Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/4QsMx7IPQ9R8PSfkwsPVl7qLw4c.roa
File: 4QsMx7IPQ9R8PSfkwsPVl7qLw4c.roa (raw, json)
Hash identifier: d2TBtc5tqRhgWCcjEUkEt3Qi/mjQ1XZhMV68ZYXR+CE=
Subject key identifier: E1:0B:0C:C7:B2:0F:43:D4:7C:3D:27:E4:C2:C3:D5:97:BA:8B:C3:87
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 0192FDED517995B222886AEBB5664D6D83F3
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/4QsMx7IPQ9R8PSfkwsPVl7qLw4c.roa
Signing time: Tue 05 Nov 2024 20:04:01 +0000
ROA not before: Tue 05 Nov 2024 20:04:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33042
IP address blocks: 2a0e:a780::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 07 Dec 2024 19:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fd:ed:51:79:95:b2:22:88:6a:eb:b5:66:4d:6d:83:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Nov 5 20:04:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e10b0cc7b20f43d47c3d27e4c2c3d597ba8bc387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:a3:98:8d:b4:15:c9:9a:ac:23:d5:5a:f3:
26:8d:44:b7:94:99:fd:b8:18:c9:1b:8d:82:fb:dc:
2e:d7:c8:eb:ac:2e:9b:f0:02:21:8b:5e:2f:ed:92:
65:3f:b4:6b:fa:0b:18:02:58:ee:84:8e:05:da:c4:
f5:dd:04:af:83:34:84:af:7e:5f:6d:be:a8:e2:7b:
72:4c:50:09:c0:f9:8d:9f:ca:c7:38:cb:aa:84:2c:
27:1a:a2:57:9f:8f:95:d9:ea:30:f4:8b:91:2b:8b:
93:de:86:9c:32:7e:57:bd:64:23:da:2d:da:3f:d1:
67:ef:13:c2:84:61:5f:5e:b7:74:d4:44:8c:a8:69:
ff:cb:89:2c:55:f4:01:86:eb:2f:ea:c5:da:0b:ac:
b6:4e:a7:2c:90:d1:98:56:74:e2:92:13:3a:ed:56:
b2:27:3d:07:43:ee:cf:c2:e9:14:fd:20:de:bb:0d:
12:59:95:d3:7b:37:66:67:f8:f9:34:b5:23:10:ac:
bb:93:b4:2c:59:04:97:fc:ae:12:4a:ea:ad:01:3e:
45:bc:39:9c:45:dd:01:40:0f:c3:f6:4f:f0:9f:9d:
f6:3f:49:8e:70:42:32:62:55:b3:0c:2c:a7:22:ff:
b4:3c:76:a1:6d:25:9d:cf:f6:b4:3f:3d:ed:4d:44:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:0C:C7:B2:0F:43:D4:7C:3D:27:E4:C2:C3:D5:97:BA:8B:C3:87
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/4QsMx7IPQ9R8PSfkwsPVl7qLw4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:a780::/29
Signature Algorithm: sha256WithRSAEncryption
20:a5:fa:14:e4:77:bd:05:6b:52:31:3a:b2:4b:1e:a7:25:fa:
b5:a5:5c:93:b0:b3:e0:61:a7:0a:f7:be:a5:b5:05:ce:4a:1c:
fd:d3:b2:24:64:d5:4c:89:d7:e6:8f:32:4e:2d:26:aa:c7:91:
24:15:8a:85:28:cb:76:40:37:8e:df:86:eb:d2:81:60:6a:61:
9a:0c:58:c8:86:00:06:31:59:5f:bd:78:d3:bc:06:a5:1a:f1:
96:05:98:81:d3:5f:c4:9b:20:9a:84:44:76:3b:da:47:31:a7:
08:cd:52:bd:99:25:0a:71:64:78:4f:af:95:54:4d:f4:a4:89:
01:8a:e6:26:4b:b7:49:0b:ea:e3:2e:3a:fe:c8:c1:ed:73:e0:
b2:46:ed:e5:75:58:f3:6e:02:83:f0:48:5d:5d:95:35:bf:6a:
b6:3e:c8:3c:8a:9b:71:d4:7a:43:33:3e:f4:3e:f6:36:61:d0:
55:8e:fe:49:77:9a:9b:c9:e1:d6:ff:15:47:97:1d:05:04:9a:
e8:d1:ac:50:de:cb:cd:40:77:e0:e2:e7:74:c2:74:bf:e0:d6:
f9:66:bf:ed:f3:49:b8:7c:e7:aa:ea:ad:15:9e:8f:c7:8a:eb:
e8:5b:35:4d:0d:01:ee:92:01:67:84:a0:5c:4f:a4:48:54:71:
61:0d:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:26:43 2025 by rpki-client