Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/Ve5gBqaZljp43dOVgdJM4fMSMCI.roa
File: Ve5gBqaZljp43dOVgdJM4fMSMCI.roa (raw, json)
Hash identifier: LkQuTzqCJUz71OQkLu1vhhZKLKzHV2Vvn/TWn5ZwfXE=
Subject key identifier: 55:EE:60:06:A6:99:96:3A:78:DD:D3:95:81:D2:4C:E1:F3:12:30:22
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 0194206833B298DC27D62809963233DA8ACF
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/Ve5gBqaZljp43dOVgdJM4fMSMCI.roa
Signing time: Wed 01 Jan 2025 05:48:07 +0000
ROA not before: Wed 01 Jan 2025 05:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204104
IP address blocks: 2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
2a10:ed40:2::/48 maxlen: 48
2a10:ed40:3::/48 maxlen: 48
2a10:ed40:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 21 Jan 2025 16:29:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:33:b2:98:dc:27:d6:28:09:96:32:33:da:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Jan 1 05:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55ee6006a699963a78ddd39581d24ce1f3123022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:f1:37:f3:be:10:dd:fb:83:79:95:90:a1:
0b:6c:31:fb:09:c4:4d:e2:3d:62:15:d9:86:02:39:
b4:8b:06:28:6c:87:21:56:75:39:fc:5c:b7:84:5a:
8a:20:23:d2:3c:e9:1a:b4:89:2b:d2:59:23:82:92:
7b:b2:6e:83:62:53:54:20:5b:da:8f:b4:a1:18:3a:
ca:91:79:47:16:dd:70:f3:82:0e:92:68:2c:48:9c:
12:ef:42:56:b0:ec:aa:bb:c4:27:c8:dc:37:50:b2:
6c:5a:6a:57:ed:ce:24:c1:38:be:63:38:63:4a:69:
50:c5:14:2b:46:19:bd:d0:a9:85:ab:2e:97:3f:87:
6a:a1:2b:24:d2:7c:d2:13:15:fd:8c:10:c1:63:3e:
16:b0:dc:b9:66:a2:93:4c:43:94:cd:2a:b2:9f:70:
d3:a8:c9:15:22:0b:d5:8a:47:e0:11:fd:15:2c:dc:
82:e7:59:5a:a0:8e:2f:3b:c8:e4:b2:19:64:b5:69:
63:7a:0c:3f:8f:e1:12:fb:43:e9:85:62:59:56:71:
16:92:bf:59:a6:81:47:d7:78:da:b0:8d:a1:19:b5:
c8:a9:e3:97:95:b5:98:43:e2:90:64:da:b3:4f:b2:
ba:38:50:88:a1:58:fd:2a:49:35:2b:9b:ab:ae:f7:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:60:06:A6:99:96:3A:78:DD:D3:95:81:D2:4C:E1:F3:12:30:22
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/Ve5gBqaZljp43dOVgdJM4fMSMCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ed40::-2a10:ed40:4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
76:88:e7:8f:a1:5b:e5:c0:a2:1f:69:05:6f:c8:dc:54:f9:a8:
9a:bf:d0:3e:3e:6a:6f:53:89:57:d8:37:f8:58:fb:82:b2:e0:
3f:1d:a5:76:60:f3:b2:8e:34:77:6f:80:3b:40:8d:d9:0d:21:
73:db:a3:1f:7c:63:1c:56:ce:6c:8e:b4:fe:b9:7b:58:ab:56:
ca:7a:49:1b:b3:2c:dc:e1:3c:df:7e:b4:4e:5e:79:86:47:dc:
69:bc:42:72:2e:44:2c:13:47:e5:a6:1c:96:86:99:aa:16:7c:
95:66:22:8a:5b:67:f1:98:5d:1d:21:16:98:a8:b5:6e:ca:d7:
fe:07:37:89:03:b2:8b:b6:c0:d9:13:b2:a2:06:0d:0e:84:24:
2f:db:02:45:03:f0:53:6d:fe:8c:6c:ef:62:f7:9e:1d:10:c1:
ba:a2:7a:f6:83:5e:82:ea:07:04:06:5b:74:66:ad:ba:11:39:
64:46:92:d5:0c:6c:52:1d:ff:cd:ef:bf:eb:dd:73:42:f3:8d:
82:f9:5c:50:d7:bb:4a:81:d1:8b:d9:0e:a9:c6:7f:7a:79:59:
8d:3f:48:de:be:d3:59:a4:a2:17:4e:2a:2a:4b:75:66:84:95:
23:43:db:fd:29:f9:8c:2a:a5:2d:c4:45:35:c1:a4:e7:38:f1:
9c:60:33:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:24 2025 by rpki-client