Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RoYso11jd9T7PPOmcOBQI38Eu58.roa
File: RoYso11jd9T7PPOmcOBQI38Eu58.roa (raw, json)
Hash identifier: ZJ07qxFqR3YEtyKB17Jnz0m/pp0W8NnB+YodlGTa2Yg=
Subject key identifier: 46:86:2C:A3:5D:63:77:D4:FB:3C:F3:A6:70:E0:50:23:7F:04:BB:9F
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 01942823D8B0CB5BC86E088D74C824E64863
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RoYso11jd9T7PPOmcOBQI38Eu58.roa
Signing time: Thu 02 Jan 2025 17:50:25 +0000
ROA not before: Thu 02 Jan 2025 17:50:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210675
IP address blocks: 2a00:7180:8014::/46 maxlen: 46
Validation: Failed, certificate revoked on Thu 06 Feb 2025 09:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:d8:b0:cb:5b:c8:6e:08:8d:74:c8:24:e6:48:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 17:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46862ca35d6377d4fb3cf3a670e050237f04bb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:d7:64:54:5f:d3:7c:00:ca:3f:b7:9c:eb:
57:33:de:9f:b9:ba:8a:74:d1:45:e5:6f:cf:29:4b:
14:24:ee:07:4e:24:b7:4e:72:8c:f1:b0:17:48:c4:
d6:50:3f:fb:3f:05:15:3f:b3:47:12:69:f5:f2:fa:
a7:a6:a3:8a:f2:51:19:6e:6f:6c:c0:87:18:07:0e:
33:a8:b2:d4:29:40:bf:2a:7d:ae:b0:c3:c4:9f:42:
3b:c3:7b:8d:06:b4:36:f7:61:17:ab:29:d4:a0:a7:
fa:10:e1:0b:9f:db:86:53:7d:46:22:f3:4b:e1:35:
f8:3b:b2:19:6d:5e:f6:bf:f8:29:4e:0e:a1:9b:84:
7b:dd:47:f6:92:65:f6:3d:a7:aa:a5:0e:93:4e:d4:
47:c1:44:2b:e1:aa:72:47:06:16:2c:aa:ee:d1:bd:
a2:b1:98:d6:81:a5:37:71:81:12:7b:88:a7:17:36:
0c:e3:bf:65:da:c1:c7:c2:63:80:56:40:f6:94:76:
19:d8:ce:7c:32:d8:7e:e3:13:3c:83:37:b7:37:1a:
1e:9a:fa:44:ea:94:3e:9c:56:20:40:6f:2b:45:14:
6d:fa:8d:e3:54:e3:8a:21:c3:ca:53:d4:c7:53:b4:
83:bc:a2:d3:fb:5d:7b:e9:23:14:e8:c3:4f:fd:bf:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:2C:A3:5D:63:77:D4:FB:3C:F3:A6:70:E0:50:23:7F:04:BB:9F
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/RoYso11jd9T7PPOmcOBQI38Eu58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:7180:8014::/46
Signature Algorithm: sha256WithRSAEncryption
47:fd:12:36:69:7b:0d:80:78:fc:dc:45:1b:a9:00:88:12:82:
7a:73:8b:3c:7c:d2:3d:e6:ab:b0:70:17:f3:38:16:d8:37:de:
2c:1d:40:39:e1:1a:92:1f:b0:98:1c:66:65:39:91:c6:c2:33:
27:14:c6:2e:d5:a9:bc:12:18:95:ce:66:ce:56:06:7c:05:d8:
9b:31:ff:f4:47:9c:09:c3:0f:99:e4:5c:82:80:f8:57:4a:3f:
8b:0e:80:a8:2b:ac:74:9c:7a:4b:0c:16:6b:c0:70:97:f4:ca:
ad:ef:b8:00:64:da:15:2d:43:fd:52:a1:f1:87:64:16:e1:de:
c6:5f:a0:41:43:51:1e:71:f3:e6:f4:89:57:4c:07:1b:23:97:
31:b6:70:f4:40:80:a6:16:ea:90:88:2a:72:9e:d4:b7:aa:fe:
66:71:fe:1c:f7:ba:9a:a8:24:5f:35:f9:a9:d5:7b:f4:03:d0:
b8:9b:1e:5e:0e:eb:48:78:28:c2:de:f7:b8:dc:f4:16:ef:f1:
ad:68:4d:f5:e8:17:73:bb:a8:a0:1d:0f:60:94:9e:49:42:ec:
cc:f7:32:bd:27:7d:9e:7b:2a:0e:fd:ea:f3:74:91:5a:eb:98:
17:b7:63:4d:38:98:34:32:81:4d:4c:ba:fd:90:b0:e1:7c:0a:
9c:a7:bf:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:49 2025 by rpki-client