Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H4MfIRUOi2MxE2L7eFLPCsgmCOI.roa
File: H4MfIRUOi2MxE2L7eFLPCsgmCOI.roa (raw, json)
Hash identifier: n72wmKNXieGW1aS/jzfWoZoytFqQKI+e/jCaj9JQScc=
Subject key identifier: 1F:83:1F:21:15:0E:8B:63:31:13:62:FB:78:52:CF:0A:C8:26:08:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193FB2757E072624B6E2D0CBB7F9F1D11B8
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H4MfIRUOi2MxE2L7eFLPCsgmCOI.roa
Signing time: Wed 25 Dec 2024 00:11:19 +0000
ROA not before: Wed 25 Dec 2024 00:11:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214223
IP address blocks: 2a06:de01:90::/44 maxlen: 48
2a10:ccc0:160::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:fb:27:57:e0:72:62:4b:6e:2d:0c:bb:7f:9f:1d:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 25 00:11:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f831f21150e8b63311362fb7852cf0ac82608e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ea:a1:72:5f:df:c5:d8:c6:e2:96:8a:c1:74:
8f:28:a3:90:53:1b:d9:e7:6c:40:b9:82:31:30:42:
8c:8f:48:55:85:9c:3a:20:93:2d:d2:b2:5e:1b:99:
4e:e1:b8:cf:5c:ba:12:c3:f4:87:06:78:62:10:1e:
f9:7e:90:83:62:36:74:1a:a8:6f:9e:73:c0:5a:c7:
19:5e:9a:e8:0f:81:c6:4e:d1:bc:aa:92:b5:b7:c7:
96:4a:29:a6:82:a8:5b:59:cb:6d:ec:51:77:c8:27:
45:f6:df:67:2a:92:5a:20:3b:55:42:57:0b:25:85:
c0:a9:83:ba:94:80:18:43:ce:4d:30:ec:9f:7d:ab:
16:92:c0:68:ea:7c:84:80:05:e7:48:3b:55:22:ce:
00:10:c6:29:ee:6f:ab:a6:88:40:34:81:99:28:7a:
2b:37:22:27:b3:20:22:13:83:0f:a3:ad:9f:4f:f0:
ce:bc:f8:f2:d3:e4:0e:a0:c8:76:16:e2:8b:33:76:
13:d9:93:0d:34:a0:21:a9:c7:9e:19:5c:f5:ef:a2:
66:91:79:04:33:3c:cc:53:08:13:3f:19:2e:a9:04:
6a:b6:3b:b6:65:8d:06:72:14:02:f8:e9:53:c0:36:
0f:94:fa:d7:19:05:44:d1:ab:b5:40:95:6c:3d:3c:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:1F:21:15:0E:8B:63:31:13:62:FB:78:52:CF:0A:C8:26:08:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/H4MfIRUOi2MxE2L7eFLPCsgmCOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:90::/44
2a10:ccc0:160::/44
Signature Algorithm: sha256WithRSAEncryption
10:e6:ac:fa:cb:2e:2b:16:a0:59:ea:c3:81:77:76:32:19:53:
b6:5d:4f:67:e2:e9:b2:20:a0:0f:be:9a:a8:4f:df:3d:46:92:
06:02:e6:cf:f4:36:f6:2e:6f:51:21:03:08:1e:73:fe:42:bb:
9b:67:fe:ce:da:b1:7d:72:78:3b:00:4c:1d:20:58:c3:52:52:
0b:e9:de:e0:e9:c8:65:a9:2c:db:8b:5e:f6:4c:bb:7e:99:21:
43:5f:30:b4:57:1b:b9:d0:fb:a7:b3:43:98:cb:01:02:e0:35:
17:3e:8b:72:18:7a:14:4c:1a:f0:6a:81:15:79:40:de:7d:4d:
d1:77:2e:2e:47:8f:1c:0a:31:09:11:94:3f:6f:62:a3:e4:5c:
50:ef:58:e0:32:e7:39:77:f4:77:a0:6d:cb:dc:ee:28:a2:ff:
11:ab:ab:ea:45:3c:7e:9c:7a:9d:95:bb:e0:3c:ba:d2:28:42:
d4:37:30:31:a0:11:60:5e:2b:61:42:56:4b:67:0a:1e:b4:b2:
6b:a7:2a:79:57:b0:25:b6:76:15:82:24:b3:e7:30:ae:0e:85:
63:d5:fd:12:91:5d:22:97:06:b3:ef:1c:1d:24:0d:32:bb:07:
d4:6f:14:f0:9a:5e:57:b2:50:9a:29:43:1b:4a:c9:b5:c1:26:
36:4f:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:43:40 2025 by rpki-client