Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/28PJHgYzvVYG-SNyTx8AjRH2Blw.roa
File: 28PJHgYzvVYG-SNyTx8AjRH2Blw.roa (raw, json)
Hash identifier: 8Yc5PgmyLM5Rk2a30HAGhxBrv/9DLGCaGqCTzeSqId0=
Subject key identifier: DB:C3:C9:1E:06:33:BD:56:06:F9:23:72:4F:1F:00:8D:11:F6:06:5C
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0193C141E9BF533DB19B600A14B18F86350A
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/28PJHgYzvVYG-SNyTx8AjRH2Blw.roa
Signing time: Fri 13 Dec 2024 18:22:22 +0000
ROA not before: Fri 13 Dec 2024 18:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 2a0e:4bc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c1:41:e9:bf:53:3d:b1:9b:60:0a:14:b1:8f:86:35:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Dec 13 18:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc3c91e0633bd5606f923724f1f008d11f6065c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:92:49:d2:3b:b9:f3:13:ad:01:6d:2a:9d:95:
fa:d0:49:4a:75:47:0f:b5:b1:dd:a9:ff:c9:08:41:
bb:80:c8:fd:45:ca:5c:92:de:ff:fe:94:c1:9c:11:
db:bf:e8:9f:a5:76:12:05:df:1e:80:8f:78:b3:07:
40:5f:13:7d:9a:20:a0:c1:2d:63:06:17:0a:e2:f2:
cb:ca:69:9a:92:d0:f2:97:73:3f:9f:ff:84:88:60:
ef:86:80:65:68:36:8b:48:cc:d2:66:a6:45:f4:85:
96:1b:64:ed:07:0b:e3:be:88:6a:3d:25:17:b1:32:
f4:d5:bf:33:56:7b:bc:91:67:73:9d:02:62:98:f7:
64:aa:ae:34:31:5f:08:78:c1:fc:8b:e8:e1:b6:ba:
ab:80:33:65:23:38:86:e3:02:5f:04:02:98:46:38:
6d:7d:98:14:18:ba:94:6f:c7:9c:44:79:28:92:d0:
24:39:0b:41:5e:9d:eb:5f:ca:c4:fb:21:35:53:dd:
60:de:1c:8b:41:14:58:6d:1e:ce:60:f0:39:58:77:
18:dc:88:a4:b4:11:54:22:07:ed:b9:39:5a:e5:20:
7c:fb:e0:69:f4:83:87:7f:9c:53:25:3d:c1:59:3e:
93:f1:c0:c9:4a:af:e3:75:08:5b:6a:2d:3f:b4:21:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C3:C9:1E:06:33:BD:56:06:F9:23:72:4F:1F:00:8D:11:F6:06:5C
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/28PJHgYzvVYG-SNyTx8AjRH2Blw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc1::/32
Signature Algorithm: sha256WithRSAEncryption
3e:70:4b:3c:4f:0e:c6:19:14:92:93:05:21:a6:38:78:a4:73:
28:85:15:c1:18:ff:ed:ae:e4:54:75:62:88:ab:42:d2:02:ca:
f7:58:51:6e:89:a4:38:e2:bb:c9:11:86:60:03:52:06:35:07:
db:34:1d:54:5f:4e:fa:e2:58:b5:33:f1:93:56:41:e5:c8:0a:
c5:bd:e0:bb:8d:9f:2c:6b:7a:39:09:be:ae:cb:e5:21:24:9f:
a8:dd:8d:da:22:bc:78:87:3e:40:cd:b4:8a:61:1b:4b:fa:1e:
f4:13:18:5a:51:08:ab:c9:50:db:36:33:d1:1f:11:ed:e7:64:
cc:fb:85:4a:5a:14:f9:f8:ef:65:06:e8:8c:70:cc:76:be:2a:
5b:05:1d:c4:6b:5b:9e:f1:8d:0f:1d:8b:86:5a:6b:f1:0a:2e:
bb:0b:18:9c:4e:ee:16:e3:a4:ed:2b:58:a4:31:a0:d5:7e:a9:
50:5f:87:a7:2d:f4:85:0c:db:7d:db:e2:57:18:d8:43:6e:1a:
d5:b0:ee:1e:5e:97:13:38:4f:60:c6:29:21:a4:69:b6:86:a0:
45:5c:93:5a:3a:15:f1:ec:b3:ed:84:63:ea:54:04:da:1f:c6:
89:ef:02:87:39:00:65:9a:d5:0d:11:80:4f:f1:fe:4f:a5:d6:
10:c1:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:45:40 2025 by rpki-client