Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wx1eiPqJJlc8coUeAYl-Bmm6gPo.roa
File: wx1eiPqJJlc8coUeAYl-Bmm6gPo.roa (raw, json)
Hash identifier: u0QWQtNw4ampFEryy2fp66pRZkAHQIVxMNiRrdYvIS4=
Subject key identifier: C3:1D:5E:88:FA:89:26:57:3C:72:85:1E:01:89:7E:06:69:BA:80:FA
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01936ECC682CFF3DEDAAFD6370A2E4FE6B37
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wx1eiPqJJlc8coUeAYl-Bmm6gPo.roa
Signing time: Wed 27 Nov 2024 18:05:09 +0000
ROA not before: Wed 27 Nov 2024 18:05:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0d:c104::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 28 Nov 2024 08:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6e:cc:68:2c:ff:3d:ed:aa:fd:63:70:a2:e4:fe:6b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Nov 27 18:05:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c31d5e88fa8926573c72851e01897e0669ba80fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7f:3f:9f:c4:45:eb:ec:37:61:70:86:17:49:
14:a3:50:b2:31:37:bb:7c:1e:c1:79:33:3a:fb:07:
92:41:bd:49:9d:61:24:1f:85:f7:18:6d:f1:6d:31:
4b:05:60:48:a9:57:56:e8:5d:20:f6:d7:17:ca:8a:
3e:54:2f:db:42:d4:90:6e:6a:52:a5:8a:67:39:d0:
04:d9:f1:e0:01:77:d6:a3:32:13:e6:2a:a9:f4:10:
6d:1e:aa:8f:d5:b6:30:42:0e:33:e9:f5:e0:cd:55:
bf:a7:6c:bb:a7:0e:92:4a:2c:9e:9b:89:b6:ab:84:
00:2f:e7:a8:fd:55:44:e6:a2:ec:cf:a6:3a:82:ee:
54:20:e7:2b:71:c9:cd:79:c4:80:af:3c:49:b2:a4:
6c:41:50:62:b1:96:ce:a4:41:e2:79:25:2d:db:c5:
73:c3:c5:58:14:41:05:40:c0:3f:cf:0f:4e:c9:6f:
19:9b:3d:0b:cc:a1:09:1a:aa:20:4b:71:4a:dd:22:
64:c8:9d:5b:26:4f:69:8d:6b:25:19:82:55:44:90:
d9:e3:00:72:79:5b:a2:c0:76:30:4b:05:a6:a3:72:
34:53:fc:59:dd:64:d0:72:8c:3e:3a:f0:5d:8c:19:
5d:82:58:7f:ab:c6:fc:0c:7a:17:68:85:e1:5e:4e:
ba:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1D:5E:88:FA:89:26:57:3C:72:85:1E:01:89:7E:06:69:BA:80:FA
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/wx1eiPqJJlc8coUeAYl-Bmm6gPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a0d:afc5::/32
2a0d:afc7::/32
2a0d:c102::/32
2a0d:c104::/32
Signature Algorithm: sha256WithRSAEncryption
8f:9b:a9:9e:f5:79:83:8c:7f:95:59:31:c9:11:f5:05:0d:9f:
71:f4:6b:0d:bb:0a:b6:9c:b5:aa:53:76:21:3d:ff:01:c0:dc:
9d:77:32:fa:ec:91:75:af:ac:d8:48:d7:f0:c0:78:20:bd:dd:
dc:a9:81:ee:48:1d:56:5a:de:36:e9:09:31:3e:6d:0a:25:fd:
5f:36:cd:25:91:77:fe:41:ba:90:69:13:10:46:3c:29:ae:7a:
df:d6:1a:fa:4e:72:af:98:bd:17:2d:4c:e7:ef:c6:16:b0:ed:
eb:a1:58:75:97:2b:b1:23:de:49:dc:44:ee:99:b4:ba:a0:97:
91:b4:ad:e7:8a:3a:9a:76:a0:9a:bb:03:ad:ac:9b:4e:37:7b:
e0:d4:d7:28:d1:d5:b9:be:86:82:14:c9:d7:b3:02:ec:7b:94:
90:12:9d:af:f3:17:41:cf:29:6a:55:0a:ee:f2:78:3b:f6:46:
37:e7:87:0b:18:ad:0e:8d:52:cd:2b:7d:fb:07:09:2f:bb:f1:
b0:11:55:03:02:10:c6:c2:32:24:16:0d:79:47:f6:02:92:56:
dd:13:66:c5:47:d6:43:72:af:84:85:97:5f:a6:09:96:66:c5:
76:10:4f:2b:21:ed:3b:b5:8a:bb:01:54:8e:c0:18:7b:37:cb:
24:6e:3b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:44 2025 by rpki-client