Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/TmdKNMBLDj3cImmyqBGTQX5L-jo.roa
File: TmdKNMBLDj3cImmyqBGTQX5L-jo.roa (raw, json)
Hash identifier: 5O9+l3Knong6sf5EGvP31zFL3J5s0mccK7niM2DWwok=
Subject key identifier: 4E:67:4A:34:C0:4B:0E:3D:DC:22:69:B2:A8:11:93:41:7E:4B:FA:3A
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 018CC801D14E8555BD532A55F153FE31D6BC
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/TmdKNMBLDj3cImmyqBGTQX5L-jo.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199875
IP address blocks: 2a00:ad44:3084::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d1:4e:85:55:bd:53:2a:55:f1:53:fe:31:d6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e674a34c04b0e3ddc2269b2a81193417e4bfa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:79:d2:dc:12:e0:ba:b8:b1:d2:e4:c7:ca:
2d:3a:01:15:61:e3:b5:a0:b1:d4:51:b1:2b:cf:a1:
02:e3:8b:a6:69:9f:18:b6:e3:60:f4:77:32:49:eb:
e8:66:01:f6:a8:64:00:fc:b1:d1:b5:41:a9:07:66:
c8:e5:7f:6d:55:06:80:03:b3:bd:87:41:19:f4:f6:
7f:76:93:06:7c:44:fb:c5:e4:16:ff:a6:ea:b5:25:
75:cc:b6:6f:b6:d0:ed:d6:d1:d5:0a:cf:61:77:d9:
06:d9:3c:43:35:31:b9:42:ce:e4:83:56:ba:d8:ff:
2b:a6:24:6b:6f:b5:c8:db:91:6f:20:77:a2:97:df:
4f:96:48:05:4f:de:1a:58:8a:77:13:4a:9e:55:ea:
d4:03:79:b6:b0:f2:bb:c0:b2:84:6c:5a:34:03:6b:
ce:a6:9a:39:0a:3b:99:92:91:5b:41:26:42:b1:cc:
3c:e1:ce:4a:08:6b:22:24:38:7e:61:02:89:84:1b:
bb:1c:89:72:e4:52:73:b1:1d:4e:eb:5e:9d:9c:1b:
3c:db:1a:4b:7d:6d:c2:e9:ea:72:6c:05:d8:73:a9:
ca:ac:12:4e:4e:0c:ad:67:8d:84:98:a1:a8:1f:a0:
a6:a9:89:f2:d3:a6:16:91:82:74:b6:5d:02:81:fc:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:67:4A:34:C0:4B:0E:3D:DC:22:69:B2:A8:11:93:41:7E:4B:FA:3A
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/TmdKNMBLDj3cImmyqBGTQX5L-jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad44:3084::/48
Signature Algorithm: sha256WithRSAEncryption
7b:e5:49:8b:32:d6:61:d5:57:54:ee:5e:06:a3:4e:07:5f:67:
02:db:5f:99:89:62:a5:9d:fe:1f:75:ca:66:88:ab:f7:56:8b:
93:c1:61:9f:21:73:b7:ff:78:e7:22:76:1b:16:45:8b:14:45:
c5:a6:ac:f2:b5:97:d8:2e:e5:5f:5e:40:38:95:e2:96:d5:53:
01:9f:88:0a:9e:7c:98:75:53:d1:96:3e:df:d5:22:88:a8:69:
e9:37:a7:a2:1e:c9:30:54:e1:51:4f:2b:ea:b2:b9:32:b0:d9:
39:2e:39:de:d9:66:6d:24:85:91:83:7a:2b:b6:2b:ae:ec:cd:
6b:63:c4:b9:fa:5f:d5:e7:8c:05:5c:97:44:fd:d5:71:e1:e9:
fd:09:2b:ef:25:f1:83:b6:9b:3f:e2:4a:a5:ca:54:93:0a:7b:
27:e8:6f:05:c4:55:96:10:04:b7:63:75:8a:f5:d0:30:d1:74:
32:d2:f9:8a:4f:4c:66:45:d1:c1:25:60:90:d3:b5:e9:9a:64:
d8:f0:42:55:38:ac:0c:f1:fd:7b:9e:fb:fb:ee:08:4e:ec:05:
bb:c0:32:de:7b:85:50:57:92:65:8a:20:3e:ce:e7:6f:dd:3a:
14:c0:b1:bd:0c:d6:da:d5:de:8a:b8:30:14:b2:f3:14:de:f6:
8e:69:c7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:18:26 2025 by rpki-client