Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/rGwJNEA7JDOu0peVFW2DZCvdgdw.roa
File: rGwJNEA7JDOu0peVFW2DZCvdgdw.roa (raw, json)
Hash identifier: 4XnsRDaq1sX22HPobk1YwEkV8xt3k3d3MAr+DO20kXM=
Subject key identifier: AC:6C:09:34:40:3B:24:33:AE:D2:97:95:15:6D:83:64:2B:DD:81:DC
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 018CC9BB0DD61434D9FFA856369D1081E85B
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/rGwJNEA7JDOu0peVFW2DZCvdgdw.roa
Signing time: Tue 02 Jan 2024 10:32:08 +0000
ROA not before: Tue 02 Jan 2024 10:32:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202729
IP address blocks: 2001:67c:a6c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:0d:d6:14:34:d9:ff:a8:56:36:9d:10:81:e8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Jan 2 10:32:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac6c0934403b2433aed29795156d83642bdd81dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:42:58:42:2b:4b:71:97:8e:37:b6:e3:3f:87:
bd:4b:2c:fb:9d:89:29:61:cd:f6:97:24:b9:f5:69:
9b:4d:e6:45:dd:65:2b:0b:bf:c7:a7:b1:fe:38:87:
69:f3:dd:04:1e:3f:00:ab:9b:53:59:fe:ba:98:87:
63:4e:57:bd:e3:22:83:a6:46:d9:f1:3b:77:4f:dc:
1d:79:52:b5:27:0e:6f:dc:e6:75:8c:2f:2d:92:93:
02:29:43:d4:65:69:56:62:a1:f1:cd:45:fd:65:41:
01:e4:42:24:09:00:0e:09:8b:ec:3d:44:47:a9:a7:
b2:ec:e7:10:35:77:cc:88:ac:d5:2a:df:0e:58:26:
c2:45:33:ec:55:46:1c:20:9f:a6:68:ae:69:3d:9f:
ca:d5:ab:d1:e9:2d:d9:db:d0:07:0b:85:47:c0:76:
d3:9f:43:f3:49:d5:05:96:ee:c6:7e:22:73:dc:b9:
12:3f:72:94:28:b3:eb:60:c0:14:2f:66:66:89:b0:
83:f5:ca:3e:7b:5c:54:8d:bd:dc:5c:c3:a5:f3:d5:
8c:e9:f4:91:85:8f:68:59:2c:8d:cd:70:51:02:45:
db:eb:0c:f7:f0:31:59:fa:07:d4:7d:33:1a:f6:63:
31:98:ee:33:32:65:cc:38:24:91:15:3c:72:98:a1:
71:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6C:09:34:40:3B:24:33:AE:D2:97:95:15:6D:83:64:2B:DD:81:DC
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/rGwJNEA7JDOu0peVFW2DZCvdgdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a6c::/48
Signature Algorithm: sha256WithRSAEncryption
9e:1e:fc:23:a7:ed:32:d5:2c:2e:42:37:b5:95:98:6e:a2:99:
db:99:fd:f8:8e:3e:ac:5c:f1:33:c0:c6:31:15:6b:7c:6a:44:
06:4e:79:60:10:57:5c:4e:ff:31:83:08:ef:39:5c:74:67:19:
f6:54:2c:33:ff:0a:c5:fb:da:11:ac:ea:5a:00:0e:38:fa:47:
cb:48:c8:31:e7:b1:8e:21:cd:ed:66:af:e6:17:f0:b1:53:3c:
2d:ef:13:ee:75:8e:ba:80:8c:27:57:4c:2b:4e:3e:7d:73:50:
85:40:f8:cc:cd:af:ae:70:03:32:72:e4:1b:95:bc:04:dc:4b:
3d:0d:f0:fc:ad:6b:54:00:c0:2b:51:13:6c:4c:b1:7d:61:3c:
fd:19:e8:2a:51:3e:df:29:36:06:a9:b6:9b:68:a5:3f:11:65:
4e:76:9c:dd:27:bf:63:25:4a:79:6f:d6:fa:07:74:f0:df:0d:
3c:79:2a:0a:31:eb:e8:7b:fa:c8:28:1a:71:db:76:e8:be:3e:
13:cf:98:d2:7e:11:1f:e2:84:9a:ab:eb:fc:3e:1d:8d:78:02:
b9:34:ff:50:76:31:06:5a:10:ab:cf:f7:d0:9a:5c:62:aa:d1:
fc:b1:8b:f8:2d:82:80:bb:eb:02:51:45:9e:73:c9:f8:55:43:
02:dd:c6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:53 2025 by rpki-client