Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/l04UMPCmgQK89rUNOYhEqbio3ys.roa
File: l04UMPCmgQK89rUNOYhEqbio3ys.roa (raw, json)
Hash identifier: XdNkjuIPn0lwXsxr3lz4uJuwZIe3TL0Sp9SDvcXNUBM=
Subject key identifier: 97:4E:14:30:F0:A6:81:02:BC:F6:B5:0D:39:88:44:A9:B8:A8:DF:2B
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 019178BC76A9DCF71263076F43B42B9AB57F
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/l04UMPCmgQK89rUNOYhEqbio3ys.roa
Signing time: Thu 22 Aug 2024 06:18:22 +0000
ROA not before: Thu 22 Aug 2024 06:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3301
IP address blocks: 2001:678:330::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:50:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:78:bc:76:a9:dc:f7:12:63:07:6f:43:b4:2b:9a:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Aug 22 06:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=974e1430f0a68102bcf6b50d398844a9b8a8df2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:ec:53:64:6a:77:04:2e:cf:a9:85:fd:04:
f5:20:b8:1f:ab:bb:d4:50:16:38:99:ee:d4:05:2a:
e3:a7:c8:49:a7:c3:3e:24:ab:73:c1:b8:f3:07:e8:
9f:27:86:8a:b1:ab:9b:d5:2c:5a:6c:2e:af:67:be:
e6:e2:02:83:87:64:44:d9:8d:88:cb:ef:ee:a7:45:
ac:e7:20:52:01:6c:df:9d:78:74:c6:68:3a:ff:95:
0e:d6:ee:de:c3:f8:65:46:88:31:c2:5d:f3:36:7d:
4e:23:e5:f9:59:59:08:24:52:a8:63:20:28:e5:37:
08:b4:2d:5d:07:e3:ab:28:43:8c:98:71:82:54:cc:
23:70:e0:d2:62:28:35:91:8e:35:30:54:e2:98:8a:
32:0c:e4:c5:72:a9:84:f2:48:d5:9b:3a:64:44:86:
2b:fa:d1:7b:0c:39:dc:bd:b3:71:b2:bd:97:76:6f:
6b:1a:b8:6b:51:22:70:f2:fd:dc:8c:49:27:8c:85:
ee:ca:51:f2:27:f6:4c:20:74:64:47:e0:26:2b:50:
8d:ad:4a:67:be:71:aa:c7:cf:78:53:1e:d1:04:f0:
4b:a9:2a:f0:a4:46:a0:78:7c:e1:47:17:10:bf:13:
02:a6:de:3d:5c:5f:32:32:3f:c2:0e:4a:b7:1e:af:
9b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:14:30:F0:A6:81:02:BC:F6:B5:0D:39:88:44:A9:B8:A8:DF:2B
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/l04UMPCmgQK89rUNOYhEqbio3ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:330::/48
Signature Algorithm: sha256WithRSAEncryption
1d:3e:9c:f9:b9:de:c6:bf:af:a7:a6:00:2a:ba:c3:0d:ea:4d:
10:4e:d6:e4:2f:5a:94:f8:ff:c4:88:02:ad:f5:a0:4d:8b:a1:
99:d3:10:ec:cd:f4:da:51:95:7d:69:37:0a:ca:95:d5:b4:e5:
13:60:80:98:ff:13:f6:c1:65:f8:8e:8a:f2:a2:b5:2a:04:84:
63:a0:fa:b1:bd:1e:70:f1:0d:a8:74:50:03:28:21:7c:0b:ef:
c2:05:0b:9d:b4:69:90:c5:7b:4b:14:41:a4:31:72:d7:16:0a:
33:61:8e:e9:f6:57:be:80:0e:a1:ed:50:5c:1c:94:9d:e5:a8:
c3:b6:1f:3f:d8:13:88:75:5a:45:20:37:9b:62:4f:48:d5:0b:
fd:bc:1e:e1:2b:d6:b6:4b:d5:a3:c0:92:68:15:44:a3:0e:2a:
af:d0:08:12:c1:d4:f1:76:d4:f5:18:c7:6d:62:6c:39:64:50:
42:30:42:78:8d:c7:ed:9a:6d:cb:15:46:c9:aa:b5:1b:bc:a8:
9a:40:a1:7c:da:e5:bc:14:4b:e5:79:80:c3:00:12:64:60:2b:
2b:c1:7b:7a:f1:b4:fd:81:d9:54:fb:04:76:5a:20:64:63:c2:
4b:98:3c:fe:2e:6e:94:f8:f5:82:7d:d9:e5:3c:9b:d9:fe:fe:
de:14:e8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:24 2025 by rpki-client