Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/kiphJKsdM4Q6Uq5CWZtPB5fhXzw.roa
File: kiphJKsdM4Q6Uq5CWZtPB5fhXzw.roa (raw, json)
Hash identifier: nW6B91ujyxnY+QAV4+Zp5YJqM7AMgOcpbNRLHu4VCds=
Subject key identifier: 92:2A:61:24:AB:1D:33:84:3A:52:AE:42:59:9B:4F:07:97:E1:5F:3C
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01951079A5A7C5D54FBFBF67FF3D3EF75A45
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/kiphJKsdM4Q6Uq5CWZtPB5fhXzw.roa
Signing time: Sun 16 Feb 2025 20:36:02 +0000
ROA not before: Sun 16 Feb 2025 20:36:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7203
IP address blocks: 2001:3180::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Feb 2025 19:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:79:a5:a7:c5:d5:4f:bf:bf:67:ff:3d:3e:f7:5a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Feb 16 20:36:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=922a6124ab1d33843a52ae42599b4f0797e15f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5f:f8:9b:11:81:40:12:d9:05:77:e3:99:48:
37:99:9e:ca:88:3e:5f:63:43:9c:10:ca:49:14:2f:
4f:ea:e1:3d:bd:01:14:a0:4d:4e:d9:e0:3b:ef:6a:
81:93:c1:6e:0b:57:20:59:c3:7d:98:ce:e6:f4:61:
8e:f9:da:58:5d:d4:00:a8:3d:0d:3e:06:d8:5a:a6:
ec:00:80:fb:d4:28:ee:2a:27:8d:02:f3:1e:a6:28:
2e:f9:a4:7d:88:0a:12:33:e1:19:cc:1f:52:9a:11:
6e:1b:9c:b5:0d:c2:f3:86:94:11:3b:37:3f:0e:51:
55:d2:23:4d:04:3c:33:1c:98:cb:08:5a:12:0b:ea:
c4:22:95:9d:17:2f:87:27:21:2c:0d:ac:06:e4:59:
62:59:f7:b0:6d:6e:47:0d:58:9d:17:0f:d4:d5:5c:
82:0a:3c:0b:a7:31:2c:a6:67:8c:1d:ef:72:0d:30:
3c:71:a1:8a:13:84:0b:79:e7:af:b0:04:9f:55:94:
a5:b6:27:0a:d0:67:26:94:9e:b2:87:e7:65:9e:f7:
c5:16:86:bb:ce:97:ad:0b:a2:7c:49:56:3b:af:f9:
f4:18:1c:e9:da:c9:9a:fc:6e:c1:7e:1c:b9:62:98:
15:26:b0:a0:dc:d6:3f:ad:12:6b:38:84:f5:28:d3:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:2A:61:24:AB:1D:33:84:3A:52:AE:42:59:9B:4F:07:97:E1:5F:3C
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/kiphJKsdM4Q6Uq5CWZtPB5fhXzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3180::/29
Signature Algorithm: sha256WithRSAEncryption
0c:98:b1:e3:0d:d9:76:36:aa:3e:ad:d4:65:ba:c4:e1:06:48:
79:a7:5c:8c:54:e2:ea:78:08:c0:4e:8b:76:47:be:86:86:39:
22:c6:2a:bf:0a:b3:96:67:c9:02:d7:bc:5e:fd:bb:a0:a1:41:
5b:34:d5:76:97:54:e7:cd:dd:21:90:dd:bb:1d:e5:a0:19:a5:
95:ca:3e:6f:50:40:a0:f4:1e:14:4e:b2:39:34:53:0b:74:dc:
84:88:ad:61:56:17:be:e5:4f:12:b8:2f:6a:95:1a:cc:b7:fc:
60:88:7c:48:fc:9f:95:ce:12:8a:71:89:d0:b3:e7:dd:8d:47:
cb:6b:83:fa:1e:c6:13:7c:86:9f:2c:74:ec:f1:0b:fa:a2:cc:
d3:cc:01:4c:f1:6e:84:6c:7e:6a:3b:1b:bb:80:f5:2d:06:c6:
b9:63:e7:dc:51:5e:82:b0:f7:50:6d:e5:6c:74:bb:8c:56:16:
56:62:92:67:66:26:63:b7:33:73:77:42:41:3a:8c:e1:48:76:
b4:00:bf:64:d8:0b:24:28:86:88:c2:ee:46:c6:78:6a:31:b4:
de:73:e8:ec:bb:87:7a:b6:ef:fe:4c:b4:3b:de:63:e7:5a:51:
9b:a3:2c:d3:0b:95:47:05:ad:0e:30:89:63:9f:a2:c3:ce:73:
76:69:a5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:27:28 2025 by rpki-client