Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8gLQEo74SX8ygfPBF1wykHdgjrU.roa
File: 8gLQEo74SX8ygfPBF1wykHdgjrU.roa (raw, json)
Hash identifier: wUdk+CHZ8hTCBzPJMLGseQ/p8HZ8M0olQ9MviDeGAOI=
Subject key identifier: F2:02:D0:12:8E:F8:49:7F:32:81:F3:C1:17:5C:32:90:77:60:8E:B5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942174A2D6C218DFC607E45956E8B23C41
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8gLQEo74SX8ygfPBF1wykHdgjrU.roa
Signing time: Wed 01 Jan 2025 10:41:19 +0000
ROA not before: Wed 01 Jan 2025 10:41:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200993
IP address blocks: 2a0e:b107:2691::/48 maxlen: 48
2a0e:b107:278a::/48 maxlen: 48
2a10:ccc1:1330::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:74:a2:d6:c2:18:df:c6:07:e4:59:56:e8:b2:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 1 10:41:19 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f202d0128ef8497f3281f3c1175c329077608eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:10:1c:ea:2a:1b:ca:14:45:4d:58:15:e9:
e7:8c:fc:ca:13:4d:23:5b:bf:8e:7f:0c:53:0e:ce:
c0:ef:44:3b:d0:e2:06:d5:f4:6a:61:84:69:cd:d0:
ae:20:0d:b0:4e:23:28:75:7c:81:59:12:40:63:08:
a8:21:26:02:65:1e:c6:28:a6:b1:0a:5a:76:23:cb:
2a:f8:bd:18:29:f0:86:df:c1:7b:ac:33:68:11:66:
e9:50:5e:50:ac:94:3a:7f:ba:7d:41:7c:8b:a0:70:
de:cc:72:35:75:50:43:da:a1:70:72:0c:ab:d5:e9:
87:73:e6:c9:9c:a6:4f:cc:7e:bb:c3:db:15:aa:95:
8d:5e:f8:3c:aa:70:42:c8:d3:75:1e:41:dd:a8:98:
3f:d1:16:73:5b:15:c9:64:c5:d8:d3:76:79:7e:ce:
14:b1:e3:fb:e9:a4:8b:a1:ea:a6:0c:17:a5:f4:a3:
6d:83:6a:8c:1e:be:36:e3:3d:2d:06:11:0d:cc:54:
b4:45:b4:1a:c6:1f:0a:64:68:82:7a:55:8f:a0:dc:
a0:b0:61:f0:64:3d:f5:28:ea:12:2d:a8:89:43:6b:
42:8b:21:47:8f:0c:32:35:ff:63:84:14:bf:bc:46:
75:01:2b:fa:03:c7:6c:de:a1:d5:1b:fa:ba:8b:6d:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:02:D0:12:8E:F8:49:7F:32:81:F3:C1:17:5C:32:90:77:60:8E:B5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/8gLQEo74SX8ygfPBF1wykHdgjrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:2691::/48
2a0e:b107:278a::/48
2a10:ccc1:1330::/44
Signature Algorithm: sha256WithRSAEncryption
88:6c:18:a7:25:3c:7e:7f:9d:c3:60:c3:e0:3b:ce:62:54:77:
9f:7a:f9:42:c8:21:db:f7:80:18:df:08:6d:e7:73:75:b5:a9:
47:20:f7:af:11:24:f4:28:ff:c7:20:00:d6:32:d4:c7:08:82:
d9:14:8e:b5:69:0a:58:96:de:ef:b1:20:75:b5:16:bf:60:9f:
03:30:b9:09:89:b2:fd:32:0e:1f:49:d1:c9:61:07:81:9f:07:
ea:b7:0f:04:f4:43:47:6c:0e:f5:ec:a7:18:e3:2e:f8:9d:43:
9d:78:51:87:85:e4:19:9b:d8:67:6b:15:d9:f8:bb:7b:72:cd:
e4:cc:56:a3:ac:eb:45:61:ad:79:31:59:0e:71:ca:48:91:d5:
d7:97:54:65:ae:37:28:50:a8:c7:c9:13:3c:9d:72:7e:e1:40:
ca:b1:47:3a:6a:f2:e7:6f:b0:75:53:4e:a3:84:c4:62:56:4a:
ec:1e:66:ad:3c:58:58:9d:72:57:aa:ca:f2:e5:a1:19:53:95:
59:4e:71:59:3b:37:fb:ff:9d:67:f2:03:d1:d9:3f:ea:2d:93:
60:e2:56:1a:d6:1b:79:4f:72:1b:2b:a7:9c:bb:8a:16:82:dd:
a0:88:d3:cb:f3:99:2d:a5:7c:7c:0f:5b:e0:25:94:30:0b:e9:
4f:cf:41:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:45:46 2025 by rpki-client