Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/7W_5rjJ8w94uQSxg1A99P-FPUVQ.roa
File: 7W_5rjJ8w94uQSxg1A99P-FPUVQ.roa (raw, json)
Hash identifier: m4Rb6xDGKWMZn9uF7icR5Q0/9gphb3UqJg9ZU3aH0KM=
Subject key identifier: ED:6F:F9:AE:32:7C:C3:DE:2E:41:2C:60:D4:0F:7D:3F:E1:4F:51:54
Certificate issuer: /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial: 01935E345C0568C703B19EBB19CCC2233F70
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/7W_5rjJ8w94uQSxg1A99P-FPUVQ.roa
Signing time: Sun 24 Nov 2024 12:45:09 +0000
ROA not before: Sun 24 Nov 2024 12:45:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a12:5340:6::/47 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5e:34:5c:05:68:c7:03:b1:9e:bb:19:cc:c2:23:3f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Validity
Not Before: Nov 24 12:45:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed6ff9ae327cc3de2e412c60d40f7d3fe14f5154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4d:5b:35:33:c8:e0:30:b5:7e:a9:6d:ee:5b:
8b:67:dc:cd:99:fa:ba:20:80:5d:c8:9d:3f:63:6f:
96:f7:53:2a:f8:8f:1e:e1:f6:4d:24:ea:8d:de:c8:
9f:72:24:c5:27:a4:f2:aa:64:c7:a7:31:79:d3:a5:
13:76:68:20:c8:2f:be:ee:1d:70:e1:c9:6e:ce:e5:
8f:85:45:eb:50:7a:a1:74:8f:22:a0:d4:04:05:d9:
11:a6:49:55:ba:02:11:f7:8d:51:92:4a:09:45:10:
00:33:82:ed:ec:07:15:b1:96:7e:c4:0d:54:1f:fd:
0d:ee:68:ca:c1:c0:4f:00:eb:c2:63:f8:7a:3e:20:
b7:e3:94:9d:89:98:76:d5:b6:4e:ed:33:60:48:0b:
ed:8c:80:f2:48:60:b2:32:24:49:5c:ff:9c:43:75:
e6:7a:3a:63:df:76:cf:99:6d:39:8a:03:fc:f6:df:
30:17:c4:08:86:3f:38:89:08:34:8b:5e:44:29:6a:
d3:ff:bc:d5:3d:1e:af:b1:80:50:56:10:47:c7:33:
d2:ea:61:70:d9:20:4b:89:2d:17:b3:0b:41:c5:c8:
46:89:f1:00:ce:86:bb:44:3e:54:ca:3d:ab:05:21:
f4:c7:22:9c:2a:20:4f:6c:ef:16:cf:67:30:db:50:
27:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6F:F9:AE:32:7C:C3:DE:2E:41:2C:60:D4:0F:7D:3F:E1:4F:51:54
X509v3 Authority Key Identifier:
keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/7W_5rjJ8w94uQSxg1A99P-FPUVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5340:6::/47
Signature Algorithm: sha256WithRSAEncryption
6f:29:ec:8e:7d:01:61:94:27:f1:86:48:e5:78:b2:48:df:11:
23:a6:91:3e:3f:39:95:27:aa:c7:18:99:c9:cc:68:40:62:9b:
f2:fc:e0:c2:2e:0f:a2:dd:b9:2c:42:6a:36:c9:01:0f:37:d6:
e1:22:4e:f9:59:85:48:a8:6d:f9:a4:2a:d6:8e:75:8e:3d:58:
36:e7:1c:54:8b:79:ba:0f:3f:5c:93:74:3f:6b:26:1d:e1:07:
11:cc:84:b8:c7:da:e8:9d:1c:dc:35:ed:f2:d6:0c:43:ca:f0:
a7:87:91:3b:4b:8d:e0:a2:e8:bf:84:7d:66:27:38:34:b7:ad:
37:42:90:1e:ee:16:b4:2c:cd:81:6e:b1:39:dd:a9:fe:7a:65:
fd:46:63:73:02:b3:5e:2c:bc:56:ca:19:71:73:05:08:4a:c0:
73:49:26:5f:53:1c:b4:21:9b:ce:13:6c:5e:a1:ea:df:83:49:
ea:20:31:65:d1:ab:44:2b:95:72:78:6a:d3:92:2c:22:4f:f3:
f2:29:47:53:f0:bd:26:88:ad:89:8e:5d:65:4c:09:c6:2c:46:
2a:d4:f5:fb:b2:ee:ad:8b:db:7b:82:2e:d9:85:d3:b4:b8:0d:
51:58:a5:23:5f:95:81:30:1b:85:08:ab:e0:07:fa:6f:3c:5a:
ea:2f:46:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:22:25 2025 by rpki-client