Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/OUVlUsxJABMVSia_2Ckbt1jWObc.roa
File: OUVlUsxJABMVSia_2Ckbt1jWObc.roa (raw, json)
Hash identifier: dX2U1REA0ZLdJKErJvPrcg49inCRLO7qXzyJ+u9noYc=
Subject key identifier: 39:45:65:52:CC:49:00:13:15:4A:26:BF:D8:29:1B:B7:58:D6:39:B7
Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial: 01938D049C9AE990CB4A75CDA52CBCC53679
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/OUVlUsxJABMVSia_2Ckbt1jWObc.roa
Signing time: Tue 03 Dec 2024 14:55:09 +0000
ROA not before: Tue 03 Dec 2024 14:55:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213792
IP address blocks: 2a01:e0c0::/32 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8d:04:9c:9a:e9:90:cb:4a:75:cd:a5:2c:bc:c5:36:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Validity
Not Before: Dec 3 14:55:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39456552cc490013154a26bfd8291bb758d639b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:a4:8b:e1:f6:04:3c:5d:b8:89:69:9c:7e:
fa:77:3e:e6:00:41:12:1b:d5:40:7d:31:45:ce:49:
bc:ca:7b:24:eb:f1:f8:1a:e4:bb:0e:db:6c:8f:29:
d2:4a:d9:5d:5b:ac:de:00:f1:b4:de:40:de:0a:8b:
f1:34:5f:fe:e0:9e:3f:93:0e:43:30:d1:34:70:71:
cb:de:fc:9c:c9:97:17:f6:c3:bf:67:7d:13:51:62:
95:bc:63:81:d2:bd:5b:80:22:0e:f1:c0:5c:74:a4:
08:b2:71:8f:80:6f:3f:01:5a:fe:d6:99:13:ff:de:
54:56:37:95:ca:41:ea:e4:98:05:22:42:a8:f1:9a:
48:aa:de:6b:a6:74:d0:bd:a4:9e:ca:d0:44:1a:45:
0e:29:38:5e:3b:da:2a:35:8a:cf:5e:46:5e:a3:f2:
27:2b:cc:ea:69:e1:a6:be:3f:ac:5b:4f:74:ca:d4:
16:00:a3:e4:63:be:e9:f2:a0:62:f6:e9:a3:64:ea:
4f:86:c6:e8:bc:7b:00:fa:5a:36:c1:2b:f1:8a:74:
06:73:42:a2:0a:4e:9f:62:ff:ab:b8:9b:a3:b2:8e:
ee:d3:23:15:0f:71:2b:f8:14:7d:b7:58:4f:db:b0:
5d:f7:c7:2c:eb:eb:be:16:dd:6b:4c:32:24:7e:28:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:45:65:52:CC:49:00:13:15:4A:26:BF:D8:29:1B:B7:58:D6:39:B7
X509v3 Authority Key Identifier:
keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/OUVlUsxJABMVSia_2Ckbt1jWObc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e0c0::/32
Signature Algorithm: sha256WithRSAEncryption
1c:95:8f:34:18:ad:81:90:84:74:31:a0:55:a4:31:16:b3:f9:
0f:83:39:b7:fc:01:fa:a9:d2:d9:db:f6:3c:6b:9d:d2:99:3c:
8c:af:e3:45:69:b8:70:5b:dc:f8:77:51:53:ee:ab:2f:30:48:
2a:d4:32:71:91:3e:b5:ee:24:7c:ae:db:4d:85:9e:f6:f5:f3:
72:8b:75:bd:04:66:fb:5c:12:34:9b:a3:83:1f:e4:ef:20:0a:
04:90:9d:cb:6e:8f:28:bf:7c:c7:54:1c:5b:df:e8:6a:d4:d2:
82:8b:77:b6:94:eb:8a:60:b3:f3:8d:1a:ce:76:33:14:af:b8:
20:db:f8:9a:66:97:22:04:bf:f0:db:6f:27:eb:b3:1b:85:f7:
df:1d:02:ba:13:e3:20:5d:e4:72:62:12:d9:96:4a:a4:14:86:
03:09:3f:fd:2c:ba:d1:f8:20:b8:d6:47:4b:49:93:24:0f:e4:
bc:ed:2d:16:1f:49:52:ca:fa:1b:4a:88:c1:94:c1:67:34:7f:
53:50:bd:e6:b3:44:03:79:9a:18:01:83:1e:8d:67:be:d0:74:
b0:36:8a:df:51:68:1a:1a:7f:18:3a:27:94:26:73:82:6c:a8:
9b:02:3c:d0:ee:6a:26:dd:f2:85:2f:b1:7e:8b:4f:3f:30:f0:
b8:c9:7d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:36:00 2025 by rpki-client