Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/O0CxKE3CGxxELsCex--ptPgokxE.roa
File: O0CxKE3CGxxELsCex--ptPgokxE.roa (raw, json)
Hash identifier: Au3264fG+NNiCvd5H+MUzTnGqYFP5kRlkQmhUZjiG4o=
Subject key identifier: 3B:40:B1:28:4D:C2:1B:1C:44:2E:C0:9E:C7:EF:A9:B4:F8:28:93:11
Certificate issuer: /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial: 019362B06DE82B9F5A85D5B64BC2714B42FA
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/O0CxKE3CGxxELsCex--ptPgokxE.roa
Signing time: Mon 25 Nov 2024 09:39:09 +0000
ROA not before: Mon 25 Nov 2024 09:39:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 2a05:b100:1000::/36 maxlen: 36
2a05:b100:1000::/46 maxlen: 46
2a05:b100:1004::/46 maxlen: 46
2a05:b100:1008::/46 maxlen: 46
2a05:b100:100c::/46 maxlen: 46
2a05:b100:1010::/46 maxlen: 46
2a05:b100:1014::/46 maxlen: 46
2a05:b100:1018::/46 maxlen: 46
2a05:b100:101c::/46 maxlen: 46
2a05:b100:1020::/46 maxlen: 46
2a05:b100:1024::/46 maxlen: 46
2a05:b100:1028::/46 maxlen: 46
2a05:b100:102c::/46 maxlen: 46
2a05:b100:1030::/46 maxlen: 46
2a05:b100:1034::/46 maxlen: 46
2a05:b100:1038::/46 maxlen: 46
2a05:b100:103c::/46 maxlen: 46
2a05:b100:1200::/41 maxlen: 41
2a05:b100:1280::/41 maxlen: 41
2a05:b100:1300::/41 maxlen: 41
2a05:b100:1380::/41 maxlen: 41
2a05:b100:1400::/41 maxlen: 41
2a05:b100:1480::/41 maxlen: 41
2a05:b100:1500::/41 maxlen: 41
2a05:b100:1580::/41 maxlen: 41
2a05:b100:1600::/41 maxlen: 41
2a05:b100:1680::/41 maxlen: 41
2a05:b100:1700::/41 maxlen: 41
2a05:b100:1780::/41 maxlen: 41
2a05:b100:1800::/39 maxlen: 39
2a05:b100:1800::/41 maxlen: 41
2a05:b100:1880::/41 maxlen: 41
2a05:b100:1900::/41 maxlen: 41
2a05:b100:1980::/41 maxlen: 41
2a05:b100:1a00::/39 maxlen: 39
2a05:b100:1c00::/39 maxlen: 39
2a05:b100:1e00::/39 maxlen: 39
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:b0:6d:e8:2b:9f:5a:85:d5:b6:4b:c2:71:4b:42:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Validity
Not Before: Nov 25 09:39:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b40b1284dc21b1c442ec09ec7efa9b4f8289311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:d1:f7:2e:f4:04:87:6b:ad:9b:51:e0:b1:
68:26:89:da:3d:f0:22:58:da:f9:11:9a:1d:a7:e0:
f3:5c:ee:fb:6d:28:b9:0f:0e:13:3a:f2:1d:32:5e:
59:6d:d2:68:d6:83:46:fc:9e:4f:82:80:83:4e:13:
56:07:92:19:bf:1a:31:14:6c:05:7a:95:00:ee:8a:
7f:b8:d1:de:d6:82:ca:a0:47:f3:5d:19:df:ca:f7:
09:84:4a:13:4f:da:44:e7:21:bf:33:73:69:3d:c2:
19:bb:22:7a:55:d2:9c:6e:45:5a:fe:37:df:f3:83:
df:f9:72:fb:af:6c:1d:1f:b6:c0:27:51:47:cf:cc:
2f:61:46:dc:ba:06:06:f1:d1:68:28:14:1f:b3:1f:
07:ab:05:ed:ca:bf:33:ae:b4:fd:cc:93:c6:90:6d:
9d:18:e2:40:5c:63:2f:c3:0d:25:a1:d6:d0:8a:8f:
c7:fb:5c:a1:db:e4:37:e6:8d:b9:fe:1f:8e:fa:28:
46:24:f5:39:e4:88:d0:47:6f:28:07:0a:ef:e5:83:
0d:95:49:8d:a2:ed:48:e6:1d:09:09:54:0d:a1:b0:
f9:44:89:2e:c9:2a:71:b1:fa:34:d8:1f:c5:c2:1d:
8c:b9:8e:84:f5:84:dd:3f:6e:17:75:14:47:a3:4e:
4e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:40:B1:28:4D:C2:1B:1C:44:2E:C0:9E:C7:EF:A9:B4:F8:28:93:11
X509v3 Authority Key Identifier:
keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/O0CxKE3CGxxELsCex--ptPgokxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b100:1000::/36
Signature Algorithm: sha256WithRSAEncryption
64:2a:31:48:0e:d5:0c:ab:bb:4b:9d:e4:14:6d:9a:93:a6:59:
94:f1:dd:00:06:e0:8d:2e:bf:a3:86:cb:0c:9f:1e:99:70:69:
58:38:50:b8:5d:2d:c5:4f:96:2f:ed:34:8d:c0:ed:07:85:2d:
55:0d:7c:78:12:35:f2:31:a8:8a:d2:de:f4:f5:c4:d7:38:44:
e0:1a:48:23:72:42:75:4c:40:6a:53:64:40:e3:64:a3:02:94:
8f:f0:7d:ff:23:38:53:71:e0:0d:6d:46:8e:a9:c7:df:d5:35:
e1:f0:59:0a:92:4f:04:b4:2c:24:73:07:2c:31:8e:5e:9f:5c:
fb:b1:b6:98:56:64:89:39:cd:ca:27:f5:90:33:ea:fb:f3:a6:
ef:29:7b:03:ea:c8:3d:b2:04:60:f3:86:91:35:bc:86:d9:52:
fb:6d:c1:e8:0b:f3:ca:37:ff:63:73:57:45:e8:3f:50:7e:94:
8c:f5:0e:ae:f8:47:1e:0c:a3:15:25:11:74:d6:98:23:63:28:
8b:1a:73:2b:31:02:8f:fe:6a:d8:a8:24:89:4c:11:05:bd:a5:
34:94:0c:b8:8b:32:a5:79:d6:f3:b1:5c:37:2f:f8:11:7f:a4:
d2:1d:0d:18:52:b1:10:fc:21:8d:e9:71:e1:67:b6:13:82:65:
d0:7c:56:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:49:26 2025 by rpki-client