Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/c33kYM3Ldhk77PInQ6bRMqk0aVs.roa
File: c33kYM3Ldhk77PInQ6bRMqk0aVs.roa (raw, json)
Hash identifier: HwW3b370+KSJLOyEAPebzEpEb24ARTC8Vehj2Y99qZs=
Subject key identifier: 73:7D:E4:60:CD:CB:76:19:3B:EC:F2:27:43:A6:D1:32:A9:34:69:5B
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01938BEC76134FD5C920D7497593583BABA4
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/c33kYM3Ldhk77PInQ6bRMqk0aVs.roa
Signing time: Tue 03 Dec 2024 09:49:09 +0000
ROA not before: Tue 03 Dec 2024 09:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a0e:5384::/32 maxlen: 32
2a0e:5386::/32 maxlen: 32
2a0e:5642::/32 maxlen: 32
2a0e:5907::/32 maxlen: 32
2a0e:8085::/32 maxlen: 32
2a0e:ccc6::/32 maxlen: 32
2a0e:ccc7::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 09 Dec 2024 19:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8b:ec:76:13:4f:d5:c9:20:d7:49:75:93:58:3b:ab:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Dec 3 09:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=737de460cdcb76193becf22743a6d132a934695b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:32:70:15:d3:96:d4:93:19:65:41:f5:70:
19:7b:16:08:3a:89:6f:d6:35:93:83:0f:f5:46:c1:
57:95:5d:c9:d3:7a:8e:f0:c5:19:1b:5a:ad:ee:46:
8d:7f:8f:77:08:9d:23:ab:79:9c:8c:3b:42:4a:22:
e5:58:5f:7d:3e:b8:0b:48:ee:ad:db:b7:23:61:42:
17:28:26:8f:9f:0a:82:94:d7:b6:c1:3f:09:9a:0b:
60:b8:e4:fa:76:eb:a9:57:6f:2f:bc:17:8e:c0:39:
d5:91:da:98:5f:4a:10:50:91:93:f3:15:c6:11:c1:
96:07:c7:05:5b:79:0a:f5:dd:42:a5:f4:86:35:ba:
64:0b:d3:b5:99:1b:74:ae:c1:dd:13:3a:86:51:a1:
7f:5b:18:bb:de:97:77:20:c5:6a:13:9e:b9:22:c7:
23:a0:f1:32:63:82:39:0d:51:35:ab:9c:03:d7:42:
d8:52:de:16:4f:9f:8e:63:0a:ce:68:32:47:30:1d:
24:25:1d:fa:14:7d:c9:ee:d2:c5:e0:b5:d4:ee:7d:
28:5e:7c:a2:99:5c:39:93:05:68:fb:16:2f:56:be:
f9:74:c8:e6:34:d9:42:91:62:ff:f6:13:9c:98:33:
10:7f:17:ba:af:16:a1:74:f4:60:31:1a:58:53:10:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:7D:E4:60:CD:CB:76:19:3B:EC:F2:27:43:A6:D1:32:A9:34:69:5B
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/c33kYM3Ldhk77PInQ6bRMqk0aVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5384::/32
2a0e:5386::/32
2a0e:5642::/32
2a0e:5907::/32
2a0e:8085::/32
2a0e:ccc6::/31
Signature Algorithm: sha256WithRSAEncryption
a2:f2:37:8f:4f:19:28:a6:da:a5:7f:bc:bd:6c:9d:f0:39:ad:
94:1b:a8:ab:60:dc:1a:f1:89:27:31:b4:6f:0c:24:a5:4e:4d:
5b:f1:5e:33:1f:e9:d5:a5:18:60:d2:77:20:7d:8f:17:13:6b:
69:e6:27:28:28:1b:50:9e:1f:c7:0d:2b:b6:64:6f:29:56:37:
06:a7:57:98:e1:35:ca:22:97:50:ec:16:05:7f:bc:73:dc:f6:
0e:28:aa:e4:01:fd:66:04:b9:fa:71:e7:58:2b:ff:a2:c1:e3:
18:dd:36:25:eb:36:73:ed:b3:5e:16:1f:bf:30:1c:00:bf:83:
95:2e:0f:af:f6:af:f5:69:02:f7:98:4b:7f:e5:5e:18:47:1b:
f6:98:21:30:fa:66:13:f0:bf:f2:e2:78:cf:e5:aa:7d:63:36:
83:6b:3b:d1:3e:84:a8:5b:e9:04:3b:f9:58:1b:f2:5b:f8:e4:
49:53:3d:ff:b4:e6:47:19:8f:46:b8:d8:03:70:3a:fd:5f:20:
e0:f5:5b:14:3c:1d:1b:12:ad:38:8d:82:e6:23:cb:10:2d:d4:
f6:ff:3a:fa:0c:ba:0d:4e:6d:dc:5c:99:7b:3a:52:a6:67:35:
d2:8f:20:7d:40:a9:af:53:47:72:50:ed:10:4e:40:a4:d9:d1:
06:3c:f5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:26:43 2025 by rpki-client