Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/r42N403xrL-0RO1HGvNttCVw6w4.roa
File: r42N403xrL-0RO1HGvNttCVw6w4.roa (raw, json)
Hash identifier: ubU+5bjKRNoxbRwD/OtoVLG0b0g1VYxOG9rl/8vD7Ck=
Subject key identifier: AF:8D:8D:E3:4D:F1:AC:BF:B4:44:ED:47:1A:F3:6D:B4:25:70:EB:0E
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 018CC424772BEE5332E2B3015D99227DD138
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/r42N403xrL-0RO1HGvNttCVw6w4.roa
Signing time: Mon 01 Jan 2024 08:29:33 +0000
ROA not before: Mon 01 Jan 2024 08:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 2a0c:8dc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Apr 2024 23:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:77:2b:ee:53:32:e2:b3:01:5d:99:22:7d:d1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jan 1 08:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af8d8de34df1acbfb444ed471af36db42570eb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a0:a7:99:df:64:fe:17:43:84:27:c6:07:44:
10:6d:b6:37:e3:b2:cf:45:fb:c5:ab:ba:b3:ce:2d:
60:ee:71:0c:28:6b:64:73:ba:f9:20:50:ef:33:cd:
24:45:90:e8:6b:30:58:9e:b2:01:ed:e4:34:fa:cb:
75:46:4f:f4:c5:95:db:20:c1:81:c3:db:0e:53:6f:
d5:e2:5b:36:94:eb:18:34:71:89:4c:00:93:68:07:
4d:d5:ad:41:ad:5b:69:8e:94:50:df:c3:f5:d7:6f:
6c:da:ec:6f:bb:2e:56:70:89:92:74:b1:11:52:9d:
fc:b5:d7:b8:dc:a8:b4:07:b6:2b:ef:a3:50:31:82:
3f:8a:79:40:6e:dc:a3:97:68:01:02:7e:d3:4a:bf:
7b:9d:31:66:6c:0c:74:99:e3:8e:8b:43:d2:e7:7b:
97:d8:64:0f:dc:f8:8a:19:e1:12:19:63:cc:ef:38:
78:6d:3f:e6:d7:cf:e7:6e:16:e6:e0:cb:d9:ea:b2:
9c:bb:78:5a:cc:cf:01:74:32:b5:d4:e6:d4:38:8a:
d3:2e:5f:15:a6:2a:66:1f:bc:1b:6d:09:a3:01:a5:
10:8a:d6:9d:81:9f:fc:9c:79:1d:bf:24:2a:e1:95:
46:f4:ee:01:63:32:bd:3f:4f:de:0a:21:a7:db:d2:
02:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8D:8D:E3:4D:F1:AC:BF:B4:44:ED:47:1A:F3:6D:B4:25:70:EB:0E
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/r42N403xrL-0RO1HGvNttCVw6w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8dc7::/32
Signature Algorithm: sha256WithRSAEncryption
93:f8:0a:73:9d:51:36:e5:ef:0e:85:56:09:bf:c8:a9:62:38:
80:b6:a3:13:87:c8:de:66:a1:95:79:85:d8:3f:65:68:32:ff:
51:48:f6:d1:e5:07:6b:a3:d4:a0:8e:c6:4c:be:7e:cb:a1:e8:
2c:a0:58:96:d9:3f:ec:32:59:41:d3:b6:59:be:73:24:2d:69:
cc:ff:19:b4:ec:af:95:30:a6:4b:0d:8a:d2:5b:84:d1:2a:79:
b6:9a:c9:35:23:67:87:ab:a7:04:ce:06:be:5a:27:0e:65:77:
b0:2d:c6:1a:4f:a9:27:da:86:9d:36:bf:6a:a3:07:3b:8e:f6:
5a:06:e3:c8:55:85:18:73:b1:0b:a1:63:40:f9:f9:6b:c4:3d:
12:76:73:12:74:dc:ba:34:86:b1:8b:3c:14:09:00:ef:8c:45:
b1:78:f6:65:23:87:c7:4f:4f:6e:30:19:88:13:b9:9b:cd:db:
25:d7:b4:d4:86:60:ea:f5:1c:d4:f2:8e:9e:98:c7:8a:8a:7a:
09:6e:27:c1:e3:9b:5a:c2:94:f1:c9:36:b8:77:69:6a:7b:a8:
00:ea:40:91:1f:54:fc:71:2a:db:10:6f:2a:ba:91:b5:5e:00:
be:2c:c7:4c:7f:39:ea:30:f0:f6:c5:a8:0f:a0:2b:6f:57:45:
2e:01:0c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:50:08 2025 by rpki-client