Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/rcCQ6z1h9KoPLQ16Fcn1h8OgJd0.roa
File: rcCQ6z1h9KoPLQ16Fcn1h8OgJd0.roa (raw, json)
Hash identifier: 1tn5FFXbcd9K4ZMY6yjaVwUZQbhdxVv3JEO1sf/LeUI=
Subject key identifier: AD:C0:90:EB:3D:61:F4:AA:0F:2D:0D:7A:15:C9:F5:87:C3:A0:25:DD
Certificate issuer: /CN=a5a56ebf01e00349f673019180560c9a31aea871
Certificate serial: 018CC86EFED0A2C117AFFDB28F03781E909D
Authority key identifier: A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/rcCQ6z1h9KoPLQ16Fcn1h8OgJd0.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47316
IP address blocks: 2a12:c6c3::/32 maxlen: 48
2a12:c6c2::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 29 Jan 2024 20:41:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fe:d0:a2:c1:17:af:fd:b2:8f:03:78:1e:90:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5a56ebf01e00349f673019180560c9a31aea871
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adc090eb3d61f4aa0f2d0d7a15c9f587c3a025dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:08:ec:96:77:5f:de:43:b4:af:09:04:52:92:
03:f8:f6:85:62:7e:fd:b3:53:37:e3:e4:bc:57:16:
20:3f:8e:62:42:53:ee:bb:68:19:fe:ab:8b:4c:d2:
8c:cd:6c:51:95:c6:5d:75:6c:18:27:cb:45:28:89:
d0:d7:59:5c:0f:21:93:db:1a:d7:02:1e:f0:f7:3c:
33:39:83:7e:8a:90:a9:a1:a9:9c:d8:86:a6:42:57:
69:f0:21:d3:fe:2d:ab:bf:2b:fd:6e:05:99:b8:ce:
12:75:0b:fb:2a:26:a7:bf:72:dd:ef:1e:32:e5:b8:
c6:41:3d:cd:44:d5:26:e0:2b:b8:8b:36:a0:df:dc:
2c:01:61:f3:81:ca:4b:c7:d9:25:3c:51:cf:2a:3c:
c1:7e:1b:36:46:c4:5c:3c:12:e9:23:b3:0e:6a:b6:
68:de:1a:1d:ee:32:1b:8e:9a:28:6c:e0:4c:d8:a8:
de:27:f7:b8:2a:74:61:84:ae:1d:b2:cb:e0:04:ea:
68:ac:06:89:7b:63:c7:79:30:21:a0:ba:5d:3c:50:
1c:11:6e:79:ad:e0:36:26:87:db:ef:3c:1e:f9:ac:
fa:f3:82:2f:25:b2:5b:4a:ed:c3:67:03:ae:8e:2c:
dd:6e:74:07:1c:c2:16:9b:12:ec:32:30:c8:6a:c1:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C0:90:EB:3D:61:F4:AA:0F:2D:0D:7A:15:C9:F5:87:C3:A0:25:DD
X509v3 Authority Key Identifier:
keyid:A5:A5:6E:BF:01:E0:03:49:F6:73:01:91:80:56:0C:9A:31:AE:A8:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/paVuvwHgA0n2cwGRgFYMmjGuqHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/rcCQ6z1h9KoPLQ16Fcn1h8OgJd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/554c35-a83c-4329-a08d-2d46d30dacbf/1/paVuvwHgA0n2cwGRgFYMmjGuqHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:c6c2::/31
Signature Algorithm: sha256WithRSAEncryption
29:26:c6:8d:9f:a1:d7:ce:97:bc:86:e0:97:4f:a2:d2:74:1d:
50:95:79:03:bb:35:af:d2:81:bb:77:17:58:42:38:d4:08:c7:
b0:c6:21:95:a7:6d:bc:b8:7f:51:8e:3f:25:9c:50:47:36:0b:
20:83:1b:e5:20:1e:91:7e:54:df:44:7f:b9:dc:ae:88:de:66:
26:f8:3b:d6:54:97:a3:b5:c9:4d:28:55:f6:90:dd:35:bc:8f:
b7:e8:09:7a:58:6f:e6:ce:a2:9e:96:84:11:65:61:35:f5:79:
1e:84:c7:92:28:3e:3f:8f:6e:cf:b7:d7:5a:e4:c2:ee:3f:71:
19:c2:44:69:4b:c7:b4:a3:2a:46:f6:99:2b:1f:79:45:77:a2:
53:06:f9:16:68:95:51:e5:f6:19:4a:b6:08:74:9c:ac:6f:01:
3f:70:37:7d:70:8c:32:10:99:1c:c7:1f:00:b5:45:8d:b5:ad:
54:a0:6a:0c:be:30:e9:5b:01:81:66:f4:84:35:05:31:ff:6c:
d9:23:e9:03:c5:72:8c:23:ad:45:53:33:b6:d6:48:a1:03:84:
36:8a:74:ad:a0:06:2f:ed:d1:bc:9d:80:36:02:58:9b:49:a8:
56:1e:db:22:60:12:31:0d:7b:be:4c:a9:b8:cf:bc:76:bb:1b:
81:d3:a3:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:19:33 2025 by rpki-client