Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/p7_futvfceDzh2VnDotTueDQrf4.roa
File: p7_futvfceDzh2VnDotTueDQrf4.roa (raw, json)
Hash identifier: IqJ8Y05+Z6NeZ3nehfNN9VVnLGLxf/VazJzPTP6iKTQ=
Subject key identifier: A7:BF:DF:BA:DB:DF:71:E0:F3:87:65:67:0E:8B:53:B9:E0:D0:AD:FE
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 018CC801D04EC4E645D7597D69CF465274C9
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/p7_futvfceDzh2VnDotTueDQrf4.roa
Signing time: Tue 02 Jan 2024 02:30:11 +0000
ROA not before: Tue 02 Jan 2024 02:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19541
IP address blocks: 2a00:ad40:100::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d0:4e:c4:e6:45:d7:59:7d:69:cf:46:52:74:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 02:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7bfdfbadbdf71e0f38765670e8b53b9e0d0adfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:6f:cb:06:76:c9:a3:82:d8:c6:6a:e0:22:
1e:38:a5:b5:1e:94:c4:75:f5:ca:2e:70:52:0b:84:
2e:4a:15:78:77:2d:6c:6b:0a:75:11:df:ca:e9:ab:
80:44:06:e4:f7:75:96:e6:db:f5:fb:57:66:00:ba:
a2:cb:c4:c7:24:42:70:50:d4:84:25:e2:58:79:59:
d9:a8:20:34:bd:7d:ff:91:dd:73:78:03:6d:b5:0d:
2c:85:5c:64:0d:54:14:c7:b3:08:cb:5b:e3:a0:54:
c0:02:5f:00:b2:98:64:ec:e4:65:2d:ee:f3:15:5f:
2a:4c:19:fd:20:08:2b:00:10:77:fc:f6:e8:62:2e:
22:ca:d5:31:d0:17:57:d9:46:46:c8:69:26:81:17:
88:1b:79:a9:79:ec:69:8c:b9:a8:b6:8d:f3:a5:53:
de:a7:16:b8:ac:21:e8:9d:30:24:cc:1e:ea:c7:a1:
af:9e:14:e8:f1:0b:eb:31:61:2f:c8:02:02:67:cf:
35:80:06:ae:68:66:84:72:12:01:cb:98:c7:6f:58:
e2:98:fb:c9:7f:eb:14:5c:b4:2c:b2:d4:d9:88:69:
2d:04:2d:f8:c5:87:ee:db:58:96:62:62:94:99:7a:
0a:73:7c:19:99:4e:29:8f:0d:98:8d:a1:ef:96:1a:
90:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:DF:BA:DB:DF:71:E0:F3:87:65:67:0E:8B:53:B9:E0:D0:AD:FE
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/p7_futvfceDzh2VnDotTueDQrf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:100::/40
Signature Algorithm: sha256WithRSAEncryption
84:96:49:b7:d3:79:5c:c8:f2:8b:3c:b1:94:da:d8:e3:92:2a:
1b:98:de:99:27:7f:74:b8:06:fe:3f:50:6b:ed:f1:a4:56:4d:
0b:02:f8:e4:d2:5d:56:fa:72:d9:0a:01:79:f5:97:cc:fc:58:
55:cc:51:50:2c:53:f5:04:97:c3:0b:8c:fc:15:c2:19:7a:ac:
5e:2b:75:64:4e:b2:f3:a6:e5:7b:16:27:da:a6:3d:46:80:25:
ff:c5:86:bd:ec:5b:12:e3:92:4f:87:4f:7a:02:e1:aa:7d:5c:
d8:cb:c0:a8:79:8c:7c:12:82:c3:a1:f5:5a:03:8a:6d:36:a6:
36:03:7e:f7:39:32:eb:db:fc:6d:76:e5:ec:43:f4:bf:7c:7b:
f3:76:5c:e2:0e:a4:54:bb:4e:79:93:b9:e4:94:e4:a2:7b:08:
5f:ae:2e:6b:c7:08:e3:1f:b1:87:09:c1:0b:b4:55:7c:5e:a4:
5a:df:c0:60:5a:aa:9a:d4:cb:ce:57:90:f4:c6:40:03:f5:71:
e0:49:06:ba:fd:46:ae:6a:76:71:aa:99:08:20:6c:87:24:d3:
f8:69:3d:e5:6f:3b:ae:9d:10:2e:7b:df:33:cb:88:e7:bc:4c:
15:00:d4:c1:5d:6c:f1:c2:6d:82:87:d8:dc:62:3b:7c:0e:01:
ed:13:76:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 06:53:25 2025 by rpki-client