Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/3IsGZtefVlBeS3o4oM8mnpv72yo.roa
File: 3IsGZtefVlBeS3o4oM8mnpv72yo.roa (raw, json)
Hash identifier: qrA48+z+fLtwFGim2EUSVMo/rMb+E3txR8RV2pGgS24=
Subject key identifier: DC:8B:06:66:D7:9F:56:50:5E:4B:7A:38:A0:CF:26:9E:9B:FB:DB:2A
Certificate issuer: /CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Certificate serial: 018D69479907169D9191C1A9159EE33D0C33
Authority key identifier: 95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/3IsGZtefVlBeS3o4oM8mnpv72yo.roa
Signing time: Fri 02 Feb 2024 10:05:16 +0000
ROA not before: Fri 02 Feb 2024 10:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a03:21e0::/36 maxlen: 36
Validation: Failed, certificate revoked on Fri 02 Feb 2024 12:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:69:47:99:07:16:9d:91:91:c1:a9:15:9e:e3:3d:0c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95461fbee1c06e3eafac0f2f95253ca8603accf2
Validity
Not Before: Feb 2 10:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc8b0666d79f56505e4b7a38a0cf269e9bfbdb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7b:86:4c:e0:50:b2:6e:08:ab:39:75:67:8a:
06:24:31:4d:0a:32:fb:e9:e1:49:d2:85:2a:c5:33:
6d:bb:f2:2c:ac:53:16:67:db:67:ed:95:d3:d5:db:
06:6f:08:d5:36:2c:75:73:23:08:87:10:b0:40:67:
3d:71:5a:b8:6d:ab:6a:5f:b2:27:84:7b:8d:fb:8f:
ad:92:f6:72:1d:6a:9e:8a:95:f2:4b:f0:74:0a:7f:
8a:05:e9:b4:34:f2:cf:3d:ef:be:46:a7:e9:91:23:
b2:61:6a:be:36:6a:2f:d1:61:74:de:f5:f9:7b:be:
69:d8:4b:e0:b6:55:07:6a:b8:f2:d2:81:8a:72:c4:
94:06:2f:85:f6:ae:74:64:95:43:6f:4c:ee:4a:44:
df:12:1d:5f:4d:50:0b:e8:00:73:0e:d8:17:1a:d5:
7a:df:05:8a:5b:59:3d:18:9b:36:24:3a:36:f1:66:
65:b9:81:8a:58:54:dc:f7:64:9a:8e:4b:0c:9a:c9:
a8:e6:bd:32:9c:08:fd:f5:dc:71:70:64:82:38:c2:
d7:54:60:e9:f8:4d:9f:7f:52:de:38:ed:3c:e9:e9:
b9:a6:95:54:ef:61:42:86:48:51:a9:67:1b:ac:f2:
68:cb:2d:15:66:cb:4c:8f:c5:39:de:43:c6:a5:0c:
e5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8B:06:66:D7:9F:56:50:5E:4B:7A:38:A0:CF:26:9E:9B:FB:DB:2A
X509v3 Authority Key Identifier:
keyid:95:46:1F:BE:E1:C0:6E:3E:AF:AC:0F:2F:95:25:3C:A8:60:3A:CC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lUYfvuHAbj6vrA8vlSU8qGA6zPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/3IsGZtefVlBeS3o4oM8mnpv72yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e5ce8f-5ea0-479f-93e9-89d5c60f501f/1/lUYfvuHAbj6vrA8vlSU8qGA6zPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:21e0::/36
Signature Algorithm: sha256WithRSAEncryption
b3:59:a2:64:b4:f0:cf:36:f4:e3:da:03:39:15:ee:e1:e8:b1:
d3:28:d6:a5:a2:8d:98:06:01:e2:65:52:81:fe:f6:d5:e2:82:
74:6c:06:ab:7f:79:c5:b8:78:4a:58:cc:c9:5b:a3:64:57:19:
f7:25:9c:06:f8:b1:78:f7:97:a5:0a:7d:6c:a3:e5:be:f1:66:
1e:4e:8d:a6:24:0c:e1:cc:c3:9f:84:db:0d:d3:5d:24:36:3a:
24:0b:01:22:94:8e:75:70:e2:4d:f9:dc:da:5f:40:a3:88:1d:
9a:e1:d7:f2:04:b1:42:aa:17:d9:2d:4d:45:71:02:42:11:2b:
7e:7e:a1:66:87:b3:ab:fe:f1:3e:96:88:e2:4c:d3:1c:07:d4:
04:92:cd:e7:e8:bc:67:6d:de:45:61:02:4e:9d:cc:9e:0f:f6:
9b:17:f1:78:0a:e5:28:62:9f:97:af:de:50:8d:e3:27:f3:ca:
22:b6:82:3c:ef:3e:b7:12:6c:fa:6e:cb:cb:fe:d0:21:6d:ac:
9c:b8:bb:6f:e1:70:02:44:15:46:e8:3d:ef:a6:c2:1f:af:20:
4d:19:f0:dd:f9:b8:45:77:7f:c9:fa:ec:f8:6c:49:6e:d3:bc:
4c:56:55:0f:2a:78:4a:cc:cc:70:56:2b:e6:59:63:3a:17:84:
82:ad:4a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:49:02 2025 by rpki-client