Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RqAlUXcpb3AnGhB_Vkp_J8rBBtk.roa
File: RqAlUXcpb3AnGhB_Vkp_J8rBBtk.roa (raw, json)
Hash identifier: exQ9/K6bGmmYzbSi8i/QEQ/cV8GPJuFvrt/S4MRJHls=
Subject key identifier: 46:A0:25:51:77:29:6F:70:27:1A:10:7F:56:4A:7F:27:CA:C1:06:D9
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019389050DEEF24C4C3230E0A179345F698B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RqAlUXcpb3AnGhB_Vkp_J8rBBtk.roa
Signing time: Mon 02 Dec 2024 20:17:09 +0000
ROA not before: Mon 02 Dec 2024 20:17:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214107
IP address blocks: 2a14:6780:2::/48 maxlen: 48
2a14:6780:3::/48 maxlen: 48
2a14:6780:4::/48 maxlen: 48
2a14:6780:ca::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 20 Dec 2024 05:20:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:89:05:0d:ee:f2:4c:4c:32:30:e0:a1:79:34:5f:69:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Dec 2 20:17:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46a0255177296f70271a107f564a7f27cac106d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:be:a2:27:26:1d:d0:94:63:58:b6:44:fb:
24:2f:ac:d4:d8:52:0d:50:e2:20:0f:1b:03:85:f7:
20:75:99:d7:3d:7a:46:9f:6c:ba:77:d4:24:03:13:
1c:ed:9b:ca:f8:01:6c:e1:55:9b:40:fd:87:32:6e:
d7:d3:d1:4d:98:f5:4a:e9:95:57:08:54:cb:fd:c6:
8b:b7:17:d9:9f:4e:a1:75:85:c3:da:82:9f:16:51:
ab:13:9d:19:a0:01:72:d7:c1:a3:e6:c7:30:77:3e:
ce:a4:f7:8d:98:48:48:e8:ec:e6:1a:a0:ff:0c:1b:
8e:b8:14:ac:9f:8c:dc:20:d4:8e:12:fe:a4:02:4d:
d1:10:ba:94:0f:34:32:b0:04:45:bd:78:57:bd:99:
be:5c:25:56:c0:91:40:02:fe:f0:87:b9:9b:ae:7c:
74:d0:98:fa:5f:7b:7f:d2:8e:fe:6a:87:78:a4:b3:
73:88:06:1c:4f:b0:25:a3:96:74:b6:16:47:7c:31:
9c:cc:49:b4:3b:cc:59:f2:06:cb:9a:a2:94:c0:f5:
27:db:ba:7b:ea:94:2c:59:57:9a:2d:cf:a3:15:a3:
a2:88:32:c3:5b:4b:3a:3d:b2:5c:78:e1:d3:12:25:
5d:78:6a:6b:e2:9e:f0:a6:c7:41:4c:e0:2e:a1:60:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A0:25:51:77:29:6F:70:27:1A:10:7F:56:4A:7F:27:CA:C1:06:D9
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/RqAlUXcpb3AnGhB_Vkp_J8rBBtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:2::-2a14:6780:4:ffff:ffff:ffff:ffff:ffff
2a14:6780:ca::/48
Signature Algorithm: sha256WithRSAEncryption
15:a8:4b:47:e8:11:a2:e8:1e:73:80:16:87:de:de:32:d5:ec:
f3:f3:c9:8a:a9:02:1e:9f:47:96:b6:eb:cf:c2:ac:64:4b:6c:
d9:73:b1:9f:06:1b:1e:b8:67:37:f6:f6:60:1c:d5:3f:61:05:
8c:22:64:48:a2:59:43:4f:67:a1:aa:f4:77:0c:e5:bb:6b:22:
12:90:7b:ea:79:4d:26:50:2d:64:0d:9c:8e:c7:cf:fd:4c:a9:
ce:25:10:7d:ea:2d:a2:0a:f1:f0:cf:55:fa:34:c0:3a:16:d0:
d6:a1:7f:7a:b7:08:20:1f:23:87:5d:0c:7c:b5:96:49:f7:6d:
5d:3e:3d:9c:35:34:d2:59:eb:c9:dd:5d:2c:33:65:e6:45:3f:
97:eb:e4:b9:14:79:d1:94:87:a7:ed:f3:2e:36:30:2c:81:b3:
1c:5b:e5:1e:bb:e3:9b:73:23:74:b8:b5:06:4e:94:b1:37:b0:
a0:01:26:91:20:1b:8f:9e:a6:7d:8f:27:15:41:4d:70:2b:d7:
91:42:5f:00:23:ce:0e:c0:cb:65:7e:6b:e7:15:a4:ac:40:00:
58:c4:24:a1:03:53:60:22:a4:d6:3d:83:b9:34:ec:53:5e:07:
02:be:99:81:90:28:60:37:2b:cf:c1:4f:c6:a9:d8:ee:e5:35:
e8:0f:ba:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:33 2025 by rpki-client