Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/XMNsKr-miij4aH0i0PdjMVKWFTM.roa
File: XMNsKr-miij4aH0i0PdjMVKWFTM.roa (raw, json)
Hash identifier: KQAsCCXjxzsABJ0RuIfuvaUdf0doQBy61tmfEKoQjzo=
Subject key identifier: 5C:C3:6C:2A:BF:A6:8A:28:F8:68:7D:22:D0:F7:63:31:52:96:15:33
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067EFB60929DC878484326F76A67514
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/XMNsKr-miij4aH0i0PdjMVKWFTM.roa
Signing time: Wed 01 Jan 2025 05:47:49 +0000
ROA not before: Wed 01 Jan 2025 05:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61292
IP address blocks: 2a0e:1c80:1a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Jan 2025 13:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ef:b6:09:29:dc:87:84:84:32:6f:76:a6:75:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cc36c2abfa68a28f8687d22d0f7633152961533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:aa:08:54:61:85:6a:bb:d5:63:52:75:02:
5e:9b:7c:e0:78:5c:6a:a7:c9:54:07:0e:b2:b4:a9:
fd:d6:ba:88:ec:b0:08:b2:4b:4f:a7:7c:07:5a:06:
d7:cc:3d:ed:7b:c1:21:25:4f:33:30:92:3f:84:5e:
cf:83:a2:bc:f9:66:a7:99:a4:0b:ed:65:4d:d7:22:
79:fe:1f:5f:96:1d:09:39:ac:17:23:d6:10:d3:fc:
4a:64:65:ce:f0:39:83:9c:d0:5f:15:e3:75:af:bf:
5f:49:de:5c:c3:97:a2:4f:2f:9e:37:a2:bc:a5:2c:
d1:56:69:04:ae:b7:ce:d0:41:11:4f:b0:97:46:66:
13:8f:94:d7:fc:af:68:dc:36:de:27:16:6e:4b:78:
88:73:18:f2:a0:7d:85:2e:5a:73:e8:b0:cb:0e:76:
ab:c5:e6:f3:71:b0:c3:31:b4:30:04:50:4e:78:f7:
d3:63:cd:de:8d:18:98:c9:cd:de:ce:65:46:1e:95:
1f:f4:04:97:58:51:ef:7a:a3:8b:64:4e:1e:0a:49:
38:9a:6f:3e:7e:ee:59:10:21:3d:dc:9d:a8:be:a5:
6d:bb:49:79:11:1f:52:9c:b2:87:d7:92:ad:7e:e0:
8b:cb:f0:1b:7b:44:2d:12:3f:22:4a:24:93:16:2c:
fc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C3:6C:2A:BF:A6:8A:28:F8:68:7D:22:D0:F7:63:31:52:96:15:33
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/XMNsKr-miij4aH0i0PdjMVKWFTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:1a::/48
Signature Algorithm: sha256WithRSAEncryption
47:dc:42:fe:23:94:1d:5e:46:94:98:38:ef:c1:54:67:d6:09:
e8:31:34:cc:09:f0:89:92:df:7d:33:29:e8:00:f5:22:09:7d:
03:c3:10:e6:b7:57:97:cb:92:73:e3:85:bd:5b:71:0d:1f:21:
cf:38:ed:5f:cb:50:54:03:0d:a4:00:29:a8:ba:ad:21:90:c0:
25:2b:a0:0e:5a:a5:65:ed:ae:95:f8:ae:87:c8:eb:0c:86:40:
24:81:a5:a2:ab:ef:ee:1a:52:0a:65:d0:93:cf:78:2e:68:ba:
2b:d2:bb:f2:5c:4f:31:ee:a8:ce:55:13:98:c8:4d:99:2f:5e:
35:69:d3:39:a9:ee:7b:dc:8c:00:b4:72:dc:96:a4:3b:5c:86:
25:54:78:72:c6:65:02:22:04:ff:6b:90:a0:15:6e:07:e0:c3:
4c:41:83:8e:7f:84:06:63:3e:a4:3f:1a:e4:c9:b9:54:24:7a:
2b:43:de:27:14:f1:cd:03:f2:1d:46:d3:04:8c:17:a0:0d:58:
a4:f4:15:65:a6:3a:67:75:60:80:28:2b:ba:44:ea:cd:75:c5:
3f:b1:2c:b8:bf:1f:1b:64:7f:06:7d:9a:f3:91:75:08:54:4b:
90:5f:0f:88:ed:b4:eb:5d:c0:d7:41:44:b1:39:8e:ff:6a:e9:
50:34:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:57:49 2025 by rpki-client