Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/Iqr9wQfJvs2wk1xhCFjRaqxO_eo.roa
File: Iqr9wQfJvs2wk1xhCFjRaqxO_eo.roa (raw, json)
Hash identifier: 9Tkgod0SpR6b/vE+0bjPL+oA4gRV7UQ7+IRahcvcgH4=
Subject key identifier: 22:AA:FD:C1:07:C9:BE:CD:B0:93:5C:61:08:58:D1:6A:AC:4E:FD:EA
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 019473E35724209F7E3C682F9B806A67EABB
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/Iqr9wQfJvs2wk1xhCFjRaqxO_eo.roa
Signing time: Fri 17 Jan 2025 10:51:06 +0000
ROA not before: Fri 17 Jan 2025 10:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2a06:ef00:ffff::/64 maxlen: 64
Validation: Failed, certificate revoked on Fri 17 Jan 2025 11:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:e3:57:24:20:9f:7e:3c:68:2f:9b:80:6a:67:ea:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jan 17 10:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22aafdc107c9becdb0935c610858d16aac4efdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7f:ed:f2:ea:25:1c:71:a3:6e:3a:b9:e7:6a:
62:b6:0c:30:0b:da:16:e2:66:77:35:fe:72:b8:c2:
7a:aa:76:58:49:ec:20:ad:1f:91:b2:1f:90:f1:39:
2c:1d:3a:5d:77:af:df:59:e6:e2:bc:18:e4:a9:17:
08:dc:ba:6a:87:e4:86:d7:43:c0:52:04:72:7f:8b:
14:61:55:b1:9f:b6:0d:6d:15:7d:06:d4:d6:46:d4:
16:3f:00:06:ba:fd:f2:f1:22:3d:4f:9d:c1:da:0f:
3d:f5:11:22:70:d7:5e:78:20:15:7a:e8:4e:dd:0e:
cc:80:11:3d:7e:30:93:f2:fe:fb:d3:d0:06:cd:03:
cd:f5:91:ab:1a:cf:18:8c:5f:96:10:0b:c8:ad:a2:
ec:0c:77:9c:f5:81:c1:6b:b4:a4:cd:a7:cd:e6:51:
10:2b:4d:ee:49:26:77:0c:2d:2f:e0:35:20:2d:c9:
84:b4:44:ba:77:cb:fd:1c:61:a7:6b:6f:e7:a0:13:
03:0c:a2:be:b4:b2:76:c5:da:25:72:4f:6a:23:ad:
88:fb:24:11:ac:59:c9:06:64:21:a2:d4:17:7c:48:
44:7f:5a:57:60:1a:44:b6:6b:90:90:9e:3e:73:cb:
07:0a:de:e2:ac:58:b7:00:e8:43:a7:d5:1b:bb:d8:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AA:FD:C1:07:C9:BE:CD:B0:93:5C:61:08:58:D1:6A:AC:4E:FD:EA
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/Iqr9wQfJvs2wk1xhCFjRaqxO_eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:ef00:ffff::/64
Signature Algorithm: sha256WithRSAEncryption
77:f2:23:95:c3:7a:b5:73:24:fa:04:00:4f:b1:a8:8f:c4:ac:
e5:4f:c4:82:e2:2f:84:c1:7c:e6:54:95:0b:fd:d5:b2:f0:c9:
d9:44:c1:d2:21:f6:55:c3:49:00:48:ef:95:4a:39:4d:5f:7e:
5e:52:9c:ff:28:af:4c:45:bc:33:b9:24:27:f2:b8:d2:ed:89:
8f:9c:39:59:50:55:79:d1:53:40:4e:e1:58:42:ed:eb:84:dc:
81:d3:9f:fd:e6:b5:ff:ca:2a:6b:37:78:90:53:04:aa:b4:6b:
9d:bc:db:67:5b:c6:fe:bf:f8:12:8d:69:5a:7b:76:9a:07:94:
41:02:ed:82:43:14:38:d3:18:1f:a0:ef:ab:f6:39:96:49:6d:
c5:6d:e5:95:20:23:a2:3b:94:10:27:5d:e7:ac:97:a0:e6:02:
f1:b6:45:19:ad:81:c8:20:f3:1a:1b:d7:ba:f5:3f:eb:bf:f0:
58:a2:cc:a0:95:1a:a1:73:97:fc:ea:cc:6e:00:c3:80:40:03:
62:0c:b2:5a:1f:38:41:7c:03:f6:66:95:82:3e:9c:af:b3:76:
62:2a:ed:a0:11:30:78:fe:46:67:52:74:78:1a:e4:2b:8c:17:
a4:a1:e5:31:99:fa:97:1c:a5:09:f6:3b:9b:7b:61:95:2e:d6:
59:72:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 07:58:34 2025 by rpki-client