Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/RBy4JmeB9N5tjvBiZYBaese0Ed8.roa
File: RBy4JmeB9N5tjvBiZYBaese0Ed8.roa (raw, json)
Hash identifier: BXI09NzM86P/rgMKMkhvKYQDJI/XM8EdtXwWZEK9AJQ=
Subject key identifier: 44:1C:B8:26:67:81:F4:DE:6D:8E:F0:62:65:80:5A:7A:C7:B4:11:DF
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 019383D0F637A30E334E035E04CFBEA7ECD8
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/RBy4JmeB9N5tjvBiZYBaese0Ed8.roa
Signing time: Sun 01 Dec 2024 20:02:10 +0000
ROA not before: Sun 01 Dec 2024 20:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207885
IP address blocks: 2a0b:6b86:1100::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:83:d0:f6:37:a3:0e:33:4e:03:5e:04:cf:be:a7:ec:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Dec 1 20:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=441cb8266781f4de6d8ef06265805a7ac7b411df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:7f:9a:5c:10:63:3c:c0:8b:4c:7e:a6:d2:
2d:ed:c1:aa:a2:66:da:dd:53:bd:c6:e5:dc:54:4a:
b6:75:7c:93:29:83:1d:e1:8d:d9:af:2c:ea:8b:4d:
aa:ae:0b:63:e5:08:b4:80:db:27:d4:25:f9:f2:f4:
c4:82:7c:88:93:f4:d4:92:8b:82:53:9d:74:44:36:
43:87:f2:ef:39:12:ab:19:4c:12:77:19:77:e3:c9:
47:bc:f3:45:5d:dd:8e:84:11:ad:6f:55:b3:f3:a8:
74:0c:50:cb:fc:f1:dd:89:d9:67:cd:a7:0a:63:a0:
a7:5d:f8:25:9d:d2:7a:26:17:6b:0c:fc:85:f5:ca:
25:b2:90:fd:d8:ef:a5:e4:78:16:72:a1:1e:27:82:
4f:81:d7:c2:4c:1b:20:4f:0d:71:73:4c:03:ea:b3:
58:e2:1f:e8:cd:36:2b:cb:16:e4:45:bb:33:4a:5f:
19:a2:54:b0:dc:6c:e9:f9:8f:7f:9c:1f:54:1c:da:
27:1b:4f:2e:bf:ba:33:36:47:d8:79:b7:b5:5e:65:
41:df:ce:0d:5c:30:48:42:33:ce:58:77:2f:c0:62:
3a:d0:f6:06:73:f5:c2:35:0e:c4:d0:77:d3:c2:de:
a9:5c:2f:ee:82:98:48:19:58:b4:c6:14:04:5b:59:
bf:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1C:B8:26:67:81:F4:DE:6D:8E:F0:62:65:80:5A:7A:C7:B4:11:DF
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/RBy4JmeB9N5tjvBiZYBaese0Ed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:1100::/40
Signature Algorithm: sha256WithRSAEncryption
20:1b:54:92:bc:7a:b5:41:72:6a:ac:71:7e:5f:cd:df:03:d4:
c7:63:33:a4:93:e9:ef:5e:2e:39:c1:1b:00:58:57:97:aa:86:
71:23:9c:e5:ac:53:9c:39:60:8a:9a:c4:38:10:78:7f:47:48:
fa:6e:ec:63:d2:dc:b3:b3:47:3b:06:59:65:e3:f0:08:55:84:
7d:ae:60:2a:7d:93:d4:bd:d8:09:9c:3a:0d:3f:17:8d:5d:a3:
ec:e6:4c:21:ef:2f:3d:74:34:bf:e2:bb:7b:a8:df:2a:87:85:
a6:87:2c:d3:f9:0f:6a:18:2f:ba:24:c0:f9:a9:7a:9a:61:7e:
0d:ad:e8:fc:2d:00:e7:ff:38:47:b2:5e:28:d1:82:e4:37:eb:
25:f9:ae:3c:f0:33:13:cf:88:0b:65:6e:50:88:8a:1e:c0:a7:
67:5d:91:74:15:1f:34:c0:d8:59:b7:64:43:a6:5f:d5:0e:83:
64:c3:65:77:f8:99:a7:01:d4:9c:e2:62:93:53:05:f7:cf:53:
5b:cf:42:8a:41:3f:10:5a:7e:bd:e1:ce:d4:1e:86:21:e3:bf:
8d:29:4e:2f:d3:88:ce:7e:d3:af:e7:8c:7f:d7:43:39:e7:d0:
47:cf:8a:2d:98:41:b3:c3:b0:da:d3:da:53:a7:55:dc:1d:32:
19:69:70:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:24:54 2025 by rpki-client