Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/l2LPibpxhRRCa_ETh0O198o5wVk.roa
File: l2LPibpxhRRCa_ETh0O198o5wVk.roa (raw, json)
Hash identifier: z1rlifPugsUuSUKwnvTHeLqOfDUFgcCcFpJM9sLyS/8=
Subject key identifier: 97:62:CF:89:BA:71:85:14:42:6B:F1:13:87:43:B5:F7:CA:39:C1:59
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 0192593799B8CA28689C0D9DE694513B6A81
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/l2LPibpxhRRCa_ETh0O198o5wVk.roa
Signing time: Fri 04 Oct 2024 20:27:48 +0000
ROA not before: Fri 04 Oct 2024 20:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215245
IP address blocks: 2a14:6780:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:59:37:99:b8:ca:28:68:9c:0d:9d:e6:94:51:3b:6a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Oct 4 20:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9762cf89ba718514426bf1138743b5f7ca39c159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:02:c5:31:88:08:d1:2c:4c:5d:ed:a9:31:
63:6a:23:24:38:0d:aa:b4:db:29:7e:34:c6:07:3a:
4b:7a:7e:e0:f9:48:90:08:af:80:db:a8:88:8f:99:
f9:36:67:fa:d6:e5:98:1f:17:62:a2:a5:de:ce:e4:
97:12:3e:1b:b6:a9:ab:ad:fa:48:62:4a:98:cf:78:
40:1c:c0:1e:46:d2:2c:f8:bd:20:df:ad:23:18:59:
ef:6d:8e:c8:f4:c9:0a:18:51:5d:da:c3:b9:a7:ac:
58:27:71:99:60:c1:99:25:10:be:ce:b8:06:10:da:
ac:5c:97:9e:11:84:16:08:68:ac:b5:7c:f3:8a:fb:
b5:8d:39:a4:3d:ec:71:b2:f2:fc:70:8b:af:6b:0e:
df:c3:3c:53:7a:3f:ee:cc:00:1d:e7:84:7c:48:4c:
29:9d:2a:fc:61:19:8e:38:51:0b:29:ef:51:ac:66:
e9:6f:2e:21:0b:11:49:26:88:c2:cf:80:79:12:81:
44:a0:2e:9b:d7:7e:26:70:9e:8c:04:8b:dc:35:64:
ef:c0:81:0e:ca:99:af:78:3a:97:2b:bd:5f:45:20:
bc:f6:40:dd:e5:f8:3b:5b:29:67:c7:94:95:e8:66:
9b:59:5d:4d:b4:e0:d7:a7:01:3b:2e:ae:34:85:a2:
0b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:62:CF:89:BA:71:85:14:42:6B:F1:13:87:43:B5:F7:CA:39:C1:59
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/l2LPibpxhRRCa_ETh0O198o5wVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:4::/48
Signature Algorithm: sha256WithRSAEncryption
18:ca:bb:9b:77:61:b1:17:f1:64:12:6e:0a:e4:52:5b:a6:ec:
66:eb:39:10:3a:ba:7b:b4:19:8d:5f:b3:01:7a:10:78:30:2b:
68:62:26:c1:fe:a3:01:07:ff:57:ae:29:a2:78:2b:7d:c9:42:
da:38:37:21:12:2b:c3:9c:aa:4f:98:2a:66:93:aa:95:70:3d:
20:2c:58:16:dc:6c:a6:ad:75:25:70:77:12:b0:94:03:f7:0e:
18:c0:c5:7f:2c:71:26:6d:0a:d4:64:b0:fe:24:8e:a3:d9:42:
46:f4:d8:15:29:ce:4e:ce:47:71:01:e6:c0:01:16:76:2e:17:
fc:b3:4a:88:1f:8b:0d:32:71:d3:1c:fd:9f:82:07:63:a2:3f:
30:4c:e9:b3:93:6d:45:c5:5b:e9:95:d2:e1:c6:e7:ab:96:d4:
60:79:c8:f8:f6:db:75:b5:9b:58:da:0d:2a:81:8a:e8:a5:9b:
0d:5d:0f:b7:2d:34:83:bd:65:b8:8e:7f:7a:04:24:3c:c4:b0:
f7:15:03:7c:68:da:1b:5d:62:cd:3b:df:ac:01:33:a8:c8:2e:
84:c8:1a:20:09:8c:2f:61:1d:76:63:65:07:2d:c4:ca:1d:99:
5d:39:07:1b:57:96:aa:0f:69:ec:76:95:a5:1d:38:ab:35:ad:
d9:ed:ee:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:05 2025 by rpki-client