Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/teUWghABmlxB77FSk-0-ed7gLHM.roa
File: teUWghABmlxB77FSk-0-ed7gLHM.roa (raw, json)
Hash identifier: F5yu/aZhLG+QLF7D9M/2IshwslFV1nNn90FNsVi9s7E=
Subject key identifier: B5:E5:16:82:10:01:9A:5C:41:EF:B1:52:93:ED:3E:79:DE:E0:2C:73
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019421B245261804A05A30E3A2B962087095
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/teUWghABmlxB77FSk-0-ed7gLHM.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198923
IP address blocks: 2a07:2486:ef0::/44 maxlen: 44
2a07:2486:ef0::/48 maxlen: 48
2a07:2486:ef2::/48 maxlen: 48
2a07:2486:ef4::/48 maxlen: 48
2a07:2486:fd0::/44 maxlen: 44
2a07:2486:fda::/47 maxlen: 47
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:45:26:18:04:a0:5a:30:e3:a2:b9:62:08:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5e5168210019a5c41efb15293ed3e79dee02c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:d7:c8:5b:6d:ff:77:ac:29:3e:5b:5b:66:
a4:7e:6e:0c:71:58:d4:e1:0a:20:52:4e:5d:51:b8:
c3:50:65:15:46:10:b1:56:4e:2f:1f:11:7a:d6:7b:
0d:b4:ed:08:e8:ad:dc:4c:05:82:22:59:88:02:0e:
68:b3:ba:3e:f5:d7:cd:02:4a:bd:61:81:46:aa:db:
a7:ca:0f:b9:41:30:c5:05:8b:31:27:f2:34:16:7f:
9f:38:5c:39:2b:1c:b5:f6:9e:29:d9:09:23:2c:86:
66:5d:48:3d:f2:31:8b:3e:a4:9b:8a:4a:1a:32:60:
4b:33:8f:7a:c6:8b:9e:ba:12:1e:83:07:59:e5:ab:
d1:eb:f3:b3:80:03:df:2a:e1:55:23:8c:cd:5e:ec:
e3:53:0e:90:0b:14:60:f9:e9:bf:57:4b:3d:72:61:
cc:b3:a8:41:8b:fa:2b:68:7d:01:57:38:43:79:10:
4c:b4:9e:45:cf:5c:b9:d0:fe:34:d6:d1:90:87:d7:
92:13:83:b4:5e:bf:65:8c:e4:0b:41:6c:72:37:ef:
35:d3:be:c6:47:87:44:78:29:40:81:28:b1:3f:7a:
84:4d:0c:16:7b:7c:1b:e3:e0:02:35:cd:7f:7b:e9:
01:59:50:67:71:0e:d9:36:32:37:49:ea:99:1d:a9:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E5:16:82:10:01:9A:5C:41:EF:B1:52:93:ED:3E:79:DE:E0:2C:73
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/teUWghABmlxB77FSk-0-ed7gLHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ef0::/44
2a07:2486:fd0::/44
Signature Algorithm: sha256WithRSAEncryption
9f:79:d7:ff:d3:88:7e:c0:eb:e6:a4:16:8f:2c:3e:94:fa:7c:
39:14:40:3f:98:2e:9f:ef:be:07:b6:d1:e0:c9:70:c7:f8:30:
6c:b7:ee:06:5f:94:8a:f2:ca:a9:68:4c:65:27:a3:be:58:a7:
b3:bc:64:e4:30:79:2e:ad:f2:87:68:3b:54:18:a9:f4:aa:48:
23:87:65:2a:b2:2f:49:c2:14:3e:1d:fe:60:bd:87:76:b2:69:
39:9e:36:52:7b:8f:d3:7f:52:e0:91:32:f9:69:56:ff:6f:3f:
67:ea:d6:48:a7:80:4e:d2:a4:f1:bb:c5:f5:4f:49:87:43:72:
94:3f:cc:b5:81:87:0f:0a:90:4c:19:90:1a:1f:b4:ef:13:e5:
e5:dc:41:42:32:54:bf:0b:bf:65:4d:ac:91:af:55:3b:5e:7d:
57:2e:4e:ee:6a:6c:38:f0:6b:19:7d:9d:2a:a0:f4:57:f1:5a:
7c:bb:88:60:b5:ce:66:76:20:8f:7e:e9:c2:20:b5:1b:6d:a0:
be:b6:ba:26:98:c6:b5:6d:09:08:9e:6f:ba:d9:d5:76:74:8d:
d2:db:06:aa:79:60:68:31:76:df:89:42:9b:a7:d0:72:27:9e:
88:ea:82:4c:f1:eb:f3:bc:d0:d6:0c:67:41:f3:7f:fc:3b:cd:
52:b0:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:30:28 2025 by rpki-client