Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/76VUgp5SZiljoXMdH27M1WokZq4.roa
File: 76VUgp5SZiljoXMdH27M1WokZq4.roa (raw, json)
Hash identifier: Gt2mY+WHASt1A7urXQdxyZNvHjql+4oSWrhOyd/M4yA=
Subject key identifier: EF:A5:54:82:9E:52:66:29:63:A1:73:1D:1F:6E:CC:D5:6A:24:66:AE
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823CF2305803BC528223C021C873CC4
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/76VUgp5SZiljoXMdH27M1WokZq4.roa
Signing time: Thu 02 Jan 2025 17:50:22 +0000
ROA not before: Thu 02 Jan 2025 17:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34860
IP address blocks: 2a00:ec82::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 06 Feb 2025 09:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:cf:23:05:80:3b:c5:28:22:3c:02:1c:87:3c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa554829e52662963a1731d1f6eccd56a2466ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:94:80:17:13:49:a0:77:84:e7:95:83:82:2f:
61:6b:a8:f5:42:9e:e8:72:f0:7e:ad:27:25:04:af:
4c:2b:41:13:b6:8c:b6:68:e6:34:02:7d:93:36:2f:
d2:22:d2:28:55:d7:bf:a8:b7:f6:01:4f:2c:03:09:
51:93:d7:c0:80:75:e9:a0:42:b7:ba:0c:d6:81:40:
36:5d:93:f6:f3:be:c0:42:09:72:25:85:19:6a:a6:
8e:08:b9:a0:d1:de:15:bc:70:ef:f1:c8:e6:21:d6:
fd:35:77:20:08:4f:2a:07:56:ac:1a:1f:24:9f:d4:
32:30:e1:7f:ad:36:77:14:1c:88:4d:72:3c:9e:c9:
b3:c8:c9:5e:37:ef:f9:e8:89:67:6b:0c:f4:81:e3:
c0:15:f8:09:7c:b5:a9:89:24:77:78:32:3f:ab:a2:
88:b2:9e:ba:21:58:6b:5d:e2:57:15:55:54:82:24:
c9:07:71:6d:85:bf:3c:7b:52:a0:df:14:07:95:e8:
26:88:98:c3:f5:33:92:2f:3f:fa:f5:eb:65:44:3a:
86:4d:4b:52:d0:e1:76:ff:4f:96:ea:5b:8a:52:4b:
24:25:ab:81:96:c0:3e:aa:6a:59:da:1d:76:ff:17:
3a:26:e2:81:47:64:8f:f3:d6:18:bc:04:4a:85:70:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A5:54:82:9E:52:66:29:63:A1:73:1D:1F:6E:CC:D5:6A:24:66:AE
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/76VUgp5SZiljoXMdH27M1WokZq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec82::/32
Signature Algorithm: sha256WithRSAEncryption
3b:e9:4d:76:c2:3c:3a:ca:1e:e5:f0:39:ee:5c:cb:d7:d5:11:
59:15:80:f6:8d:bd:34:76:ce:6f:65:62:ec:1c:c1:06:15:4e:
8a:f8:d0:d9:f4:bc:01:e8:78:7c:de:1c:39:8e:4a:92:ac:ec:
4f:3d:04:58:e9:05:d9:62:e3:3d:ea:0b:e6:93:2b:ea:43:0b:
13:6c:2c:da:b3:94:4b:9e:ff:31:4a:75:da:55:58:e7:a0:f6:
5d:a1:96:c0:45:0c:9b:e4:be:99:2c:0a:03:34:46:2f:43:b8:
68:79:62:4c:8c:f3:d5:6d:1c:5f:82:0d:e9:2d:45:20:3c:7c:
4b:8d:b1:a1:62:8f:85:ee:29:f1:4a:d0:91:04:82:89:39:6e:
41:3c:1f:59:6b:2c:ab:67:69:b6:00:f9:69:9f:bb:63:e9:90:
85:39:8f:1d:df:d7:c2:9d:05:d7:68:ad:d1:74:e2:36:17:30:
ad:48:7d:ec:06:46:be:48:c0:9e:88:ea:76:e1:6b:92:52:7f:
06:3d:de:a9:8c:68:c0:c6:73:bf:5e:c1:93:f5:75:73:50:5f:
89:41:25:93:a8:1f:e1:ab:7b:f8:b2:83:e4:16:b9:45:3f:80:
78:5b:a1:15:69:3d:10:dd:65:2e:90:59:ab:d2:e7:d3:69:66:
85:56:50:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:52 2025 by rpki-client