Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/YXXe4OVA5wk7BQzENHhm1vbvjmk.roa
File: YXXe4OVA5wk7BQzENHhm1vbvjmk.roa (raw, json)
Hash identifier: KqN+5LTUvWOwlNOGCKiBw/VxWqXYU3dMbeGV4k2J/e0=
Subject key identifier: 61:75:DE:E0:E5:40:E7:09:3B:05:0C:C4:34:78:66:D6:F6:EF:8E:69
Certificate issuer: /CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Certificate serial: 019290DE2A28717F29118DA69568F842AF1E
Authority key identifier: 0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/YXXe4OVA5wk7BQzENHhm1vbvjmk.roa
Signing time: Tue 15 Oct 2024 15:48:51 +0000
ROA not before: Tue 15 Oct 2024 15:48:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214034
IP address blocks: 2a01:ec40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:de:2a:28:71:7f:29:11:8d:a6:95:68:f8:42:af:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a8e93f1961bebc10009cb265c0baf34702a3dab
Validity
Not Before: Oct 15 15:48:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6175dee0e540e7093b050cc4347866d6f6ef8e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ba:31:02:e5:43:9f:dd:c5:d5:15:48:ad:e9:
e2:24:03:91:40:f5:44:e4:31:87:74:6e:3b:54:f6:
07:7e:d0:96:a5:bd:15:6e:65:ce:b7:f9:be:c7:58:
1b:cb:99:16:64:0a:62:cb:e4:d6:d9:db:ce:b4:4d:
11:35:a0:46:d1:5b:9d:86:a5:04:1a:e1:00:dc:f6:
3c:04:71:48:df:86:3d:a2:d4:d7:fa:70:d5:15:24:
db:a3:d5:b3:bc:a8:37:e5:07:95:e3:3f:54:eb:f3:
0a:c8:ef:84:86:e4:bb:98:da:e6:cd:9b:bf:31:8a:
84:65:46:5f:0c:c5:f3:f3:f3:d6:f9:6a:c6:dd:19:
08:ad:05:fc:40:80:6a:a5:b1:71:90:4c:ba:c9:32:
d7:1e:12:5b:9f:53:1f:29:8d:2e:aa:83:37:46:88:
29:d5:70:d0:92:49:b8:cc:7d:a6:b7:06:27:4f:60:
2c:08:92:96:b0:50:7f:40:57:3f:54:b7:db:19:42:
0f:be:7d:41:ae:3a:e8:a7:fe:f8:6b:37:df:0f:6a:
3b:56:28:67:a6:66:75:c1:4e:ef:e4:01:3f:16:f1:
8c:28:36:9b:09:90:6f:e5:1f:84:2a:bd:8c:a0:71:
83:40:b4:52:cc:3a:e1:11:f0:74:da:b2:3a:07:73:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:DE:E0:E5:40:E7:09:3B:05:0C:C4:34:78:66:D6:F6:EF:8E:69
X509v3 Authority Key Identifier:
keyid:0A:8E:93:F1:96:1B:EB:C1:00:09:CB:26:5C:0B:AF:34:70:2A:3D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Co6T8ZYb68EACcsmXAuvNHAqPas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/YXXe4OVA5wk7BQzENHhm1vbvjmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/39fa43-9794-421a-ba89-b9356e61f73a/1/Co6T8ZYb68EACcsmXAuvNHAqPas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ec40:1::/48
Signature Algorithm: sha256WithRSAEncryption
68:32:e8:87:f4:38:6b:28:8b:11:dc:c8:31:c3:29:15:be:3d:
00:19:7f:cc:cf:c5:63:9b:47:f8:50:f4:5b:eb:13:fe:56:69:
a4:63:ab:f0:8b:fe:6f:1c:8a:4a:6e:29:3c:b0:41:9f:93:05:
ed:7c:82:50:1c:95:0e:00:a3:9e:4e:c9:39:6e:f0:54:5b:b4:
d1:42:ba:c6:70:31:ab:d0:cd:0e:4f:6b:d9:cc:87:9c:fd:e4:
29:06:28:e2:ca:80:f6:e2:fc:f1:d0:8d:ff:60:cd:d8:32:7e:
ca:9d:ca:ce:55:47:c7:0a:c3:a4:7c:f2:0c:d2:3c:53:b2:e5:
2c:67:c0:2c:3a:66:66:f2:72:4a:27:e6:9d:30:c3:d9:28:22:
3d:a5:06:c3:85:a7:7b:cc:99:3e:9f:74:f4:e0:88:b7:65:2d:
fc:e3:71:c3:7a:27:8a:5c:91:7b:41:7a:d8:73:23:a7:1b:e4:
60:43:af:71:3e:ca:af:9c:53:79:34:de:3a:df:c8:cc:8f:47:
c6:4e:a1:66:c6:32:26:8f:12:ec:9b:6b:70:1a:54:3c:7f:32:
a8:1c:bf:4c:40:c4:22:15:1b:44:d1:b7:ed:d6:15:7b:d9:36:
fc:da:11:c5:b8:df:02:d3:3a:35:ce:b6:d8:a5:e5:f4:38:f5:
9e:75:61:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:18:40 2025 by rpki-client