Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/KXv7Ov19sSCa0n4IRfVWtTWFk0M.roa
File: KXv7Ov19sSCa0n4IRfVWtTWFk0M.roa (raw, json)
Hash identifier: KFhYBcXQsPjBxTDlKFDHvfp5p3kCUC7q9rWT16r+pJw=
Subject key identifier: 29:7B:FB:3A:FD:7D:B1:20:9A:D2:7E:08:45:F5:56:B5:35:85:93:43
Certificate issuer: /CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Certificate serial: 01926FC47EAF7305BD106FC00970CA4F8661
Authority key identifier: 16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/KXv7Ov19sSCa0n4IRfVWtTWFk0M.roa
Signing time: Wed 09 Oct 2024 05:33:21 +0000
ROA not before: Wed 09 Oct 2024 05:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39880
IP address blocks: 2001:67c:2174::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:47:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6f:c4:7e:af:73:05:bd:10:6f:c0:09:70:ca:4f:86:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=165fad4109283b33b6f3ba53fae83a145d1934e2
Validity
Not Before: Oct 9 05:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=297bfb3afd7db1209ad27e0845f556b535859343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:53:3d:c3:1a:17:ba:da:26:c9:0a:5e:cb:97:
06:76:1c:40:2b:92:a1:ad:3e:75:1a:3b:0f:fb:5d:
40:86:a7:4e:b9:b6:58:f7:19:bb:0b:f2:20:d7:3b:
51:ab:80:46:f5:cd:24:44:06:34:80:98:6d:f6:10:
16:5e:da:09:cd:53:c0:a0:3c:94:62:43:f1:ab:85:
54:70:4b:4c:cf:00:e6:47:fa:fa:2d:f1:fd:27:32:
0c:6f:6b:1b:30:d0:84:b3:d6:2b:d7:6c:63:78:07:
0c:9b:ec:9f:ba:65:f5:c6:8b:28:b2:1d:dc:d7:58:
fc:ad:b9:06:db:c1:ef:c1:7d:26:07:78:17:c5:24:
5e:3f:ea:14:76:29:ad:2d:57:9f:f7:98:c7:5c:3c:
72:09:15:f1:26:ba:8a:19:41:84:05:98:c7:33:76:
72:56:f5:05:0d:ae:63:bb:4f:0c:00:98:f2:8e:cf:
01:c8:3a:22:74:4e:02:f1:17:11:f3:6a:55:7c:f9:
6c:6b:77:42:b3:b7:39:54:c0:3b:3a:8a:e2:8d:9f:
e5:c0:66:1a:09:35:ed:27:07:62:26:f4:6d:11:cc:
78:26:d8:db:bf:eb:28:76:43:dc:03:51:a0:58:2e:
37:1a:78:f6:1d:d8:04:6d:41:39:ce:ad:f9:34:2c:
0b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7B:FB:3A:FD:7D:B1:20:9A:D2:7E:08:45:F5:56:B5:35:85:93:43
X509v3 Authority Key Identifier:
keyid:16:5F:AD:41:09:28:3B:33:B6:F3:BA:53:FA:E8:3A:14:5D:19:34:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fl-tQQkoOzO287pT-ug6FF0ZNOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/KXv7Ov19sSCa0n4IRfVWtTWFk0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3b72c0-5de9-46a4-abd4-31b60311c315/1/Fl-tQQkoOzO287pT-ug6FF0ZNOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2174::/48
Signature Algorithm: sha256WithRSAEncryption
0e:51:2c:8f:93:e7:3c:39:f3:bc:91:6b:39:e8:53:30:b8:e3:
6b:95:c4:0c:8f:a4:20:34:1b:08:bd:d5:9b:a3:ef:4c:8d:38:
28:ba:54:45:c9:e1:3e:79:87:06:a2:45:d9:c5:e5:fb:b0:9b:
2a:6b:a9:23:73:29:a9:1a:b4:47:b3:46:f8:48:cb:40:31:4f:
36:be:60:76:bf:80:00:99:7d:6e:51:9d:8c:4f:4a:b3:6f:1c:
d4:5f:f5:f5:42:6c:9f:d0:82:91:d5:80:c9:d1:a1:6d:2c:88:
32:9b:ad:6f:eb:76:c7:7a:a5:72:9d:4d:59:7d:68:88:e6:5d:
e7:e5:94:f6:32:c5:50:b1:9f:c5:36:9f:24:16:d6:e7:58:26:
4b:39:2f:48:d2:32:97:8d:0e:f7:1e:4e:45:3a:b6:e6:a8:9d:
cb:80:2a:b0:e4:74:9d:1d:28:c1:14:b2:c5:87:52:d4:9e:9a:
e2:4b:54:1a:18:b9:26:14:e4:d8:f8:dc:db:1b:92:83:87:96:
3f:74:4c:44:5b:0d:e5:4f:f2:75:bc:05:44:e1:81:15:ce:3f:
57:85:ec:1d:a5:6a:4d:c5:c5:56:f3:b5:98:5e:92:5c:11:89:
83:2e:04:01:ff:1b:13:36:31:f3:a4:3c:21:4c:6e:2d:1f:e1:
a1:a0:b9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:37 2025 by rpki-client