Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/mDQ5RQ5PXw64s29lusbZ0PdMNo4.roa
File: mDQ5RQ5PXw64s29lusbZ0PdMNo4.roa (raw, json)
Hash identifier: +61g5tAL9r6uQpxw/wkLd9GjCb5zcBDpzxsYLWNymvI=
Subject key identifier: 98:34:39:45:0E:4F:5F:0E:B8:B3:6F:65:BA:C6:D9:D0:F7:4C:36:8E
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019426D991FE014AAA6C6CD1334EDE663EC8
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/mDQ5RQ5PXw64s29lusbZ0PdMNo4.roa
Signing time: Thu 02 Jan 2025 11:49:40 +0000
ROA not before: Thu 02 Jan 2025 11:49:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216183
IP address blocks: 2a03:5840:110::/48 maxlen: 48
2a03:5840:800::/37 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Jan 2025 16:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:91:fe:01:4a:aa:6c:6c:d1:33:4e:de:66:3e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 11:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=983439450e4f5f0eb8b36f65bac6d9d0f74c368e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:b9:2f:a5:fc:a3:2b:2e:90:5b:c5:c8:99:
49:6a:09:d1:81:e2:ff:b6:cc:28:30:31:53:b2:15:
9d:17:29:83:8f:80:b4:97:a0:8d:4e:6d:45:15:65:
da:f3:1a:07:8a:a0:45:75:b3:53:23:9f:6e:50:fa:
b2:e7:25:59:eb:85:69:da:2b:d4:c8:ca:d3:05:d9:
5f:d3:23:d7:29:aa:84:84:4e:0f:fc:ac:77:38:9d:
fe:bc:d7:c9:7b:20:90:49:b1:6f:a6:f4:5d:dd:a2:
91:e1:5c:fd:75:8e:06:3e:a2:dd:24:44:e7:b1:00:
b8:e1:29:19:be:4a:a0:ec:28:2c:e3:7d:a1:23:63:
e9:b6:84:78:f7:37:31:73:68:01:b1:aa:98:c1:ec:
e2:7a:f2:55:c3:a3:43:57:71:31:e2:e6:4e:61:f0:
58:74:14:1b:a0:6e:35:57:52:0e:39:eb:3f:d4:72:
93:3a:f9:2c:50:d8:3f:4f:a9:60:4d:a5:49:0f:76:
44:b0:26:d1:8c:56:fc:c2:ff:68:04:81:95:02:71:
74:9b:d9:5c:19:89:1e:2c:43:14:4f:18:34:c7:30:
7a:3b:a3:7e:46:92:ac:be:16:ec:2d:39:59:72:30:
62:aa:b7:ab:9b:d2:16:02:51:eb:18:8d:5e:05:cb:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:34:39:45:0E:4F:5F:0E:B8:B3:6F:65:BA:C6:D9:D0:F7:4C:36:8E
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/mDQ5RQ5PXw64s29lusbZ0PdMNo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:110::/48
2a03:5840:800::/37
Signature Algorithm: sha256WithRSAEncryption
2b:a4:85:61:91:09:fb:8c:32:5f:76:50:24:34:bb:17:d6:63:
68:8a:b2:4f:3e:8e:d4:c1:9f:36:43:23:4f:17:d8:87:bc:d5:
0d:df:e4:b3:45:83:0a:bf:93:bd:ca:df:23:96:36:3f:e4:0f:
70:ed:0c:8a:cb:7e:60:2a:e4:4e:05:e4:17:d1:b1:ac:09:e1:
39:de:ad:53:5a:cf:86:61:b1:7e:61:5e:83:0c:85:d4:91:49:
c5:82:9d:27:b6:fb:76:45:06:e1:5a:e9:ef:6b:da:4c:26:98:
8f:10:01:f3:d0:74:62:20:23:c0:7a:ea:f2:65:87:27:03:1e:
35:5d:1c:71:9c:1e:28:4a:5c:db:99:92:5e:bf:02:af:1f:12:
e2:16:64:3a:36:ae:23:1e:35:c5:af:94:51:f3:46:68:8f:29:
88:25:c8:ad:33:7c:2a:5a:99:fc:85:27:34:85:88:40:ad:e5:
82:43:9f:2d:61:5e:19:52:13:7a:3c:11:77:cc:e7:5b:95:7a:
dd:b4:6e:b0:fe:4b:10:c4:9c:a6:85:db:9d:06:92:3d:ef:32:
28:a0:76:3d:18:82:b9:1a:50:a1:0f:55:93:75:3e:f9:c2:65:
cb:78:66:70:3d:98:fa:44:60:dc:37:e9:7a:23:5c:28:c0:2a:
5d:67:a0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:16:48 2025 by rpki-client