Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/v4XgbQWIliSpy5MptphmnR8Yc2M.roa
File: v4XgbQWIliSpy5MptphmnR8Yc2M.roa (raw, json)
Hash identifier: 9fGm6fJ4JOB/twAwVLghRughIDI4fYkgaXaTifp3P0A=
Subject key identifier: BF:85:E0:6D:05:88:96:24:A9:CB:93:29:B6:98:66:9D:1F:18:73:63
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01937C27E762BA6E70CE712D6D728A197BFC
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/v4XgbQWIliSpy5MptphmnR8Yc2M.roa
Signing time: Sat 30 Nov 2024 08:20:10 +0000
ROA not before: Sat 30 Nov 2024 08:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a0b:9004::/32 maxlen: 32
2a0d:3c42::/32 maxlen: 32
2a0d:95c2::/32 maxlen: 32
2a0d:afc4::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0d:c104::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 17:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:27:e7:62:ba:6e:70:ce:71:2d:6d:72:8a:19:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 30 08:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf85e06d05889624a9cb9329b698669d1f187363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:43:b7:76:95:5c:01:b8:05:ac:2f:dd:3a:be:
3d:bf:13:5b:a1:33:8d:21:cd:92:ce:24:24:22:27:
ea:d9:89:76:60:b3:50:d8:cd:20:ab:a4:54:68:1a:
e8:34:a9:10:42:ac:78:5f:18:c5:94:de:a3:c4:11:
fb:98:49:98:8f:20:87:12:45:70:23:e9:2b:84:88:
4f:75:0a:66:38:9a:dc:f2:9e:64:3b:7c:04:95:51:
8e:fe:11:c5:26:18:97:ef:bc:ed:9f:1a:cc:a9:c9:
bb:f5:e6:73:93:89:ce:6a:dd:ce:8e:3c:7b:88:05:
20:48:b6:a9:72:6b:a9:c2:38:10:3d:7f:5e:61:38:
80:8e:80:ee:6c:af:f7:51:7b:54:1c:38:d4:ab:7c:
d2:ac:3f:9f:f2:f9:f2:7a:a0:d6:f6:37:c7:5b:83:
eb:9d:47:5f:9b:f7:ef:16:03:e5:35:1b:32:20:13:
dd:ef:91:69:52:68:7e:dd:12:13:d2:9e:0a:c3:e5:
0a:ad:6e:bb:6e:3d:37:c0:63:ba:d2:67:77:1e:29:
42:2d:d8:95:ef:38:2a:d7:0b:f2:37:16:84:7b:51:
82:7f:f9:26:0d:57:2f:63:04:28:7a:42:cf:81:08:
bc:2d:ef:89:0f:09:43:89:05:a1:b3:63:79:93:5d:
c6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:85:E0:6D:05:88:96:24:A9:CB:93:29:B6:98:66:9D:1F:18:73:63
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/v4XgbQWIliSpy5MptphmnR8Yc2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a0b:9004::/32
2a0d:3c42::/32
2a0d:95c2::/32
2a0d:afc4::/31
2a0d:afc7::/32
2a0d:c102::/32
2a0d:c104::/32
Signature Algorithm: sha256WithRSAEncryption
1d:03:9a:50:67:3b:0e:a0:8b:54:50:88:df:9f:34:48:ab:ec:
72:6e:45:fe:99:85:d6:58:b3:77:ae:0f:42:e0:d4:d1:00:91:
1a:a7:05:8b:0d:27:a4:65:b2:79:b1:f4:50:d2:74:fb:0d:e7:
20:7d:47:28:5c:cd:ae:8e:ad:8b:0e:80:af:f8:64:f8:90:02:
9a:e5:e7:67:2f:ff:91:8f:93:a6:8a:c8:5b:da:1b:07:9d:a3:
e6:e3:ac:21:79:23:a8:1a:ce:26:9e:5d:65:35:24:d6:76:b0:
d8:b3:b0:b1:ad:98:44:bd:72:40:8a:2c:91:4b:3b:fe:5a:04:
58:fa:00:94:f6:38:4b:bc:55:6b:33:cb:28:12:c1:68:3e:26:
0f:d5:90:ff:e2:5b:a2:71:8a:5e:14:8d:01:4c:2c:e9:97:64:
05:0f:71:af:76:20:21:06:b0:48:65:b0:08:9f:9d:fa:a2:b7:
ad:be:d2:92:68:3f:d9:ad:05:3e:42:de:6b:ed:c9:d6:9c:54:
fb:b7:a6:d8:20:f9:ad:c4:4b:78:e1:be:3d:b4:f0:54:1f:29:
c2:7a:78:88:ea:d9:bb:1d:c2:04:88:7e:aa:33:21:94:f0:4c:
fa:24:94:ae:32:af:1f:80:21:27:09:08:2b:48:78:ea:6e:e8:
ee:64:dd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:09:10 2025 by rpki-client