Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/o4_7_badneq7wYjegfFK7EJKSlY.roa
File: o4_7_badneq7wYjegfFK7EJKSlY.roa (raw, json)
Hash identifier: 3vuo8yQzRqw9sdAOeC+h8E629riaUDQDPiDS1uzRvJM=
Subject key identifier: A3:8F:FB:FD:B6:9D:9D:EA:BB:C1:88:DE:81:F1:4A:EC:42:4A:4A:56
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019425FDE24D58E47A510D9410E0312AEDBC
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/o4_7_badneq7wYjegfFK7EJKSlY.roa
Signing time: Thu 02 Jan 2025 07:49:42 +0000
ROA not before: Thu 02 Jan 2025 07:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206479
IP address blocks: 2a06:e881:2100::/44 maxlen: 128
Validation: Failed, certificate revoked on Mon 03 Mar 2025 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e2:4d:58:e4:7a:51:0d:94:10:e0:31:2a:ed:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 07:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a38ffbfdb69d9deabbc188de81f14aec424a4a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:24:d4:d6:4e:a7:96:eb:da:82:98:b9:2b:e9:
cb:a3:5a:7f:b5:6a:eb:cf:0b:e6:9c:05:63:ef:86:
9a:30:f6:a5:c7:1b:24:3b:ca:95:a3:b9:5c:dd:43:
50:68:8c:95:cb:8a:08:0e:9c:9e:29:54:0a:84:1a:
70:60:63:c7:93:ab:e1:d0:63:8a:3f:27:2a:3b:65:
8f:6d:b8:ba:7f:8e:5f:00:f0:5b:4c:b7:ba:68:55:
b5:2b:67:7c:d8:71:75:aa:17:3b:cb:6a:f4:f4:8c:
57:2f:87:ec:36:ec:6c:bc:1b:7f:2c:ce:54:4f:ca:
e1:b5:52:46:34:f4:30:37:5a:c2:b7:13:98:38:a9:
d4:42:51:b9:06:9c:f1:b5:a6:69:ca:eb:ce:b5:1a:
65:d0:01:34:1d:8e:6e:f9:80:67:f0:38:e5:2a:5b:
13:cb:1e:72:be:df:b5:60:03:b9:76:2c:8c:de:cf:
9f:a9:c5:7d:cb:33:f8:73:4e:cd:08:62:46:2d:37:
49:dc:bb:40:ea:25:a1:e1:4c:3e:1a:3f:fb:e5:62:
c9:c7:b1:4d:0b:54:e9:81:13:51:3b:e4:e9:3c:f2:
a3:a9:1e:bc:a8:0a:00:52:d5:0f:83:23:14:24:71:
61:08:b2:e8:54:92:ae:39:c1:60:20:9e:75:0b:55:
c7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:8F:FB:FD:B6:9D:9D:EA:BB:C1:88:DE:81:F1:4A:EC:42:4A:4A:56
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/o4_7_badneq7wYjegfFK7EJKSlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:2100::/44
Signature Algorithm: sha256WithRSAEncryption
0d:4f:2b:03:0c:6b:4a:c8:3d:99:9b:40:a2:94:5f:1d:d4:af:
ec:70:bb:43:ab:0d:6e:8e:49:08:47:c7:10:a9:10:38:60:95:
37:05:5e:70:46:08:07:ce:ec:6c:32:4d:b1:28:b8:21:e5:bc:
fc:9a:13:20:1b:0d:92:26:44:65:5d:19:b3:c5:60:f5:68:fd:
ff:25:1c:b5:16:0d:11:d3:09:dc:87:29:0e:6c:72:27:64:7b:
3d:86:22:30:6f:89:9f:97:c5:84:c4:6e:21:62:11:38:64:bc:
77:cc:ae:92:3a:8f:7e:f4:ca:4b:67:d7:52:37:41:70:24:d0:
c8:d2:55:19:d7:b9:f2:e7:71:f2:7b:b2:48:65:b6:e5:84:8d:
b0:11:9e:31:bb:18:7b:78:25:8c:3e:9a:a0:1d:b0:61:1e:40:
7a:3c:82:c6:e8:18:e4:4d:49:c6:63:4f:f8:87:c4:dd:de:33:
3e:13:d8:b1:e0:85:62:02:97:ae:1d:eb:8e:32:a0:61:62:ef:
4d:d9:4f:a9:d4:3e:c6:c2:9c:6a:cd:32:30:de:d5:d8:02:6f:
a2:8d:b8:2c:df:e4:82:59:69:ee:be:5f:63:76:43:6e:24:6b:
59:2e:f1:78:95:54:ff:72:6e:b0:d8:7f:39:5b:0c:db:b9:94:
67:67:3a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:34:20 2025 by rpki-client