Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bujevLU48vAnp9XFZb5dISj7M74.roa
File: bujevLU48vAnp9XFZb5dISj7M74.roa (raw, json)
Hash identifier: 4HZpvPTpZoABDHwiMjUH9tlmCXMFG8sRB+03w/bQ6jw=
Subject key identifier: 6E:E8:DE:BC:B5:38:F2:F0:27:A7:D5:C5:65:BE:5D:21:28:FB:33:BE
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 0193E93BA3B168B2B056B1FC19BB5BEED49E
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bujevLU48vAnp9XFZb5dISj7M74.roa
Signing time: Sat 21 Dec 2024 12:40:20 +0000
ROA not before: Sat 21 Dec 2024 12:40:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 36832
IP address blocks: 2a0a:79c7:fc00::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e9:3b:a3:b1:68:b2:b0:56:b1:fc:19:bb:5b:ee:d4:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Dec 21 12:40:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6ee8debcb538f2f027a7d5c565be5d2128fb33be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:ef:8d:14:ad:a2:82:7e:fd:2d:b4:3c:f1:
00:c6:6c:6d:85:75:75:3b:68:c2:fc:43:15:68:c7:
fe:b4:3f:ea:77:d0:6a:b0:ad:94:e3:97:ae:20:34:
e1:bb:0f:59:ed:10:f1:38:bb:58:80:d2:2f:d1:50:
e8:1e:82:7a:d1:69:47:21:f5:59:1e:c4:90:0e:26:
13:39:1a:71:99:fc:72:98:72:2a:74:f8:80:dd:9e:
48:2a:0e:7f:1a:07:46:0b:31:18:f6:1f:d0:0e:0b:
e0:8d:17:9a:50:f5:83:78:e4:49:37:c2:de:c2:a2:
96:75:70:39:33:bf:0b:b2:fe:2b:d1:92:be:33:7c:
0d:db:17:ee:7d:2b:66:d3:95:6d:a7:d4:c8:e3:23:
58:38:a0:b7:40:1b:b8:a3:92:05:41:cf:14:16:08:
d7:40:5d:d9:f1:72:eb:de:45:80:20:ae:5e:4a:bb:
1d:42:15:c5:d6:0f:46:2b:72:5c:3b:52:76:56:49:
f6:e4:83:fe:98:c7:a5:a3:a6:82:29:e5:0f:28:dc:
5a:f6:cf:e5:4d:e1:d9:e9:75:84:c2:f6:c9:be:86:
37:2d:26:b1:35:5a:8d:c6:86:4c:c9:ae:bc:6c:c0:
b0:38:d9:b0:2d:fa:81:86:ba:dc:92:5f:5f:d7:43:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:DE:BC:B5:38:F2:F0:27:A7:D5:C5:65:BE:5D:21:28:FB:33:BE
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/bujevLU48vAnp9XFZb5dISj7M74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:79c7:fc00::/40
Signature Algorithm: sha256WithRSAEncryption
7f:c8:4f:e2:11:f2:a0:30:85:a5:63:2c:84:7b:c2:20:3b:e2:
ff:10:44:06:e0:60:61:61:1e:8e:d8:1f:07:5f:6d:82:3b:ef:
19:d9:e1:2c:b9:2f:a5:b3:03:4b:6e:59:ff:c1:b3:7a:45:61:
4b:e6:77:d4:d9:40:96:44:02:8d:ed:f9:d4:f0:0b:fd:8d:c4:
63:5b:4c:f0:d4:73:4d:87:f1:5f:67:41:9e:47:ac:cf:fe:73:
aa:84:c7:53:2c:b3:ce:6e:37:f6:d9:3e:86:52:4d:b3:80:a0:
2a:29:1a:bb:b6:9e:3d:d5:41:8c:d8:87:3c:c3:9e:4a:1c:63:
bd:48:eb:e6:fc:52:16:a5:88:e9:99:f3:5c:d4:55:1f:98:ca:
0d:9b:a9:c2:10:2b:65:89:7e:eb:b5:a2:6d:ad:f8:a1:7a:19:
e8:97:31:e9:4a:66:b3:1a:33:73:bc:66:0a:59:91:77:05:33:
9b:ce:af:b8:9e:e1:fa:c0:8d:04:95:c2:8c:45:5a:95:06:e7:
fc:a0:1e:56:5e:58:7e:3a:6b:c4:77:be:b4:da:98:7f:f8:a3:
91:1a:36:29:b8:e4:34:ba:d9:c7:d3:cc:8f:77:ab:d5:48:eb:
69:42:8d:ea:75:a3:86:65:12:b8:b1:d6:b1:f3:23:f5:b8:38:
ed:bd:e5:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:13 2025 by rpki-client