Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/DStWRvtKl5mFwoJZom2K5dwp77c.roa
File: DStWRvtKl5mFwoJZom2K5dwp77c.roa (raw, json)
Hash identifier: mOPzc9ndFyeMTTZ/xISwS1xjgWqf88/hhA85VX9CYMI=
Subject key identifier: 0D:2B:56:46:FB:4A:97:99:85:C2:82:59:A2:6D:8A:E5:DC:29:EF:B7
Certificate issuer: /CN=843cf5bb876b772b7ade432905cb696f134caa39
Certificate serial: 018CC500FC38E78C0A051A30BD3BE421932C
Authority key identifier: 84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/DStWRvtKl5mFwoJZom2K5dwp77c.roa
Signing time: Mon 01 Jan 2024 12:30:25 +0000
ROA not before: Mon 01 Jan 2024 12:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207901
IP address blocks: 2a09:5a00::/29 maxlen: 48
2a09:5a00::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:fc:38:e7:8c:0a:05:1a:30:bd:3b:e4:21:93:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=843cf5bb876b772b7ade432905cb696f134caa39
Validity
Not Before: Jan 1 12:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d2b5646fb4a979985c28259a26d8ae5dc29efb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:a5:57:de:0f:2b:83:60:45:7f:04:73:33:
3d:f9:29:f7:02:e6:07:0d:0b:1e:eb:d5:8e:18:7b:
40:e9:f9:94:85:0a:e9:d7:50:d7:2a:c3:c3:17:f0:
b2:98:fd:6f:1a:c5:c9:2f:7c:f6:df:85:a7:6a:67:
ce:8d:3f:56:8d:1f:df:db:43:3f:eb:be:c7:9d:64:
71:f3:19:1d:bb:03:b4:58:d7:85:8c:80:03:6a:4e:
4d:63:31:46:fc:44:ab:64:af:45:f1:80:06:d3:bd:
35:59:32:bc:db:07:43:e8:cd:09:3a:0f:fb:82:19:
3a:04:c8:65:56:52:f9:0e:e6:46:23:07:ab:24:b6:
5a:2d:05:44:7e:81:ec:00:b8:8b:40:cc:4f:f9:fb:
6e:fb:bc:6e:b1:2d:2e:ec:62:18:7f:33:85:1b:53:
2e:6e:37:d8:ed:65:7b:90:fb:b9:07:c8:bb:46:4c:
9b:f2:1b:d3:37:95:c2:df:1e:82:1b:d3:3e:3f:e9:
25:38:8b:48:1c:87:09:c4:e6:9b:23:15:c8:5b:94:
0e:cc:df:f6:25:f2:71:42:0a:00:9e:09:4a:7c:be:
11:d0:e8:c0:1b:db:e1:bb:84:d1:1f:2b:b5:01:d9:
66:f1:38:a7:2d:e6:6b:5c:22:88:fa:b8:8f:50:76:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:56:46:FB:4A:97:99:85:C2:82:59:A2:6D:8A:E5:DC:29:EF:B7
X509v3 Authority Key Identifier:
keyid:84:3C:F5:BB:87:6B:77:2B:7A:DE:43:29:05:CB:69:6F:13:4C:AA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hDz1u4drdyt63kMpBctpbxNMqjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/DStWRvtKl5mFwoJZom2K5dwp77c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/512214-e78e-4931-bfbb-16f5a5636244/1/hDz1u4drdyt63kMpBctpbxNMqjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:5a00::/29
Signature Algorithm: sha256WithRSAEncryption
14:d2:fb:94:52:56:2a:64:11:c1:52:9b:7d:2c:0c:61:2f:4f:
07:eb:ba:9f:52:0a:cc:2c:c0:1f:3a:5e:f1:51:7c:a5:18:b2:
a9:85:db:42:26:88:c4:08:9f:e0:4e:a5:a4:00:9e:ec:b0:56:
10:e5:6d:a0:8d:75:14:3d:19:10:f5:20:4b:56:6d:47:8a:bb:
68:f7:1c:8b:28:9c:fe:ff:a9:9f:b9:aa:a8:4d:46:27:22:24:
c6:94:a8:42:ba:65:bc:0a:7a:db:89:f0:3f:7c:02:12:b6:95:
ab:7a:aa:7f:38:ee:87:c4:d2:81:5c:f6:a4:ac:44:ee:f6:dc:
a7:a0:72:6d:23:b4:55:25:83:c6:d9:59:61:3e:a4:9b:17:32:
4d:f8:78:4e:c3:6b:d4:13:51:d7:13:50:8f:80:d3:44:45:31:
84:13:60:b6:65:36:c2:24:1f:ce:eb:51:9c:06:3d:71:66:4b:
99:e6:21:73:57:57:c8:ef:cd:5a:58:19:3f:4c:5b:36:9f:a8:
6f:da:05:f6:c7:d5:1b:20:a8:6e:ca:b0:03:7b:f2:2b:bf:b7:
fa:c9:5a:93:22:d9:6e:58:6f:5f:f0:ca:bd:32:66:0a:01:14:
a8:47:b8:8d:d9:aa:09:76:16:48:58:ac:02:6d:42:18:65:d9:
aa:04:b1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:37 2025 by rpki-client