Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tUgJ8z1baN4ISsrHKuM0kC03M_s.roa
File: tUgJ8z1baN4ISsrHKuM0kC03M_s.roa (raw, json)
Hash identifier: lk126YRJVuIoum8AE8pveWNZS9C2/CQ/zDmqfgqHXpw=
Subject key identifier: B5:48:09:F3:3D:5B:68:DE:08:4A:CA:C7:2A:E3:34:90:2D:37:33:FB
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018CC34899C72884C756757CDB16D3CBC644
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tUgJ8z1baN4ISsrHKuM0kC03M_s.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212483
IP address blocks: 2a0d:2587::/33 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:99:c7:28:84:c7:56:75:7c:db:16:d3:cb:c6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b54809f33d5b68de084acac72ae334902d3733fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:64:ee:bd:3f:ad:eb:7a:6f:ed:00:f5:34:
dc:b2:ba:b1:12:3e:b9:bb:ed:fb:bc:b3:9b:33:a7:
07:c9:35:1e:5d:fd:48:7a:43:5b:a3:14:a9:4c:bd:
64:3b:41:6b:b2:5d:5b:42:0d:84:aa:0c:a1:0c:c6:
82:58:b2:11:5b:a3:28:9d:84:4c:9d:ab:e4:a3:f1:
70:5a:16:6e:4d:3b:16:1c:dc:c9:d7:22:bf:9a:3a:
8d:69:fc:64:18:0e:cf:ef:ab:b0:f7:fa:fb:0c:a5:
a9:34:60:a1:73:fb:59:9d:8a:1f:fe:f2:26:31:b7:
e6:df:86:b2:61:0f:b6:3b:c0:34:1e:a6:11:23:e6:
7c:bf:89:f6:a0:6e:9c:9c:91:e5:ad:5c:48:25:db:
55:b0:c5:95:fd:9d:5e:0b:a6:17:27:04:90:1d:21:
dd:33:1b:88:7c:2c:fb:ef:c4:c4:16:fa:78:4c:18:
35:eb:1f:8c:66:7f:2c:f7:0c:2e:a5:e8:10:bd:3b:
25:c2:6b:ff:31:15:1c:73:e3:7a:57:17:6e:9a:c5:
b5:62:ee:26:c7:26:19:b2:65:71:57:38:fa:4d:61:
72:4c:b0:54:20:9f:e3:9f:10:1d:ac:89:d4:20:d0:
9c:bd:bd:b9:8b:96:c8:54:f9:bb:1c:82:0b:a6:0b:
98:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:48:09:F3:3D:5B:68:DE:08:4A:CA:C7:2A:E3:34:90:2D:37:33:FB
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/tUgJ8z1baN4ISsrHKuM0kC03M_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2587::/33
Signature Algorithm: sha256WithRSAEncryption
3e:09:03:e3:83:a5:21:8a:4e:3d:d7:0c:c2:6e:7f:74:be:f5:
30:35:ac:11:d6:86:89:70:2e:42:3a:33:7d:37:48:59:13:2c:
9f:76:e7:ef:c0:98:fa:fd:91:23:a8:a5:5f:3b:a5:9e:b3:be:
bf:9e:35:d9:b2:24:0d:ec:32:b3:52:70:a6:c1:45:6d:70:78:
8f:64:b1:e5:a8:07:4d:f0:5f:05:aa:f5:4b:d4:3e:13:78:8c:
b5:f8:47:48:3a:98:b8:47:67:70:65:9a:73:e6:ad:18:55:da:
03:06:b9:77:cb:53:32:62:bc:72:d9:12:7c:3f:ef:ac:7c:f7:
e4:16:f9:6a:c6:b1:ea:21:b0:0b:04:16:ba:de:2d:27:5d:8f:
bc:e5:b9:26:b6:0a:7e:9e:42:2b:0a:b0:c2:dc:f0:bb:5d:ab:
8c:65:3e:7c:45:ca:00:15:07:7f:a0:48:fc:13:a5:0a:93:1a:
ea:cd:eb:cd:5b:c8:e8:03:4e:b7:fb:ea:12:b1:e4:a4:21:a6:
c4:1c:9d:e9:36:1d:fc:bf:4a:14:36:69:ce:13:ac:ac:41:6e:
e4:77:02:64:ee:03:79:a3:69:f5:4e:97:2c:01:cc:0b:e0:57:
55:32:f6:fc:40:81:73:49:0a:fa:98:66:61:cb:a3:75:f5:2e:
9a:2d:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:41:06 2025 by rpki-client