:01:4a:a7:ab:57:44:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B4:C3:6B:C2:1A:43:5B:73:3A:F0:BD:F8:8B:A5:14:F0:F7:0A:4B
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/XbTDa8IaQ1tzOvC9-IulFPD3Cks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a0d:3c42::/32
2a0d:95c2::/32
2a0d:afc5::/32
2a0d:afc7::/32
2a0d:c102::/32
2a0d:c104::/32
Signature Algorithm: sha256WithRSAEncryption
42:59:73:34:ae:09:9d:41:d1:65:9f:fc:89:60:9f:2b:da:1a:
76:58:76:97:a0:36:18:75:59:8a:99:7d:66:b7:68:f1:82:88:
e3:3d:b5:9d:8a:65:3d:83:04:52:3a:60:59:50:02:e2:35:e0:
2b:a4:b9:dc:a4:ca:47:9e:1c:f6:a3:34:29:29:fb:73:8b:b5:
17:90:58:71:41:f4:a1:65:d8:29:88:9f:f2:82:57:ca:7f:46:
2b:3f:ce:07:93:46:c5:1b:59:44:6d:45:e3:b7:c8:58:64:a2:
7a:1e:39:16:2b:6f:a6:7c:a0:ef:f6:32:6f:09:0c:97:68:ee:
a9:f6:5a:ca:a0:b9:bb:b9:4c:9b:18:db:9e:31:56:04:7b:1d:
ac:08:f2:38:23:fb:74:dd:83:cd:81:e6:55:8c:84:fe:93:98:
4a:d3:05:7f:8b:62:01:29:33:23:91:ad:04:f0:6a:cc:36:eb:
0c:75:d0:97:e7:a1:20:b3:31:26:f3:25:be:12:70:65:61:e6:
5b:60:85:be:79:e4:a5:55:e5:5a:0d:6a:e2:0f:de:92:a3:4a:
f1:5e:a4:41:da:2c:ba:a9:e8:9f:ae:26:a8:c6:9f:da:b7:1a:
96:27:8b:8a:9c:bd:21:ff:f2:68:b2:a8:4b:86:87:f9:e0:24:
11:02:8e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:03:01 2025 by rpki-client