Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/UAEI3nU3TdQAR5DY4VUoGPWIlWA.roa
File: UAEI3nU3TdQAR5DY4VUoGPWIlWA.roa (raw, json)
Hash identifier: X/APE+Q05xeAK21kxombuC9ism5hhQxMX1X4XNR4GiQ=
Subject key identifier: 50:01:08:DE:75:37:4D:D4:00:47:90:D8:E1:55:28:18:F5:88:95:60
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01938CDCE7F35428E0183771BD447D54CC72
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/UAEI3nU3TdQAR5DY4VUoGPWIlWA.roa
Signing time: Tue 03 Dec 2024 14:11:47 +0000
ROA not before: Tue 03 Dec 2024 14:11:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 2a14:6b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Dec 2024 22:09:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:dc:e7:f3:54:28:e0:18:37:71:bd:44:7d:54:cc:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Dec 3 14:11:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=500108de75374dd4004790d8e1552818f5889560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dd:cc:83:79:65:e1:a0:03:38:02:d8:30:b3:
17:a3:e7:e9:0f:3e:76:3e:4a:91:17:27:dc:00:0e:
7e:70:cd:3c:e1:f9:93:b3:1a:b4:cc:f4:eb:8d:8f:
7a:c0:0b:93:a9:7a:c4:59:77:4d:1b:73:e2:9c:1c:
c2:04:0d:e8:fb:08:21:89:11:eb:28:29:9a:96:5b:
5b:e2:79:31:c2:1c:f8:b0:d0:8e:05:be:aa:f5:47:
cb:26:a3:b8:4f:c1:9c:37:a6:1d:e1:35:d4:b3:a7:
2f:a9:e1:44:84:b0:4d:16:27:9f:85:13:30:73:a1:
e2:06:7f:54:e2:c3:c3:98:d9:26:28:11:84:2d:3b:
40:b2:f9:06:f5:c4:3d:3a:f5:21:0e:4a:63:c7:89:
4f:20:7a:7c:4e:11:70:27:a6:3b:05:ea:89:58:b5:
7d:89:ed:cf:d5:63:62:c4:97:8c:c3:6d:ab:bd:bb:
ac:f5:c7:18:1f:96:d3:61:2b:32:5f:da:d0:bd:4e:
c3:c2:2c:ae:42:b7:e7:46:9c:5e:13:97:2c:2c:e9:
6f:e0:44:15:94:5f:06:d9:db:ea:70:e7:bd:89:f3:
80:15:a4:97:03:64:3c:1a:75:d7:1c:b3:e7:b3:b8:
96:12:6f:b6:e4:75:67:18:ce:98:f6:42:4d:80:13:
5a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:08:DE:75:37:4D:D4:00:47:90:D8:E1:55:28:18:F5:88:95:60
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/UAEI3nU3TdQAR5DY4VUoGPWIlWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
ae:1a:87:9e:18:97:87:2d:1c:63:3d:d4:10:a3:a8:55:41:5e:
04:16:03:2c:23:5b:e4:2a:ac:57:ef:d2:d3:bf:d2:40:5a:14:
25:81:6d:8a:89:75:c4:b9:3b:e2:6c:a0:e1:f8:3c:ad:ed:af:
36:9c:88:e4:2c:f4:89:7e:18:fb:61:dc:f1:09:3d:26:35:3f:
55:c4:62:53:cb:17:d8:ab:49:bd:63:1f:22:d8:50:ba:be:99:
d1:67:c8:a5:26:b9:97:4b:9a:79:e9:9e:b6:f5:6e:39:68:95:
c7:83:a1:1b:82:e5:4e:e2:08:79:b2:d8:58:c7:c7:a9:73:b8:
d0:89:ee:db:16:7f:26:2b:39:bb:b4:b2:ac:59:96:41:58:d6:
ef:dc:ee:8e:ba:cf:85:9f:df:77:fd:b4:8c:f2:f4:7b:78:0b:
5f:36:b1:e3:02:bb:b8:b4:7f:a1:51:67:85:93:cf:ba:b6:94:
e6:4a:cb:00:91:7f:6f:fe:d8:d3:bb:4a:dd:bb:3c:52:ea:07:
74:cc:d8:22:d1:c1:0b:c8:29:c3:0c:7c:94:01:67:d3:8b:8b:
59:e6:71:80:2d:d1:42:84:67:55:98:11:ba:0d:fb:e0:fe:0c:
11:0a:12:a0:a4:56:e1:48:ff:c1:d2:0c:61:23:08:e7:14:0d:
54:21:a9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:24:53 2025 by rpki-client