Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/OBptCDujhrFn2SrCcEwy97BPYtY.roa
File: OBptCDujhrFn2SrCcEwy97BPYtY.roa (raw, json)
Hash identifier: C9FAoMOfl33Y5YMYZlPSULjykOtMmVezf3moKM1AAMg=
Subject key identifier: 38:1A:6D:08:3B:A3:86:B1:67:D9:2A:C2:70:4C:32:F7:B0:4F:62:D6
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067F015D1275A0EBC8F69B928AA5794
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/OBptCDujhrFn2SrCcEwy97BPYtY.roa
Signing time: Wed 01 Jan 2025 05:47:50 +0000
ROA not before: Wed 01 Jan 2025 05:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400587
IP address blocks: 2a0e:1c80:17::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 22 Mar 2025 19:32:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f0:15:d1:27:5a:0e:bc:8f:69:b9:28:aa:57:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=381a6d083ba386b167d92ac2704c32f7b04f62d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:92:34:98:d5:66:49:c1:7f:9f:12:d9:09:14:
52:bb:98:7e:cf:b7:9e:6e:c8:d9:a5:4e:b9:ec:23:
98:c8:e3:66:81:a8:6c:82:82:24:90:c5:be:12:e4:
d6:25:d1:70:06:9b:bf:c0:c0:ae:3b:71:09:8d:2f:
d3:ab:1c:3f:06:c6:17:73:eb:e8:a9:d7:20:60:93:
b3:af:94:03:59:9d:86:43:72:8a:06:11:d9:92:1a:
6e:81:c8:ac:df:0d:ec:6d:07:9b:62:6e:ab:ff:a5:
4b:34:fb:51:7f:ca:c7:19:b4:8c:53:e4:80:70:d1:
3f:7c:72:20:cb:70:7a:af:bd:e5:c8:9e:ae:2e:21:
e5:0b:71:09:a3:62:7c:9c:8d:83:c6:76:bd:b1:73:
a0:70:57:6b:5b:1d:2f:c2:0a:ef:8f:59:ca:75:1b:
23:32:22:24:03:58:d5:e2:78:2f:44:fe:59:51:41:
fc:b2:c0:7c:e6:42:46:0e:20:6c:70:85:8d:4c:5b:
ba:fa:fd:2c:e0:7f:37:83:5a:f8:44:96:a9:7f:da:
60:d6:c6:16:ff:82:d9:bc:4b:49:9e:06:aa:7d:92:
3e:6c:7c:a8:ba:2f:9f:b5:73:f9:6d:ed:51:19:f7:
f6:f5:5b:90:95:0f:bb:66:28:1f:40:08:6e:39:f9:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1A:6D:08:3B:A3:86:B1:67:D9:2A:C2:70:4C:32:F7:B0:4F:62:D6
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/OBptCDujhrFn2SrCcEwy97BPYtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:17::/48
Signature Algorithm: sha256WithRSAEncryption
2b:2d:71:c1:fc:1d:96:5e:4c:0a:30:3f:27:e5:81:da:2a:98:
b4:b5:84:0e:0a:e8:9a:07:7a:4e:a4:b5:8e:c1:8e:eb:bb:0c:
75:f5:a7:ad:fd:c6:78:ab:b3:55:eb:64:71:56:4e:35:8f:d8:
d0:f9:31:f5:56:08:38:2b:6a:30:f2:f3:2d:24:93:7f:14:66:
bb:98:fd:08:e8:3e:04:2f:d9:39:39:75:85:64:cd:60:97:d9:
32:a3:05:0c:6b:2d:58:dc:bf:51:83:eb:77:49:05:f8:55:ad:
8f:7d:bc:d0:f8:30:d1:ac:f6:90:ba:9c:c0:85:de:5b:a4:ed:
b3:3c:75:72:ab:65:fc:38:f4:2b:98:ec:a4:78:f3:76:d5:42:
34:48:5d:4b:58:44:60:4a:ad:3f:96:73:27:f4:f8:af:26:52:
e4:01:aa:d2:07:50:a2:23:e9:d2:8b:7c:7b:50:50:ea:8f:d7:
f4:c5:23:e3:f8:90:27:7d:13:39:7c:2e:35:12:fd:7f:e9:1b:
f6:ed:a6:13:0f:f8:64:1d:97:d8:ca:b2:de:51:ff:6c:a0:68:
ce:ca:25:52:40:e4:3a:59:9d:1f:5f:14:0d:a6:39:09:e9:44:
fa:42:34:24:30:2d:3e:b5:cd:ce:36:d5:35:4d:8f:01:a4:76:
5b:4f:4c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:14:12 2025 by rpki-client