Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jIUSKF5LV2al9w_lvcr4tkKqEU8.roa
File: jIUSKF5LV2al9w_lvcr4tkKqEU8.roa (raw, json)
Hash identifier: aeZGcQy3TgOuBHb8vl/M3hMUrcxHNs1yCFQdFi8RRu4=
Subject key identifier: 8C:85:12:28:5E:4B:57:66:A5:F7:0F:E5:BD:CA:F8:B6:42:AA:11:4F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0193EFF3EA87244D022AE9882542698B9730
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jIUSKF5LV2al9w_lvcr4tkKqEU8.roa
Signing time: Sun 22 Dec 2024 19:59:20 +0000
ROA not before: Sun 22 Dec 2024 19:59:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 2a09:2983::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ef:f3:ea:87:24:4d:02:2a:e9:88:25:42:69:8b:97:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Dec 22 19:59:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8c8512285e4b5766a5f70fe5bdcaf8b642aa114f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:28:d0:e0:22:39:f6:e6:4a:50:ab:73:fc:66:
26:c3:96:4e:94:84:35:45:d6:ac:1a:75:95:41:c0:
20:63:26:ee:e1:37:dc:f0:72:30:9e:4e:8e:e9:e1:
ef:1e:1a:17:de:d8:0a:22:1c:64:1a:50:19:3f:9c:
5a:c6:a0:8f:50:a6:d8:77:ae:cd:23:f8:d6:3a:f7:
0f:77:4a:71:8f:00:03:6c:65:b1:a7:63:39:67:e8:
1e:8b:10:5a:9e:8d:ba:e6:5a:30:31:7e:be:f7:36:
43:27:7a:9c:0a:8b:d8:97:2a:c0:58:b4:e9:56:8a:
a6:44:67:eb:0b:24:61:dd:63:92:b1:1c:3e:40:b0:
29:88:ff:28:97:7f:53:df:cd:db:af:45:df:76:f6:
3a:40:53:93:74:04:b1:7d:3d:9e:79:f3:23:09:be:
84:10:b6:db:3a:de:c8:9e:83:18:72:f4:51:69:7d:
f1:db:5c:31:ea:1a:43:52:58:9b:00:c6:e8:49:9f:
6f:67:0d:20:1a:51:43:cc:1a:1b:f9:fa:ee:f3:47:
99:2d:54:76:a1:84:e4:57:8f:be:14:98:2a:44:f9:
84:11:69:19:5e:d8:21:30:ca:20:67:01:73:48:c3:
b0:a8:d6:dc:ce:9c:38:0d:db:a3:69:08:c1:6d:4d:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:85:12:28:5E:4B:57:66:A5:F7:0F:E5:BD:CA:F8:B6:42:AA:11:4F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/jIUSKF5LV2al9w_lvcr4tkKqEU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:2983::/32
Signature Algorithm: sha256WithRSAEncryption
16:32:8c:b9:80:de:f7:29:cd:5f:4f:cb:fc:7d:da:75:7f:1b:
23:0e:bb:94:c2:42:09:e2:00:7d:5c:ef:c0:30:df:3e:a1:eb:
15:1b:de:24:f9:03:be:d7:35:ff:43:c4:88:f7:0d:31:60:17:
a2:da:98:7a:63:2e:62:b8:7a:9d:fa:64:c8:f8:a2:82:e5:f4:
db:0f:02:da:0f:b0:60:32:db:a6:c1:22:1d:71:90:55:8e:a6:
6f:59:ea:a3:3c:07:9b:55:4d:08:34:48:a7:93:13:b6:b3:b9:
ed:eb:38:e8:fd:a7:4b:6f:14:db:e0:d7:89:b6:ee:fb:46:4e:
ff:28:de:d6:99:1a:a5:a1:c4:db:2b:6a:a6:e7:9a:5e:b7:16:
1f:44:57:1e:a3:76:2b:17:f6:13:01:dc:2b:99:0c:3b:ed:f4:
03:4b:22:da:d7:66:8b:57:67:b0:40:1b:69:31:e3:0b:f5:25:
7a:fa:c2:d7:06:81:a8:2c:ed:da:4b:29:0b:b2:ea:50:6e:b4:
82:7e:ab:23:fc:1d:40:63:87:2d:11:fd:e6:2f:78:64:d1:a6:
9b:d5:0f:de:35:aa:82:75:79:7f:d4:df:fb:02:d5:aa:a8:82:
ca:9a:87:11:d8:ff:4e:7b:cc:9e:bc:1c:d2:1e:f2:e0:5b:76:
ef:b8:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:36:13 2025 by rpki-client