Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/rEi1B3jmP4VZOt5_wTDcn66r1jI.roa
File: rEi1B3jmP4VZOt5_wTDcn66r1jI.roa (raw, json)
Hash identifier: t0/JEDjg8OGm9NGRhn4gWoTvQ2+A389UWgpDIRG1A3s=
Subject key identifier: AC:48:B5:07:78:E6:3F:85:59:3A:DE:7F:C1:30:DC:9F:AE:AB:D6:32
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 018CC9BCB0371606AC78702C9340B8F7599E
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/rEi1B3jmP4VZOt5_wTDcn66r1jI.roa
Signing time: Tue 02 Jan 2024 10:33:55 +0000
ROA not before: Tue 02 Jan 2024 10:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12414
IP address blocks: 2a05:b2c2::/31 maxlen: 31
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:47:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:b0:37:16:06:ac:78:70:2c:93:40:b8:f7:59:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Jan 2 10:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac48b50778e63f85593ade7fc130dc9faeabd632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6e:fb:52:bd:78:3a:5d:62:19:38:87:1d:c0:
70:90:d4:15:7a:08:2a:fd:8a:20:d8:ce:5a:5e:54:
9e:2b:f5:55:21:11:fb:2e:e0:71:d8:a8:d0:e6:a7:
1e:c2:5b:79:6b:5a:54:31:84:0a:08:c9:af:9f:2b:
55:2c:c1:5a:cb:2f:8a:d3:65:69:bb:16:2b:ec:d1:
eb:06:fb:f9:2e:f6:22:b4:70:89:d7:b0:b5:94:bc:
2d:b9:91:0e:47:11:9b:f1:8f:16:8c:22:db:b7:83:
52:15:94:8a:95:3a:eb:2c:f5:4d:7f:6a:a3:2b:05:
c3:9f:16:00:97:27:da:ab:de:aa:80:25:7b:22:b9:
53:e3:d9:54:c3:9c:fe:37:95:48:6e:a6:a2:87:71:
c4:b5:0b:4c:ad:57:31:1c:3b:be:ec:93:e8:ae:a7:
18:68:04:73:be:2f:54:92:0e:d5:0d:12:cb:98:12:
17:af:dd:7d:6b:8f:57:91:b5:2e:23:98:b3:34:5e:
00:81:62:81:71:c7:8b:f6:28:e0:1a:75:0a:6c:be:
2a:1a:98:15:63:3f:a9:c4:fd:69:30:b0:ab:70:3d:
96:60:fa:9b:a8:d1:8e:87:45:52:11:2b:94:30:8c:
48:64:e9:9c:db:68:b8:e2:b3:d3:2f:6c:00:6d:48:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:B5:07:78:E6:3F:85:59:3A:DE:7F:C1:30:DC:9F:AE:AB:D6:32
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/rEi1B3jmP4VZOt5_wTDcn66r1jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b2c2::/31
Signature Algorithm: sha256WithRSAEncryption
6d:ad:a7:5a:34:b3:c7:18:09:10:65:45:43:49:10:e4:d9:7b:
ea:32:a4:c3:7b:a9:43:e1:9e:1a:d7:0b:43:de:92:dd:fa:63:
66:ef:b6:b3:e1:80:4e:f1:e6:ba:b3:3b:eb:ec:38:27:e3:ce:
10:f4:93:27:74:d5:c3:b9:79:0a:85:f0:95:63:3d:65:ab:99:
ec:5b:ba:e0:5a:ae:cd:64:21:93:b3:85:27:ce:84:75:de:07:
5e:17:5b:a4:72:7b:93:31:cc:7f:06:35:14:e4:1e:58:b9:25:
32:18:c1:73:b0:2d:27:f2:0b:38:f9:d2:b0:f9:26:73:f4:ab:
65:94:61:2e:95:2b:dd:1a:bf:42:a9:06:b1:e1:61:7a:b5:b8:
19:22:23:36:3a:d9:df:42:31:b3:40:c4:76:80:4c:a4:39:61:
e3:d2:bc:ba:84:03:e3:81:dc:58:d9:ee:d4:fc:a9:26:17:ce:
a2:dc:39:6f:3e:2b:a0:90:74:a0:d1:fe:7b:69:f1:5d:8f:8d:
41:ab:60:2a:42:ee:bc:d0:06:67:a1:b0:bd:4d:87:34:45:9c:
7a:0d:8b:93:19:c9:a0:f5:cb:47:62:b3:f2:07:6c:04:c1:3b:
c0:bb:86:61:9a:84:58:e2:80:43:99:73:fd:27:db:82:4c:4c:
bd:84:5f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:18 2025 by rpki-client