Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/uRxWKZGztR8tpn4RKAPFSQk5-yc.roa
File: uRxWKZGztR8tpn4RKAPFSQk5-yc.roa (raw, json)
Hash identifier: v+t5jU9odi6HwDSkLquXDMVNArYh1STseuZVqSdeEGY=
Subject key identifier: B9:1C:56:29:91:B3:B5:1F:2D:A6:7E:11:28:03:C5:49:09:39:FB:27
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 018CC26D28C0692CEC4A8D27799E2D57FC62
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/uRxWKZGztR8tpn4RKAPFSQk5-yc.roa
Signing time: Mon 01 Jan 2024 00:29:42 +0000
ROA not before: Mon 01 Jan 2024 00:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59990
IP address blocks: 2a00:1d60:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:28:c0:69:2c:ec:4a:8d:27:79:9e:2d:57:fc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Jan 1 00:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b91c562991b3b51f2da67e112803c5490939fb27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:6c:70:d8:c7:10:e7:47:ff:24:9c:5b:a7:
d0:49:35:56:f0:56:16:84:9b:a6:81:fa:93:bd:ab:
dd:0d:8f:6c:fc:06:40:e2:00:fd:06:04:ca:15:2e:
78:92:bd:2c:1f:37:ba:b4:b0:50:be:0d:19:4e:fa:
3f:58:2e:53:4b:31:44:2e:38:d4:e4:19:91:30:61:
89:c7:69:69:ee:d7:74:24:04:76:4a:84:e4:30:f4:
b3:f9:68:a6:74:1c:08:18:6c:d6:de:c9:d2:a7:14:
95:29:62:0c:b7:ad:d8:16:d2:01:9d:14:b9:7e:8d:
af:c2:f7:41:25:6b:f5:ce:0b:59:d5:3a:c2:f9:8f:
da:00:60:25:03:04:98:df:da:86:3d:93:b1:8e:2f:
86:a1:00:58:33:16:d7:c6:94:58:ae:2b:a6:a6:5f:
28:ce:24:8a:99:c2:f4:c7:c6:7b:8e:3e:53:e8:ea:
75:a9:70:9a:ba:ef:5b:3b:53:fb:fb:e6:57:fa:be:
a5:6c:d5:dd:23:8f:1c:76:63:82:d0:68:e0:33:6e:
1b:dc:9f:8d:35:33:f7:24:51:cc:e9:0f:fb:6c:e5:
0d:ab:be:4e:37:f3:6d:54:f0:f2:06:30:d2:aa:89:
5a:0b:98:72:ce:a5:18:c9:2e:95:3c:fb:e4:56:a6:
8e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:1C:56:29:91:B3:B5:1F:2D:A6:7E:11:28:03:C5:49:09:39:FB:27
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/uRxWKZGztR8tpn4RKAPFSQk5-yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1d60:f000::/36
Signature Algorithm: sha256WithRSAEncryption
84:6b:3d:87:0e:6b:ae:73:65:a7:1c:36:65:f1:2e:dd:38:b9:
ae:f1:05:b0:1a:9a:1b:57:45:52:c6:22:9b:dd:bf:1a:26:93:
09:df:fd:1d:63:ac:1b:85:45:1b:d0:d0:24:ca:ac:14:8a:89:
9e:69:14:98:c6:4b:6e:d2:c2:3b:b1:bd:99:d9:95:ee:f1:6c:
c3:9b:0e:69:82:28:de:75:80:38:e5:98:29:91:f4:5e:22:09:
77:20:de:7e:65:dc:02:9d:11:d9:d0:24:66:d4:f2:7f:73:5e:
e5:3e:a1:cd:fe:91:8d:1c:72:6f:68:db:8c:b7:b2:d0:a2:f4:
dd:e1:84:58:83:f7:d4:45:20:d2:79:b7:7a:a4:6e:90:9c:83:
60:36:39:fd:6f:b4:04:1b:df:e3:09:1f:04:4d:fe:6d:18:4b:
cb:14:7b:f3:9d:cd:69:94:82:2a:12:3e:c5:58:2f:73:45:e9:
d8:ec:3a:7f:4a:37:0c:ff:ed:e2:25:50:d9:fd:80:74:bc:4d:
bb:c4:fb:0b:16:ab:20:ca:df:86:0d:d8:19:6e:7f:e7:19:78:
a6:12:e7:04:02:18:80:77:64:2a:cb:b6:75:11:23:fb:7a:40:
14:0d:7e:c9:3c:97:ed:6d:62:bf:c2:c7:96:33:85:b3:ea:9f:
a0:be:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:21 2025 by rpki-client