Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/q4gjC_jzpdTbuakGsbiQxZR1Exc.roa
File: q4gjC_jzpdTbuakGsbiQxZR1Exc.roa (raw, json)
Hash identifier: CzybvPHNHuf6REavqB6Y7lRmUsQ/jR7L/U3/g2WRLwE=
Subject key identifier: AB:88:23:0B:F8:F3:A5:D4:DB:B9:A9:06:B1:B8:90:C5:94:75:13:17
Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Certificate serial: 018DEC93D6D1E8D7F9ACE98AE55F81B94251
Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/q4gjC_jzpdTbuakGsbiQxZR1Exc.roa
Signing time: Tue 27 Feb 2024 21:58:48 +0000
ROA not before: Tue 27 Feb 2024 21:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 2a10:ed40::/48 maxlen: 48
2a10:ed40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 07 Oct 2024 19:06:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:93:d6:d1:e8:d7:f9:ac:e9:8a:e5:5f:81:b9:42:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68
Validity
Not Before: Feb 27 21:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab88230bf8f3a5d4dbb9a906b1b890c594751317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:29:fa:6e:51:8b:ff:16:1f:1c:d5:9f:3f:60:
e1:d6:97:d0:bc:08:f2:88:41:f1:77:ad:1b:41:ab:
48:2d:5d:28:19:b4:48:74:1d:30:ad:58:c0:28:06:
b7:6f:39:ec:7e:c1:5b:8d:25:be:8e:a7:4e:92:22:
82:dc:7d:b2:06:1e:f5:d7:57:54:27:d2:89:ce:62:
91:ab:29:74:60:88:00:83:63:1f:d4:8b:1a:1e:90:
3c:e6:3c:1e:8d:93:26:5d:87:c6:cd:a0:ed:30:cd:
b6:16:2f:3e:89:0a:96:c4:7f:67:ef:2e:07:73:e9:
40:d7:dc:93:ad:71:a9:9e:01:44:a5:1c:8e:de:6f:
82:83:cb:f1:ad:2d:e8:ab:d9:54:28:e3:e3:ca:db:
98:29:19:35:84:61:8f:58:ee:37:11:58:f2:80:95:
ea:44:55:94:44:3e:7f:78:c4:af:8b:77:1c:0d:ea:
4d:5d:37:c0:f4:e2:ad:dc:a6:5f:d9:47:56:1a:20:
e6:7c:ef:71:e7:f6:31:1e:7a:d2:95:1d:44:4a:78:
09:8f:f4:37:54:3e:c0:80:75:cb:57:eb:72:89:70:
06:04:42:f8:5a:54:15:ff:7c:8c:51:f9:fa:bd:10:
01:c3:0b:a5:e3:53:ab:eb:48:4a:17:c7:06:e5:5e:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:88:23:0B:F8:F3:A5:D4:DB:B9:A9:06:B1:B8:90:C5:94:75:13:17
X509v3 Authority Key Identifier:
keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/q4gjC_jzpdTbuakGsbiQxZR1Exc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ed40::/47
Signature Algorithm: sha256WithRSAEncryption
05:04:c5:06:24:ca:73:ea:f1:44:00:b4:45:c2:e7:de:4d:dc:
e2:ca:80:d2:1e:e8:94:75:e7:2b:2f:7a:1f:1a:33:c0:ad:50:
28:d2:49:c5:8d:50:49:8d:ae:3c:45:4e:39:9f:6a:ef:d5:01:
44:f1:84:72:4c:f9:13:f4:a4:21:3a:c0:2a:d3:e2:71:0c:ea:
fe:53:3e:56:04:99:f2:34:5e:17:e1:cc:23:0c:1a:37:66:93:
e2:9c:4e:57:36:d1:15:5c:91:81:0f:2f:48:d4:5d:2f:ee:1b:
5b:0e:0e:15:03:43:7e:a7:4a:d8:31:2c:10:ef:65:21:77:5a:
c7:29:e7:49:23:4a:82:64:28:35:52:4c:4f:b1:c1:59:06:23:
bb:1a:1f:ff:57:88:c5:82:48:6b:dc:2f:6c:f6:83:47:93:50:
cd:0a:dd:33:94:a1:6f:f6:eb:53:12:61:04:9d:bd:ba:cd:ba:
b1:95:91:80:3e:c3:8b:38:dd:d6:26:36:1c:84:6f:fc:bd:9c:
b5:a0:50:30:b4:c2:12:66:95:2d:0f:d4:d0:e1:ef:1b:07:b2:
68:fc:07:49:cd:92:58:04:ee:99:27:92:56:37:45:7d:40:c1:
68:b3:db:a3:47:fc:9e:db:5d:74:f5:f6:27:6a:47:67:77:6e:
56:39:fb:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 17:51:39 2025 by rpki-client