Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/pqThInkpsYsJcC3qe2zFOj_Vfwk.roa
File: pqThInkpsYsJcC3qe2zFOj_Vfwk.roa (raw, json)
Hash identifier: kvBO2JMWNHxRDJIKJLGXZMV+T5IL7SiG0XWavkz/k/E=
Subject key identifier: A6:A4:E1:22:79:29:B1:8B:09:70:2D:EA:7B:6C:C5:3A:3F:D5:7F:09
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 019427B68BE1422914DB39056F9BE4CD3DAC
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/pqThInkpsYsJcC3qe2zFOj_Vfwk.roa
Signing time: Thu 02 Jan 2025 15:51:02 +0000
ROA not before: Thu 02 Jan 2025 15:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60539
IP address blocks: 2a13:aac7::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Jan 2025 21:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8b:e1:42:29:14:db:39:05:6f:9b:e4:cd:3d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a4e1227929b18b09702dea7b6cc53a3fd57f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:c0:6c:91:62:4f:44:b2:45:8c:8d:74:61:
df:8e:f9:cf:57:61:0b:ca:5e:60:05:2d:dd:a1:af:
84:2f:82:71:2a:ce:1a:ef:df:a7:7d:cb:26:6c:30:
98:ed:e0:0c:7d:49:a0:3c:a9:de:60:e3:88:f6:75:
60:b2:95:9c:01:bd:8d:33:bd:de:46:ba:31:f6:25:
c9:4a:5a:19:4b:3f:5f:d2:23:e0:c8:1f:41:71:67:
eb:a6:5e:57:fe:99:c8:a5:86:2e:c0:81:a3:f1:e2:
4e:cc:ac:8f:e2:7a:79:c6:4c:5d:78:b7:06:64:18:
b1:5a:b4:f2:66:c7:76:4a:8b:2b:e3:61:03:60:d3:
15:0a:79:55:11:32:bb:da:51:8b:32:77:db:74:86:
6e:0d:2e:08:1d:85:12:0e:49:ff:0e:6f:a1:4f:c3:
d4:f8:39:f4:a5:d1:04:03:23:e1:71:c6:83:16:eb:
d7:c6:83:d4:7d:15:46:76:ec:fe:5b:83:32:e6:56:
ab:da:0d:ff:9e:fd:6e:bd:db:e4:1e:91:75:53:35:
b6:91:bf:c1:d3:d5:21:53:eb:79:74:45:52:6b:ad:
ab:bf:f3:de:2b:18:1b:d8:fa:62:57:fb:80:09:f4:
43:65:ea:3b:40:b8:9a:73:ad:ea:11:b9:7d:36:07:
c2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:E1:22:79:29:B1:8B:09:70:2D:EA:7B:6C:C5:3A:3F:D5:7F:09
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/pqThInkpsYsJcC3qe2zFOj_Vfwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:aac7::/32
Signature Algorithm: sha256WithRSAEncryption
6d:c1:4c:0b:e2:34:a3:98:52:21:4f:6d:29:f6:69:ea:86:c0:
07:77:4d:08:26:70:a9:a9:d5:33:f0:fc:a9:25:5f:b0:ab:9c:
e6:68:fd:3d:6a:a9:50:55:27:df:b8:0d:7d:10:23:70:21:77:
cf:e1:12:bb:ee:d3:a4:32:c5:9d:e8:dd:42:cb:d6:a8:83:9f:
d5:2d:39:8a:f7:bb:41:0b:38:3a:dd:ce:9f:0d:25:06:af:46:
4d:70:b7:23:4c:0b:46:67:48:c3:2f:54:f4:2e:61:b7:49:ee:
56:03:46:b1:f2:77:af:8c:f6:be:a1:1e:15:1d:e9:46:f8:ae:
41:d7:e5:ce:e4:1d:4d:a9:16:ca:2a:9c:ef:db:fd:5e:07:6b:
e9:85:81:da:89:74:ae:d4:76:00:30:a6:6b:5e:0d:3b:b7:60:
0b:10:09:05:e8:29:4f:12:29:b8:1c:d0:12:3c:8b:b7:73:92:
f8:0d:e0:e2:91:2d:91:31:d3:86:4a:3f:ac:9e:d6:21:0f:42:
2c:42:8c:1a:fc:12:da:7d:f7:f7:d7:f0:f0:ad:51:37:06:01:
c8:3f:34:6f:ff:a9:7e:1b:50:5e:b3:81:fe:1c:3a:5d:56:17:
c9:ad:9c:c5:71:f2:2c:72:73:d6:fc:1e:48:b8:b6:b4:1d:ac:
ef:92:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:39:45 2025 by rpki-client