Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/39KjStmC6WuX48HVAMyh2tRprDw.roa
File: 39KjStmC6WuX48HVAMyh2tRprDw.roa (raw, json)
Hash identifier: 4jEluOmbgKgO8r32mgcvYz2hqhO8z3BtQ7Z/bnQGhVw=
Subject key identifier: DF:D2:A3:4A:D9:82:E9:6B:97:E3:C1:D5:00:CC:A1:DA:D4:69:AC:3C
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 018CC26D1B71347056E0CDDE2DD21F783192
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/39KjStmC6WuX48HVAMyh2tRprDw.roa
Signing time: Mon 01 Jan 2024 00:29:39 +0000
ROA not before: Mon 01 Jan 2024 00:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57503
IP address blocks: 2001:6d0:4009::/48 maxlen: 64
2001:6d0:4005::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1b:71:34:70:56:e0:cd:de:2d:d2:1f:78:31:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 1 00:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dfd2a34ad982e96b97e3c1d500cca1dad469ac3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:14:dc:de:32:70:c0:4d:03:b1:72:b4:1f:1c:
70:0b:5d:74:74:98:47:b7:2e:7d:6c:be:09:3b:f6:
17:e4:31:33:7b:00:ec:ca:d3:71:06:b3:3c:a3:a1:
bb:49:86:6d:8b:86:04:55:49:6a:30:db:a5:9c:19:
8f:ec:19:6a:eb:b8:55:9e:eb:83:25:9e:28:06:20:
c8:f9:2d:2d:b4:f7:6d:dc:e4:49:a5:cd:44:2b:9b:
77:e5:8b:d3:76:82:22:9b:d5:e7:44:26:61:3f:7d:
b2:d4:47:44:4e:fe:75:77:51:95:bf:0f:e7:c3:3c:
e2:c1:b3:62:7f:35:8c:41:2d:69:88:f1:e5:77:d2:
1b:a3:f1:3d:92:52:ca:0a:53:a0:6c:75:d0:f1:91:
4f:01:46:79:ca:6e:6d:b4:fd:96:38:e6:10:0c:ae:
86:06:33:77:86:19:71:9f:ed:40:ec:1b:fe:c8:1a:
a7:e6:53:c2:a7:c1:be:aa:2e:95:7c:c2:8c:cc:41:
08:be:11:ac:c8:56:e3:b2:53:5a:ce:84:99:cf:5f:
ed:34:4e:4c:2a:6a:b2:79:1e:2e:e4:15:c2:d2:e8:
59:98:0b:5b:e4:35:e4:1a:3b:67:91:5e:99:27:d9:
ac:16:2f:4c:9f:db:e8:4c:df:e8:e1:36:97:7b:87:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:A3:4A:D9:82:E9:6B:97:E3:C1:D5:00:CC:A1:DA:D4:69:AC:3C
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/39KjStmC6WuX48HVAMyh2tRprDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:6d0:4005::/48
2001:6d0:4009::/48
Signature Algorithm: sha256WithRSAEncryption
47:bf:45:de:2c:96:6f:c4:90:51:f2:d6:14:5a:37:e0:8f:e0:
03:bf:6d:0b:88:cf:9d:d2:d5:fc:5e:83:4a:59:7f:a9:2e:1f:
22:6e:2c:74:c8:56:71:8c:ae:4b:3d:d8:57:b2:8f:ec:17:e1:
11:db:e6:6c:e0:8a:33:33:a7:a7:9f:a4:ac:a0:84:d4:ea:2f:
44:7a:60:48:e1:f5:87:53:93:88:d5:fe:e2:cb:82:35:86:56:
ef:e7:88:da:66:90:e8:2e:ca:6d:bb:f6:9e:35:d5:16:3a:3c:
79:b7:0e:22:3f:81:65:9f:03:52:4f:39:26:04:36:2f:96:e1:
eb:20:fb:ce:b8:4a:6f:a1:f2:ee:6e:3d:80:85:17:74:f5:de:
69:ec:19:ad:7b:21:1b:53:1d:cc:f3:5a:b1:2f:6b:fd:b7:74:
38:f7:84:ab:96:f2:2a:99:95:37:ae:1e:ac:0c:fc:8a:7f:d9:
22:11:31:80:7b:14:9d:62:18:df:1a:30:d2:67:ed:10:40:b9:
2d:6f:6b:4e:5e:00:28:eb:ca:52:dd:16:7d:8b:26:8d:47:39:
d2:d6:af:8d:8c:00:06:bd:64:73:66:6f:65:7f:fb:bf:f7:91:
55:70:66:56:93:ec:4a:ef:76:92:72:a6:47:0b:a8:e4:0f:5b:
4d:9d:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:49:47 2025 by rpki-client