Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/FCouxyzQuckVK_I-uInthJHEdnA.roa
File: FCouxyzQuckVK_I-uInthJHEdnA.roa (raw, json)
Hash identifier: UkxbAIJKUOnhVsti4PSuOgr+LoZdxsw9HOOuvqdhROk=
Subject key identifier: 14:2A:2E:C7:2C:D0:B9:C9:15:2B:F2:3E:B8:89:ED:84:91:C4:76:70
Certificate issuer: /CN=20105484f187f2087d120cad971d682db3159965
Certificate serial: 0195258B04F69897AAEA9C6B6DA952603DD7
Authority key identifier: 20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/FCouxyzQuckVK_I-uInthJHEdnA.roa
Signing time: Thu 20 Feb 2025 22:47:02 +0000
ROA not before: Thu 20 Feb 2025 22:47:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200372
IP address blocks: 2001:67c:b40::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 25 Feb 2025 00:46:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:25:8b:04:f6:98:97:aa:ea:9c:6b:6d:a9:52:60:3d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20105484f187f2087d120cad971d682db3159965
Validity
Not Before: Feb 20 22:47:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=142a2ec72cd0b9c9152bf23eb889ed8491c47670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:41:78:e5:bb:9d:85:11:3d:79:ed:b5:31:80:
2b:62:e3:fc:a7:1f:f8:8a:b2:e2:33:dd:b0:89:34:
48:45:d8:e2:52:f3:f3:fe:a2:a7:0d:a1:67:aa:24:
1d:cb:76:75:4b:95:da:e4:06:ce:b9:93:c3:50:d2:
73:6e:4e:12:1a:26:46:a8:a4:31:e2:c8:12:cd:d5:
3e:d9:ce:7c:b6:fe:96:f2:eb:f8:8d:6c:31:f5:4f:
fe:a8:fa:12:c6:27:c1:fb:1e:3c:a5:64:f1:89:b7:
d4:62:eb:1a:00:3f:9a:ed:db:63:c6:f5:15:a7:3b:
eb:40:63:56:86:5a:a1:4e:d6:a1:39:16:13:18:b9:
8b:79:dd:ac:0c:f9:f6:46:c2:37:db:f0:08:1e:72:
a1:99:5b:3b:29:52:b3:12:5f:3f:9f:ab:fe:1a:1c:
cf:38:e8:fd:ab:fc:59:06:bd:d5:f4:ac:54:31:b0:
b7:5d:bf:fa:7d:17:42:0c:b8:16:a2:88:2d:4b:46:
96:e6:7d:c8:7c:06:d5:b2:be:3b:7a:ad:ef:1b:81:
ea:ba:1f:52:61:0b:78:a7:8f:d6:35:78:8d:66:33:
ad:29:0b:c4:92:e1:aa:1b:cf:7f:6a:c0:4d:f5:69:
13:8e:46:29:71:7c:b2:1d:c7:9c:b7:51:00:66:1a:
b1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2A:2E:C7:2C:D0:B9:C9:15:2B:F2:3E:B8:89:ED:84:91:C4:76:70
X509v3 Authority Key Identifier:
keyid:20:10:54:84:F1:87:F2:08:7D:12:0C:AD:97:1D:68:2D:B3:15:99:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBBUhPGH8gh9Egytlx1oLbMVmWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/FCouxyzQuckVK_I-uInthJHEdnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/cef6d0-f488-4d25-86b5-26aef882f94f/1/IBBUhPGH8gh9Egytlx1oLbMVmWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b40::/48
Signature Algorithm: sha256WithRSAEncryption
61:ad:27:c8:33:79:12:ab:e7:dc:e7:5d:b3:f4:91:b3:f6:b3:
98:8c:81:15:c2:79:c4:26:a4:81:22:ad:2a:a7:e9:24:a2:b1:
ee:3c:27:b8:c5:7b:c2:c7:41:83:5b:8a:1d:a6:6a:d2:1a:b0:
6b:c3:f4:e9:10:1d:d6:37:8f:e2:83:c5:45:9d:47:e2:c8:a0:
62:d8:8c:5c:3b:f9:82:f8:00:d8:de:0c:a2:81:ef:66:39:0e:
e1:46:75:e8:dd:63:3d:b1:12:64:67:76:64:22:89:ac:53:21:
4c:14:5f:38:30:55:e8:40:cd:7a:54:aa:3c:90:af:5d:b0:94:
31:a2:8e:a6:f8:10:84:67:d2:4e:fc:aa:40:fc:f0:1c:2a:78:
1d:05:e2:d3:e2:bd:3d:35:7f:50:7b:7d:0a:6f:32:2a:21:da:
da:71:d7:11:fe:1e:41:6d:0f:49:69:ad:a0:97:ff:d7:cb:bf:
0c:7e:81:78:f0:72:f7:84:50:04:23:35:7f:2f:91:e1:2e:6f:
cf:fd:c2:5b:82:12:a6:82:e1:bc:9c:b4:29:1d:75:6c:ae:2a:
83:07:5e:0c:8b:3e:c9:bb:3a:f8:8a:cb:d9:53:25:a9:d1:35:
92:78:f0:5b:d0:fd:74:fc:7d:64:82:d1:26:b8:71:e6:bc:63:
38:79:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:31 2025 by rpki-client