Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/cgoH6kjAkGMU-ytQTrHkCeDPl2g.roa
File: cgoH6kjAkGMU-ytQTrHkCeDPl2g.roa (raw, json)
Hash identifier: DOJvbh544z+enHoXM/B6hxfkjzpDwm1dbNmZoCXfkDk=
Subject key identifier: 72:0A:07:EA:48:C0:90:63:14:FB:2B:50:4E:B1:E4:09:E0:CF:97:68
Certificate issuer: /CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Certificate serial: 0193734212082B52EE25D2C6D1A8D82C0927
Authority key identifier: 9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/cgoH6kjAkGMU-ytQTrHkCeDPl2g.roa
Signing time: Thu 28 Nov 2024 14:52:09 +0000
ROA not before: Thu 28 Nov 2024 14:52:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213792
IP address blocks: 2a01:e0c0::/32 maxlen: 40
Validation: Failed, certificate revoked on Tue 03 Dec 2024 14:53:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:42:12:08:2b:52:ee:25:d2:c6:d1:a8:d8:2c:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c7122f2f7fa530bf1a8ffcf96a930f69b30f786
Validity
Not Before: Nov 28 14:52:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=720a07ea48c0906314fb2b504eb1e409e0cf9768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:60:f8:48:60:0c:a8:7d:3a:7c:6d:fb:2d:
1f:0d:6d:67:50:d1:82:f6:41:c4:e3:7d:01:31:ad:
e2:1c:e0:02:f0:d2:e0:3e:31:9b:f7:16:45:88:06:
8c:ac:7a:72:1d:c9:cf:a2:06:f7:42:da:8f:04:e4:
fd:e6:27:3d:c9:94:48:1a:ff:8a:0e:0b:b1:01:9b:
0c:59:6e:48:d3:56:9f:1b:df:ee:d4:f7:61:85:6b:
c4:38:cf:c2:c5:2d:09:fc:66:43:99:e7:8f:b7:0c:
15:2f:65:4b:bc:c6:7d:a6:15:17:4f:4a:0e:4e:ec:
4c:b8:8b:dd:cf:78:a1:dd:d7:ae:01:19:a7:01:22:
60:3c:7d:0f:5f:af:05:8b:76:dd:e1:39:bb:37:8c:
b7:1e:59:9e:78:77:fe:b5:c2:81:f8:6e:7f:03:34:
0d:51:fb:07:f3:4f:c7:31:e0:04:85:d0:66:bf:28:
7d:0d:1e:57:7a:2c:ab:3a:d4:2a:37:c7:f9:6b:90:
b1:d2:89:d8:7a:b7:d0:45:0b:eb:a1:99:de:a5:0e:
f5:bb:42:e5:1a:7c:65:82:3b:0f:ed:e1:fa:da:41:
89:ab:1b:03:0f:f6:20:ba:7a:3a:ed:34:7f:2d:8c:
40:fd:20:9e:47:6c:e2:02:2e:7f:08:65:98:9a:85:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0A:07:EA:48:C0:90:63:14:FB:2B:50:4E:B1:E4:09:E0:CF:97:68
X509v3 Authority Key Identifier:
keyid:9C:71:22:F2:F7:FA:53:0B:F1:A8:FF:CF:96:A9:30:F6:9B:30:F7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHEi8vf6UwvxqP_Plqkw9psw94Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/cgoH6kjAkGMU-ytQTrHkCeDPl2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/83e1fe-3d48-4cd6-a60b-6b27336d269e/1/nHEi8vf6UwvxqP_Plqkw9psw94Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e0c0::/32
Signature Algorithm: sha256WithRSAEncryption
74:d3:ce:d0:f4:22:70:bc:83:d3:1a:ab:b4:a6:8c:d5:c5:77:
c9:e7:55:63:16:48:8a:dc:5c:30:0b:78:fd:25:a3:6f:39:79:
a0:ac:c3:76:63:42:fd:48:8c:5e:a8:29:65:4e:d6:a9:3b:e9:
37:9a:7a:4d:4f:d0:e7:18:0b:3a:80:21:e5:9e:8b:63:af:73:
e7:0b:6e:d5:d1:1b:e0:3d:d4:ef:22:01:f9:e1:ac:a1:27:0b:
66:5e:fe:1e:16:24:49:a6:55:79:0d:19:1e:71:ad:42:d8:ae:
1c:9f:6e:ed:06:fe:c4:8a:7f:4a:6b:bb:4a:40:d7:3f:d6:31:
3f:ba:e2:20:95:df:e8:96:6d:5c:56:13:d4:4d:76:a3:bc:06:
a2:99:e4:60:95:a5:44:f7:0d:0f:aa:5c:43:58:f5:ca:0f:80:
67:a5:e0:4e:64:3a:1d:33:00:0b:46:6d:4a:1f:c4:d4:cb:43:
a0:d9:99:69:1e:3a:64:7a:17:3f:c7:8b:7c:7f:86:13:b9:c1:
6b:87:79:11:d1:ab:13:2a:ee:21:8c:95:d8:77:79:ba:3f:6c:
a7:03:8e:bf:f5:0d:4a:db:0d:96:98:0c:7f:3f:2e:7c:50:2c:
5d:8b:2f:68:b1:12:f4:c8:ea:5e:dd:07:25:c4:3d:75:10:d2:
46:4c:e1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:41:33 2025 by rpki-client