Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/i0v8wVsxFiGXukREUn9IF8wgY_0.roa
File: i0v8wVsxFiGXukREUn9IF8wgY_0.roa (raw, json)
Hash identifier: M96n9djaM67oBuqedzhyXhODT2tUwh2QTj0BfAX3hxs=
Subject key identifier: 8B:4B:FC:C1:5B:31:16:21:97:BA:44:44:52:7F:48:17:CC:20:63:FD
Certificate issuer: /CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Certificate serial: 0194CC4699AF3249DA8544895F171F586802
Authority key identifier: 5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/i0v8wVsxFiGXukREUn9IF8wgY_0.roa
Signing time: Mon 03 Feb 2025 14:46:06 +0000
ROA not before: Mon 03 Feb 2025 14:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 64286
IP address blocks: 2a0a:7743::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 05 Feb 2025 17:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:46:99:af:32:49:da:85:44:89:5f:17:1f:58:68:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0329066138bb5564571fc3c29ee953e5c1c7a3
Validity
Not Before: Feb 3 14:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b4bfcc15b31162197ba4444527f4817cc2063fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:0c:ba:fd:b5:72:ba:bd:5e:d4:a3:ac:d9:
c4:c9:9c:f7:d2:e5:29:64:37:69:9b:4a:9f:c0:ec:
73:f9:f8:1b:5a:72:03:29:b1:4f:3f:6f:c5:9e:95:
fd:b4:a6:d0:9f:1c:9b:15:4c:e8:fa:d2:52:b2:7d:
81:7c:50:c2:e3:b8:b9:27:16:50:af:7b:7c:39:8e:
ec:69:80:98:28:b2:73:84:0a:4f:51:92:91:20:91:
44:e0:a4:7d:8c:68:67:0f:55:59:15:71:11:0d:ca:
44:9e:f9:77:ec:3c:98:ad:26:bc:90:20:e7:75:f2:
16:2e:62:74:92:43:42:2e:94:2d:a6:79:1f:4e:9b:
c1:d8:df:58:6e:96:51:7e:60:12:23:56:95:33:38:
f1:7c:78:28:8b:ba:20:cc:ef:4a:be:84:f0:f3:dc:
e4:45:1e:16:1f:99:ca:9b:04:4d:7b:1a:59:95:58:
7b:d5:95:f0:2e:52:b1:e4:f5:89:34:da:56:1d:52:
36:ec:10:f2:b8:b5:03:c6:7b:b1:b3:f7:20:7c:52:
31:30:50:d0:9f:8e:5c:fd:dc:e3:07:3b:06:20:68:
f7:5a:69:16:a1:c6:2a:2c:5e:4e:8e:be:6d:3b:63:
40:b2:2b:2a:d4:f0:38:ae:16:99:3b:03:06:40:03:
2f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4B:FC:C1:5B:31:16:21:97:BA:44:44:52:7F:48:17:CC:20:63:FD
X509v3 Authority Key Identifier:
keyid:5B:03:29:06:61:38:BB:55:64:57:1F:C3:C2:9E:E9:53:E5:C1:C7:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/i0v8wVsxFiGXukREUn9IF8wgY_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/77096f-bb89-411e-90e0-30c7f39d8e1c/1/WwMpBmE4u1VkVx_Dwp7pU-XBx6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7743::/32
Signature Algorithm: sha256WithRSAEncryption
16:c2:d7:e2:1b:f4:74:11:3e:9b:e8:71:1b:e5:d4:b6:53:8f:
32:b5:9a:cf:ac:fd:d7:13:d9:2c:18:85:3e:c5:bf:d9:c1:c2:
b8:9b:29:cd:69:e8:7e:62:41:26:53:50:94:38:96:d3:68:9d:
50:5d:c9:1f:2f:fa:01:2d:0e:90:ac:77:05:cf:6d:9b:cf:54:
df:93:64:07:93:16:1b:61:d5:dc:24:1f:95:49:6c:b9:5a:7b:
d6:5d:6e:e1:d2:21:fd:53:bd:ee:9b:f2:25:71:62:39:b8:5b:
15:1e:59:a7:c0:25:31:32:51:77:cf:93:24:ea:60:fa:25:7f:
f6:c6:63:82:89:2b:97:7f:93:bb:69:92:b3:6e:8c:b7:2f:e9:
d2:78:b0:e5:7c:a0:90:a7:fb:cf:97:9f:26:67:16:5e:12:8f:
d0:a7:06:ba:2a:09:02:9a:55:45:60:97:97:61:b7:0f:e0:73:
f3:f9:7c:ea:5c:f6:ac:42:98:ab:16:a4:70:15:89:79:4a:76:
d8:9d:4c:a6:0b:63:db:ba:af:ac:9a:6c:1f:8f:e4:fb:fc:1e:
15:87:b2:8a:1b:bb:99:65:26:32:27:09:65:0c:12:ed:c9:cf:
f9:0a:7e:a9:2e:7d:43:42:88:c3:db:a3:91:20:9a:25:8f:65:
ec:c0:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:19:39 2025 by rpki-client