Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQXjnMyRMRrYKhBOtUNX-URbyes.roa
File: xQXjnMyRMRrYKhBOtUNX-URbyes.roa (raw, json)
Hash identifier: 5KDWgF2KgWLl9AUJEg99PHfxYgVXdLcdYq09yK7ZZkA=
Subject key identifier: C5:05:E3:9C:CC:91:31:1A:D8:2A:10:4E:B5:43:57:F9:44:5B:C9:EB
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0193E155EA024D348A01FACA56B97695DFF3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQXjnMyRMRrYKhBOtUNX-URbyes.roa
Signing time: Thu 19 Dec 2024 23:52:04 +0000
ROA not before: Thu 19 Dec 2024 23:52:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209735
IP address blocks: 2a06:de01:f6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e1:55:ea:02:4d:34:8a:01:fa:ca:56:b9:76:95:df:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 19 23:52:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c505e39ccc91311ad82a104eb54357f9445bc9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:14:34:32:7d:44:0c:f2:a1:e3:cc:72:8a:59:
3c:b9:24:df:b8:71:d5:f8:13:5c:17:a7:3a:ab:67:
c9:28:c0:b8:5f:de:cf:44:cc:00:4e:da:29:4e:2e:
b6:9e:cd:55:85:47:28:3b:cb:80:92:ae:29:82:6d:
b7:52:50:dd:b6:79:0f:dd:0f:1e:50:67:e6:3d:e3:
9f:38:c7:45:74:17:53:20:42:f2:ad:64:85:d7:7e:
a1:40:c0:59:f2:5c:14:ff:7b:3f:d0:d4:e2:30:cf:
f6:d2:a1:09:19:97:96:4c:82:e1:19:bf:84:c6:ba:
1b:11:64:8f:0a:82:ce:4e:6a:be:6a:9e:86:73:a3:
a2:5a:ca:ef:48:ea:e8:bf:1c:a7:ea:66:75:a9:55:
d7:23:2c:45:10:cc:58:2f:e7:30:c9:38:14:fd:05:
52:9f:9f:0c:64:dd:a3:2a:f3:e7:24:7e:75:73:13:
4d:3b:7e:1e:e2:87:19:bf:15:36:71:d8:71:47:dc:
29:af:a1:9d:cf:12:7c:31:3d:b4:91:cd:52:86:a4:
10:ac:02:f0:97:23:25:d2:6b:db:02:e1:03:fc:16:
91:d1:c7:90:44:d2:91:d0:e6:07:c0:d7:61:d1:22:
b3:7c:30:13:c1:63:49:6f:d9:8e:78:13:1f:be:51:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:05:E3:9C:CC:91:31:1A:D8:2A:10:4E:B5:43:57:F9:44:5B:C9:EB
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/xQXjnMyRMRrYKhBOtUNX-URbyes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:f6::/48
Signature Algorithm: sha256WithRSAEncryption
62:dd:be:10:19:c6:e7:cd:52:a2:29:15:93:90:5b:71:41:5c:
30:3a:29:8c:f1:07:94:8d:56:de:5b:e7:93:d9:a3:bc:a5:f8:
fc:3d:14:00:38:6c:43:ec:e7:19:50:8b:61:0a:9a:7f:c5:7f:
23:15:b4:a3:62:6c:53:91:da:b4:49:02:10:82:63:41:a1:44:
47:d6:26:70:59:4e:b5:ce:9b:d7:40:73:94:1e:48:61:23:a9:
ab:e1:b0:8d:66:2c:2b:65:8a:c8:fa:14:96:cf:0b:63:ba:8e:
1f:2b:3a:94:b4:7e:c0:80:9f:45:43:ad:e2:35:1c:92:0e:7d:
de:4f:b4:b6:4e:1d:a3:01:ba:71:3a:e9:58:d4:74:2e:6b:51:
62:ef:f7:fa:0c:58:a1:6a:41:56:71:12:ff:f8:fc:0a:0d:48:
a3:c0:25:bb:cc:4e:21:a0:45:c4:26:95:8a:0a:52:af:52:67:
99:a2:08:00:a3:57:00:1c:cd:f8:f6:a5:70:9f:33:27:73:75:
cb:5d:db:16:29:5e:ec:90:64:ea:ee:c9:64:97:42:2f:59:ea:
5e:2d:88:15:c9:50:b1:ac:30:4c:56:31:1f:a7:c5:a6:46:6b:
11:d9:b5:4e:97:99:bb:65:ce:5c:2c:16:3b:7d:8a:40:2c:d0:
6b:00:ab:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:46:43 2025 by rpki-client