Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/pf9pYltI1OwW0D01sHQ-OnwyaTs.roa
File: pf9pYltI1OwW0D01sHQ-OnwyaTs.roa (raw, json)
Hash identifier: DxAcO2+RaoLO6flsHAqAB38hTUiJjUX+fQp24J1CZGE=
Subject key identifier: A5:FF:69:62:5B:48:D4:EC:16:D0:3D:35:B0:74:3E:3A:7C:32:69:3B
Certificate issuer: /CN=1ccf33cf78477313c7382e89b17573ed68588b93
Certificate serial: 0193BA8B77DC84EB95741CED749342DD0074
Authority key identifier: 1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/pf9pYltI1OwW0D01sHQ-OnwyaTs.roa
Signing time: Thu 12 Dec 2024 11:05:22 +0000
ROA not before: Thu 12 Dec 2024 11:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213953
IP address blocks: 2a14:ec00:3::/48 maxlen: 48
2a14:ec00:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:8b:77:dc:84:eb:95:74:1c:ed:74:93:42:dd:00:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ccf33cf78477313c7382e89b17573ed68588b93
Validity
Not Before: Dec 12 11:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5ff69625b48d4ec16d03d35b0743e3a7c32693b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:92:d1:99:6b:60:63:71:81:e4:89:70:28:
d4:93:75:ee:f9:2e:31:3e:56:02:08:f9:33:52:55:
bb:83:46:13:56:0a:44:78:7a:fa:f4:72:20:db:b0:
ca:c0:5c:d3:f1:d3:20:d6:a4:71:62:57:c9:b9:2c:
24:aa:94:ce:cb:3c:da:ce:a8:2a:f1:65:8b:a6:28:
6c:a6:2f:f3:cc:19:78:b6:c5:4e:9f:c9:ac:dd:51:
b7:d5:51:7d:2e:02:de:9f:f8:3d:f7:42:0e:ad:0f:
c9:15:c8:97:49:44:12:af:f7:0d:ef:75:22:b5:8a:
d8:c1:af:c9:0d:28:2f:fd:a2:5f:64:ca:d6:cb:52:
92:4d:ea:85:59:92:5c:a2:f8:e6:a3:6a:38:1d:74:
99:ad:72:07:f0:a3:2a:4b:40:c0:90:27:46:02:7b:
5b:be:9a:eb:00:05:81:5b:95:e5:f9:19:98:7a:83:
8c:cf:fe:d1:35:6e:b1:78:94:13:0e:c0:c6:18:f5:
11:86:f6:48:c9:4f:fa:11:3e:08:7a:a6:31:37:76:
9a:19:b7:5d:7a:f8:ab:2e:0d:b8:3c:a8:a8:00:2f:
b0:8c:43:5a:da:29:e7:eb:36:26:57:60:66:75:a5:
02:ef:0d:0c:bb:48:00:5d:50:61:58:28:61:87:9c:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FF:69:62:5B:48:D4:EC:16:D0:3D:35:B0:74:3E:3A:7C:32:69:3B
X509v3 Authority Key Identifier:
keyid:1C:CF:33:CF:78:47:73:13:C7:38:2E:89:B1:75:73:ED:68:58:8B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM8zz3hHcxPHOC6JsXVz7WhYi5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/pf9pYltI1OwW0D01sHQ-OnwyaTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cef27e-9903-4c3f-807c-128e0053dccf/1/HM8zz3hHcxPHOC6JsXVz7WhYi5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ec00:3::-2a14:ec00:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
19:b4:3f:3d:e9:ca:3e:eb:a3:45:1d:fe:38:e6:f5:93:17:cc:
3b:57:5d:97:eb:a5:73:c6:bc:f8:69:40:56:e0:d1:6a:e2:27:
be:81:8d:cb:8c:af:55:00:e7:d3:f8:e2:e3:0a:84:81:97:a1:
a5:69:1a:38:cb:45:73:8c:0b:32:47:6a:41:6f:5d:c6:24:ef:
10:ed:81:57:69:8e:0f:63:99:95:cd:4c:53:88:fd:09:c9:e2:
c9:05:06:24:21:3c:8f:48:b8:35:52:2d:d1:9b:33:15:cf:e7:
e8:c5:87:7e:1a:f7:c0:16:82:63:b9:01:64:5e:c6:2e:75:ea:
de:7e:8e:97:23:54:36:5c:40:50:7f:b0:39:4a:7b:53:f6:fa:
3f:fc:aa:00:bc:ae:d0:d5:55:4e:e3:75:e7:ad:77:46:cb:06:
26:cc:1b:57:be:84:99:11:2d:ef:b9:30:9d:46:41:95:1d:df:
c6:5e:f0:08:15:09:c6:c2:e4:88:8d:a3:74:97:89:bc:4a:7d:
9a:63:34:83:89:ae:62:f4:21:89:69:6f:34:e1:76:d5:33:6a:
83:00:ff:63:5d:3c:f1:2b:af:6f:27:87:40:54:43:5d:9d:f3:
7f:50:f7:8e:1d:d3:58:24:db:d2:0c:a5:91:f7:9e:ca:4a:54:
ba:ff:f2:bd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 9 19:47:57 2025 by rpki-client