Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/opLMcdVQpuM8aJGnYPoAsiWLFWk.roa
File: opLMcdVQpuM8aJGnYPoAsiWLFWk.roa (raw, json)
Hash identifier: 0uRC9NNvOgqPMKGTRnZ1bhbuAwLrWqt4X3egrGYMkdM=
Subject key identifier: A2:92:CC:71:D5:50:A6:E3:3C:68:91:A7:60:FA:00:B2:25:8B:15:69
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 019095E3D3B9BDEBAC093ADAACDB7FDCDC3C
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/opLMcdVQpuM8aJGnYPoAsiWLFWk.roa
Signing time: Tue 09 Jul 2024 05:07:34 +0000
ROA not before: Tue 09 Jul 2024 05:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12389
IP address blocks: 2a04:c106::/32 maxlen: 32
2a11:b85::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 09 Oct 2024 14:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:95:e3:d3:b9:bd:eb:ac:09:3a:da:ac:db:7f:dc:dc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jul 9 05:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a292cc71d550a6e33c6891a760fa00b2258b1569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:04:4c:fd:ae:8e:be:a1:c8:d4:11:bf:51:fe:
e4:e6:8a:5c:5e:55:f2:ba:83:1f:0c:bd:bd:58:4c:
f4:b7:b8:f7:ef:bc:c0:a9:ca:01:2a:d9:4a:ab:6d:
4c:a7:69:6d:d5:67:96:24:6a:87:bb:b8:d6:b5:25:
87:67:5a:56:92:f8:4c:aa:61:a3:f6:a4:c1:01:a4:
72:3a:9d:b6:f5:00:69:a1:8f:04:ec:c1:90:d3:7c:
16:8e:53:9a:0f:90:b1:7c:33:af:2f:e8:5a:67:95:
81:e1:93:5b:74:80:9e:a2:bb:24:b8:23:64:6d:fa:
80:3d:14:f3:0f:f8:a3:97:4d:85:de:16:c3:c1:d2:
91:2b:6f:8d:54:13:f5:4a:af:74:34:9a:71:1e:86:
0e:22:22:e7:4e:e4:4f:08:6f:1e:0f:37:75:e9:34:
d9:e2:8e:33:e7:6c:a7:ac:96:9b:2f:45:e4:0f:c6:
05:36:53:31:cf:d8:eb:06:e6:a8:df:e2:8c:e3:7b:
b8:45:57:c0:d6:91:93:60:44:53:ee:83:12:75:de:
0c:d4:66:2b:f5:35:60:cc:91:36:30:ea:0f:a3:2a:
98:9f:89:f1:86:ec:a9:f5:e2:5e:4c:7e:b4:2b:64:
51:be:12:0f:1f:a7:d3:ba:c5:45:ea:75:ab:4e:fd:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:92:CC:71:D5:50:A6:E3:3C:68:91:A7:60:FA:00:B2:25:8B:15:69
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/opLMcdVQpuM8aJGnYPoAsiWLFWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:c106::/32
2a11:b85::/32
Signature Algorithm: sha256WithRSAEncryption
93:0f:da:bd:b6:89:35:89:ff:4f:3e:84:16:d3:ed:9c:4d:c9:
56:0f:03:18:b1:95:38:f4:89:d1:7b:e4:55:1c:cc:de:e2:da:
a0:94:b0:36:da:2a:d7:c0:68:40:fd:29:b3:a5:4e:4e:cd:e8:
49:d4:bc:ac:14:bb:c1:04:9d:4a:1f:f6:7b:22:5b:54:47:6b:
e9:8f:97:65:0d:41:48:65:d1:1e:5b:94:5b:e7:d2:86:98:96:
c4:3a:e2:60:b0:a1:a3:72:6a:44:f2:49:e7:48:22:f8:9b:76:
f2:a9:30:dd:72:e3:04:b5:f2:bc:a0:26:ea:bb:90:c5:56:bf:
6f:e7:cd:f5:fe:45:ba:fc:25:2d:c1:63:c1:75:b6:aa:67:00:
f1:97:5e:a8:09:d6:49:94:22:1b:95:4e:37:4e:df:f1:82:cd:
ed:a5:c3:59:5e:1d:80:f1:12:90:3e:50:3c:08:a9:2e:d4:eb:
52:7f:47:31:6f:94:83:e3:4d:ce:1f:9b:e5:5b:b0:fc:2b:1d:
aa:36:e7:3d:07:77:e2:30:1c:14:83:b7:a7:dd:f0:a9:85:ec:
b6:8a:f8:b6:a7:8e:26:1f:c0:ec:b3:ac:d9:07:b8:a4:ed:44:
76:cb:ac:a2:fa:83:4f:cf:61:88:cb:2b:2c:72:57:72:b9:36:
87:11:8a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:34 2025 by rpki-client