Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/b1aTRpYkUOWb4Je_WlJ8CESgGbk.roa
File: b1aTRpYkUOWb4Je_WlJ8CESgGbk.roa (raw, json)
Hash identifier: tQFRzeJMIhsUtyLXJJqZ95aIy0dyWN4BXIsgL2iNPJg=
Subject key identifier: 6F:56:93:46:96:24:50:E5:9B:E0:97:BF:5A:52:7C:08:44:A0:19:B9
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01936419260B0D420442DBFE01FFC6C0D4A5
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/b1aTRpYkUOWb4Je_WlJ8CESgGbk.roa
Signing time: Mon 25 Nov 2024 16:13:09 +0000
ROA not before: Mon 25 Nov 2024 16:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:5385::/32 maxlen: 32
2a0e:5387::/32 maxlen: 32
2a0e:5641::/32 maxlen: 32
2a0e:5643::/32 maxlen: 32
2a0e:5647::/32 maxlen: 32
2a0e:5900::/32 maxlen: 32
2a0e:5905::/32 maxlen: 32
2a0e:5906::/32 maxlen: 32
2a0e:8082::/32 maxlen: 32
2a0e:8084::/32 maxlen: 32
2a0e:8087::/32 maxlen: 32
2a0e:ccc0::/32 maxlen: 32
2a0e:ccc4::/32 maxlen: 32
2a0f:6fc1::/32 maxlen: 32
2a0f:6fc3::/32 maxlen: 32
2a0f:6fc7::/32 maxlen: 32
2a0f:b4c1::/32 maxlen: 32
2a0f:b4c2::/32 maxlen: 32
2a0f:b4c6::/32 maxlen: 32
2a0f:c081::/32 maxlen: 32
2a0f:c085::/32 maxlen: 32
2a0f:c087::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Dec 2024 18:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:64:19:26:0b:0d:42:04:42:db:fe:01:ff:c6:c0:d4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Nov 25 16:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f569346962450e59be097bf5a527c0844a019b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:34:ca:cb:99:3c:d3:32:52:26:8c:f8:05:
fc:d1:9e:9c:de:98:31:04:c2:12:b3:bc:80:81:64:
89:2a:df:b6:71:b1:82:f4:c4:5c:58:cc:0a:f5:f5:
0a:3f:07:39:a0:e3:ea:f9:12:b9:6b:15:34:13:1d:
54:8e:31:4e:15:c6:a9:90:97:29:4a:20:63:33:7e:
65:1a:76:2c:49:9a:6a:6b:94:5a:eb:86:d9:f4:9b:
16:27:40:06:47:37:5d:98:58:fe:c2:e2:e6:51:e6:
42:41:c8:f8:4e:7a:67:28:62:7d:29:bb:c9:4e:f2:
22:85:53:b1:88:17:10:de:ff:38:41:bc:d9:b3:e6:
bf:60:da:d6:cb:fd:81:72:0b:ff:2c:f2:2e:aa:d3:
82:72:61:89:f7:87:3b:65:3f:93:9b:53:66:74:ac:
b9:5c:6c:ba:31:1d:25:88:7f:0d:57:f6:8d:3d:61:
7e:e8:b0:13:0f:fa:3d:a7:64:cc:46:8e:6a:43:74:
a1:be:ea:1b:81:1f:73:60:b5:50:9b:e9:4c:e0:51:
cf:d2:70:5d:79:98:4e:67:55:4e:dd:4b:fa:37:44:
e5:a7:ea:a3:9f:ca:54:a9:ba:cb:eb:11:fa:5c:33:
a0:8d:bf:83:a6:62:51:fa:9c:39:5e:b9:a8:4f:77:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:56:93:46:96:24:50:E5:9B:E0:97:BF:5A:52:7C:08:44:A0:19:B9
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/b1aTRpYkUOWb4Je_WlJ8CESgGbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5385::/32
2a0e:5387::/32
2a0e:5641::/32
2a0e:5643::/32
2a0e:5647::/32
2a0e:5900::/32
2a0e:5905::-2a0e:5906:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:8082::/32
2a0e:8084::/32
2a0e:8087::/32
2a0e:ccc0::/32
2a0e:ccc4::/32
2a0f:6fc1::/32
2a0f:6fc3::/32
2a0f:6fc7::/32
2a0f:b4c1::-2a0f:b4c2:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:b4c6::/32
2a0f:c081::/32
2a0f:c085::/32
2a0f:c087::/32
Signature Algorithm: sha256WithRSAEncryption
5a:66:8f:1e:ff:e3:b5:ed:c4:84:02:37:e3:bc:0c:d8:ca:4e:
30:89:d7:29:c5:4b:24:9d:a4:45:f2:7a:59:93:c1:75:64:91:
4f:99:ab:5c:4c:19:66:2c:16:3e:20:e8:9b:13:a3:96:8d:56:
64:bb:22:f1:04:15:35:19:6a:18:18:90:ad:1b:8c:50:95:ea:
3d:d8:48:87:71:fa:52:b7:50:fe:62:6b:db:54:e3:e0:2a:14:
43:0b:4e:4e:33:8f:60:70:e8:62:1f:a8:f7:91:c4:52:53:19:
a3:bb:f9:f2:8e:e8:2b:19:89:ff:8b:fd:05:ee:cc:8d:e4:48:
59:5e:48:80:89:63:fd:36:67:79:fc:7e:3d:83:38:f7:54:82:
3f:15:b4:ba:4c:9c:95:8c:64:66:7f:f2:5a:f6:fb:44:97:47:
81:c6:f5:4b:52:87:7f:2f:7b:f5:7d:be:6a:a2:a2:ee:c5:38:
e6:2e:92:d6:32:52:04:05:d6:c4:35:e7:3a:73:a8:51:e7:35:
57:dd:28:a4:cf:bf:d8:7e:bd:3b:cf:92:49:bb:1a:61:e4:21:
d1:49:79:db:1f:21:9f:80:75:04:0b:99:0b:1d:9c:d3:60:8b:
1c:09:7b:ce:08:3d:55:47:88:6c:0c:b1:de:ed:02:be:04:b8:
06:30:bc:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 17 13:32:36 2025 by rpki-client