Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/l0iGvGIW6HkeOPvS_q6QBGH3Uvk.roa
File: l0iGvGIW6HkeOPvS_q6QBGH3Uvk.roa (raw, json)
Hash identifier: t7ytFP/PpEmUoW0xmJGNgrP9IDT4c09WHRurQL+Ec/o=
Subject key identifier: 97:48:86:BC:62:16:E8:79:1E:38:FB:D2:FE:AE:90:04:61:F7:52:F9
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FDA6A2F32D9FF54BB156E08DE11B6
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/l0iGvGIW6HkeOPvS_q6QBGH3Uvk.roa
Signing time: Tue 02 Jan 2024 04:30:22 +0000
ROA not before: Tue 02 Jan 2024 04:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202983
IP address blocks: 2a03:5840:300::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 May 2024 16:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:da:6a:2f:32:d9:ff:54:bb:15:6e:08:de:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974886bc6216e8791e38fbd2feae900461f752f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ea:cc:62:73:b4:15:c3:0c:f2:81:db:93:7e:
ea:22:6f:47:5b:2f:22:42:c2:7c:81:22:8d:61:1c:
be:02:bd:02:13:15:5a:9d:84:88:12:7c:84:5b:23:
99:cb:c2:b5:a8:b4:63:8b:d2:a7:87:9a:1f:bc:bd:
6a:de:30:7d:e7:69:96:ac:47:f8:5f:b0:03:7c:85:
ba:8a:1d:6b:72:f8:c6:55:25:b9:6f:8f:e3:6d:0b:
0d:19:04:6f:5d:af:ea:4a:bc:8d:94:1a:db:17:76:
6b:60:d0:eb:94:72:9a:0b:7e:5d:5e:68:de:f3:65:
c6:f3:21:76:f9:53:00:d5:15:42:b0:96:1a:d8:6e:
1b:57:70:50:58:87:77:f5:e5:69:64:28:6e:32:1a:
f9:7f:c3:ea:68:15:5e:33:6f:60:65:56:77:13:3d:
23:37:1a:2c:5e:f7:26:46:40:d6:0d:8e:12:59:3a:
47:b4:34:02:ee:17:fe:17:b6:2f:f3:67:ae:d7:98:
27:91:a5:0a:3c:62:14:51:23:82:c4:c2:f2:85:48:
0d:4d:b8:f7:f1:23:d0:6c:3b:9f:8e:a2:3a:7e:d1:
a6:34:47:0f:bf:2f:8a:db:59:06:73:08:69:06:cf:
21:2c:50:2d:fa:fb:e1:bf:5d:48:33:4f:73:35:3c:
b4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:48:86:BC:62:16:E8:79:1E:38:FB:D2:FE:AE:90:04:61:F7:52:F9
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/l0iGvGIW6HkeOPvS_q6QBGH3Uvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:300::/44
Signature Algorithm: sha256WithRSAEncryption
80:a8:8b:cc:18:88:8f:02:d2:e6:45:6d:4f:aa:1e:da:ec:aa:
56:b3:be:9c:1c:5c:cd:9f:56:cf:0d:86:b6:50:ce:2a:71:99:
1a:c4:a8:a5:0f:00:a9:c1:7e:9b:7a:59:38:af:04:af:e1:47:
51:d5:72:01:2e:08:74:26:3a:ec:cc:ba:3b:6e:0d:18:9b:62:
fd:72:05:39:35:86:f2:82:17:ae:81:e3:95:03:db:42:f1:90:
47:f3:b9:c3:fe:2c:31:e6:ea:b0:82:60:ae:39:df:a4:ec:24:
c6:7d:5e:ec:46:6a:1d:ee:d2:f4:59:d4:cf:94:d1:3f:e0:11:
48:f8:96:ff:4d:c8:c8:13:db:66:56:e9:36:91:6e:36:67:6e:
f2:b3:b4:cb:74:d6:48:35:d0:2b:d2:72:81:77:4d:ee:e6:da:
69:2d:0f:08:b8:87:2b:63:84:35:0e:1d:a2:08:35:51:c3:d2:
18:58:ab:9a:6e:06:43:de:a8:39:4e:4a:9b:38:0e:dd:53:d6:
7c:a2:8e:f4:38:3f:9f:fe:e5:a4:9e:05:cd:01:b3:0f:e4:c8:
d0:10:2d:2c:b0:f9:39:6f:30:a5:17:2f:07:09:0c:f3:d3:44:
22:64:b8:91:dc:44:f6:8f:67:ce:0c:df:7f:2b:1d:c5:8f:75:
e8:c0:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:28 2025 by rpki-client