Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/_Ikxxjp6IjblPcWYEEZgUfcb4BM.roa
File: _Ikxxjp6IjblPcWYEEZgUfcb4BM.roa (raw, json)
Hash identifier: AxBhzdq5GG0xb0BTdeDnBu0maGPGpdW8fAl0CnVRNyQ=
Subject key identifier: FC:89:31:C6:3A:7A:22:36:E5:3D:C5:98:10:46:60:51:F7:1B:E0:13
Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Certificate serial: 01926B3A323D728AB39ADAB9A7B99E99585D
Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/_Ikxxjp6IjblPcWYEEZgUfcb4BM.roa
Signing time: Tue 08 Oct 2024 08:23:48 +0000
ROA not before: Tue 08 Oct 2024 08:23:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214652
IP address blocks: 2a14:4c40::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:3a:32:3d:72:8a:b3:9a:da:b9:a7:b9:9e:99:58:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106
Validity
Not Before: Oct 8 08:23:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc8931c63a7a2236e53dc59810466051f71be013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:d7:da:da:43:4a:5f:b0:0c:31:42:70:3c:
e7:6f:9c:3e:3d:bc:d0:0f:c8:85:5a:c7:41:23:54:
cb:e6:71:bf:d2:b6:21:d5:e2:a8:51:29:88:3d:d1:
55:21:e4:d6:b7:b7:6c:53:48:96:85:c5:ad:de:4d:
90:98:28:d5:d4:ac:05:8f:d3:e5:ec:aa:87:38:de:
39:05:f3:39:11:70:b0:f8:1f:ad:fe:9c:4e:a3:da:
db:c6:4d:1c:4e:60:5d:6d:d5:80:5a:92:75:64:85:
fc:52:43:b1:32:92:9f:08:8f:27:8b:49:2c:6a:de:
1d:55:b4:46:d8:b1:6a:39:93:14:d4:49:d8:47:51:
3f:76:32:40:76:0c:3d:a5:ac:f5:c4:0b:17:c3:d6:
74:cc:ba:fd:05:07:f2:7a:95:6e:a2:09:fc:1d:a2:
40:83:1b:9c:af:ff:34:8b:5b:07:fd:f5:7a:d9:5a:
bb:17:a1:55:0c:13:5e:e4:78:ca:04:d4:6c:4c:93:
d6:ed:a2:e6:69:c1:3e:cc:c8:1a:ca:23:b2:80:59:
75:e6:a3:72:38:98:4d:0a:7b:63:ae:27:c1:c6:e0:
d6:61:40:48:26:1b:ec:56:5d:dd:1d:3c:18:49:e4:
c9:2b:4d:84:69:f2:5f:a2:9d:4c:69:6c:0e:67:f5:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:89:31:C6:3A:7A:22:36:E5:3D:C5:98:10:46:60:51:F7:1B:E0:13
X509v3 Authority Key Identifier:
keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/_Ikxxjp6IjblPcWYEEZgUfcb4BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4c40::/40
Signature Algorithm: sha256WithRSAEncryption
50:05:27:0f:0a:08:a1:5c:58:3f:68:c7:b9:bf:6f:6f:ca:9c:
1e:19:f2:43:31:c4:6c:03:87:9b:18:42:e5:ba:3f:67:bd:b6:
3a:69:fd:bc:c5:01:49:96:f8:25:bf:a5:93:a8:75:7a:46:6e:
1d:02:a1:57:87:df:92:2c:85:a3:f3:15:33:b4:79:b6:d3:bc:
2f:39:85:ab:38:c3:74:a1:73:ca:87:40:00:90:ed:32:eb:d9:
b2:bb:33:0b:46:dc:56:86:6d:ab:45:cc:ff:c3:d8:56:d2:2c:
c2:61:ff:77:07:c2:f9:0a:2b:d3:0f:31:a1:96:3d:9d:18:5b:
61:b5:3b:d1:97:62:cb:30:24:98:95:ad:a8:97:17:d1:db:93:
48:93:6c:9d:14:bc:b5:d8:2b:21:d8:10:7c:31:8f:06:c5:e2:
20:71:a2:59:04:30:d3:dd:3f:da:80:06:41:d1:b6:0b:df:57:
a4:08:e8:48:42:fc:08:c2:7b:22:a5:a8:ba:c9:56:99:22:ae:
6b:34:ed:51:54:22:6f:83:58:a6:32:0d:d6:2b:6c:d3:7f:4e:
db:10:d1:85:d5:6e:2b:a3:19:42:1f:07:1a:2b:eb:56:ef:28:
e8:37:79:51:ad:38:df:7f:83:b7:20:6f:82:bb:58:a6:9f:be:
40:af:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:48:51 2025 by rpki-client