Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa
File: K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa (raw, json)
Hash identifier: RyRP/Vz1oR0jiKMZEZ4P1rDOOWm/PtJwUXDjLjnCmBU=
Subject key identifier: 2B:97:BF:98:A6:F6:E5:90:6F:69:4F:B6:7F:95:3D:01:5C:E4:C3:99
Certificate issuer: /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial: 018CCA2BE7306E9A1F97EEA09A58B7E10FF0
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa
Signing time: Tue 02 Jan 2024 12:35:24 +0000
ROA not before: Tue 02 Jan 2024 12:35:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210918
IP address blocks: 2001:67c:c58::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e7:30:6e:9a:1f:97:ee:a0:9a:58:b7:e1:0f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Validity
Not Before: Jan 2 12:35:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b97bf98a6f6e5906f694fb67f953d015ce4c399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:53:ba:d6:af:7e:0b:c7:e8:29:7e:6a:13:86:
9a:c2:9b:f4:91:6f:cb:21:88:ed:d2:e3:57:f6:06:
aa:e6:2d:49:cc:83:70:2b:c8:0d:71:b9:8a:9c:8f:
57:1c:f3:c0:9e:45:68:29:2b:45:01:e6:e2:23:d2:
f7:55:7f:94:9e:df:21:ca:1a:55:f7:50:a1:56:5a:
c0:c6:39:83:7e:09:37:5d:58:53:c2:ef:e5:ee:8e:
0c:dd:5f:0a:bf:5a:11:f1:a8:f0:8d:ad:1a:60:38:
ef:2d:5c:cd:e3:7c:37:e5:7e:38:65:27:b5:e0:07:
a6:e5:62:52:54:b8:4a:2c:08:63:a1:f3:7f:54:28:
31:4a:03:ad:09:be:c3:1a:06:dd:9a:d9:cd:4f:65:
14:30:58:9a:0e:55:7f:4c:c5:68:b1:1f:4e:17:1f:
1c:08:bc:de:48:49:14:77:d0:6a:43:57:ca:a0:3f:
78:21:00:1d:b1:aa:5a:24:39:72:76:d3:a1:d2:96:
07:69:6a:58:5a:53:35:f4:14:1f:8e:94:1f:3e:ca:
7b:aa:e1:f7:81:4b:c5:d4:31:a1:d9:6c:e1:63:40:
0a:c7:43:6d:33:7f:44:04:ae:d8:cb:37:0b:9a:8c:
46:31:d7:f6:03:42:db:94:61:83:84:1e:6e:4e:31:
2b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:97:BF:98:A6:F6:E5:90:6F:69:4F:B6:7F:95:3D:01:5C:E4:C3:99
X509v3 Authority Key Identifier:
keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/K5e_mKb25ZBvaU-2f5U9AVzkw5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c58::/48
Signature Algorithm: sha256WithRSAEncryption
0b:21:a5:13:bd:8f:e3:ff:73:4e:01:d0:ca:3f:4c:4f:99:05:
e0:6b:3c:fb:90:7b:ee:9a:a0:2a:88:ca:7b:8c:48:6a:ad:95:
85:ec:96:81:e9:39:3c:92:eb:ab:27:ae:b6:45:a3:b0:8e:42:
32:b5:22:e7:cc:72:8b:65:51:00:e2:6b:ad:61:f8:33:69:ab:
2a:9c:2f:85:7f:1b:f1:89:44:42:0e:5d:45:db:80:f5:ac:25:
d4:cf:0f:f9:a8:c7:5b:86:c0:fa:5d:79:47:f5:c9:93:0d:70:
2e:7d:d8:a4:04:1a:4b:71:b3:44:2f:55:99:7b:ca:f6:0c:07:
8f:73:0b:0a:70:d8:3c:47:0d:11:b1:a2:ea:37:fb:d5:8e:ab:
52:2a:c7:e2:2c:95:01:2f:95:cc:ad:8c:e4:aa:dc:f4:c1:f9:
a3:1a:27:c1:52:91:25:8c:cc:74:c1:40:60:31:dc:c4:00:92:
46:9a:fd:65:8d:8b:ef:af:db:10:88:61:c0:67:ba:9d:7c:55:
58:bd:61:5a:07:30:33:ca:82:21:98:c6:9a:e4:54:65:3b:2f:
3c:67:9a:06:3b:9a:60:ba:00:89:eb:1c:fd:bf:33:d7:38:de:
97:4f:59:da:ab:d1:4f:4b:ba:de:3b:f4:cd:2f:1c:22:b7:fb:
f1:ef:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:35 2025 by rpki-client