Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/yucAOUa7e_8wWY2k7JtukAvA8g8.roa
File: yucAOUa7e_8wWY2k7JtukAvA8g8.roa (raw, json)
Hash identifier: GjFnfVkf5ZugosecZXWKqVhsih5sUf74FxfuhEKRKYI=
Subject key identifier: CA:E7:00:39:46:BB:7B:FF:30:59:8D:A4:EC:9B:6E:90:0B:C0:F2:0F
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 01942067EC5629D152DE7F4B78691D902CFB
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/yucAOUa7e_8wWY2k7JtukAvA8g8.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6206
IP address blocks: 2a0e:1c80:4::/48 maxlen: 48
2a0e:1c80:c::/48 maxlen: 48
2a0e:1c80:d::/48 maxlen: 48
2a0e:1c80:1b::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 18 Jan 2025 14:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ec:56:29:d1:52:de:7f:4b:78:69:1d:90:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cae7003946bb7bff30598da4ec9b6e900bc0f20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a6:6f:6f:fe:43:23:af:af:eb:49:ed:9d:9f:
55:91:6d:6e:48:fd:fd:f2:61:92:52:6f:7a:9c:64:
a2:86:b8:03:4b:0d:09:aa:8c:52:53:5d:d5:d1:b7:
eb:0f:d1:36:4b:2a:08:60:96:cd:b2:c9:de:53:fa:
d4:8f:62:3d:85:66:42:3e:32:d0:87:2e:ae:07:e6:
ba:6f:8d:99:15:8b:5a:4a:8d:41:22:df:0d:e3:7d:
ec:77:ab:c0:e8:b3:e4:4d:c8:b8:82:1b:d6:fa:14:
fd:5f:fc:3e:44:8f:fd:33:ad:e3:06:2f:1b:4f:cd:
a2:59:76:1d:07:51:4e:e3:27:ad:e3:1f:d4:90:4b:
fb:ba:32:60:30:1a:2e:78:35:9d:bc:43:ff:34:a9:
af:28:42:4c:9e:a6:58:13:b2:57:ec:95:bd:61:a8:
30:9e:cd:41:db:8e:4c:58:a7:cb:f8:04:17:44:c9:
01:6c:bc:69:b9:65:25:d8:7c:7c:2a:3f:e9:cc:4c:
e7:f3:c7:29:a7:4f:31:73:61:8e:b3:43:bf:ff:eb:
fd:d6:ed:f1:18:26:f4:99:35:44:d0:f1:7b:b9:a0:
19:8a:e2:4d:96:0a:d5:97:29:06:9c:b4:2d:dc:3d:
73:75:2d:fb:36:31:98:e9:78:51:1b:36:9b:ec:26:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E7:00:39:46:BB:7B:FF:30:59:8D:A4:EC:9B:6E:90:0B:C0:F2:0F
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/yucAOUa7e_8wWY2k7JtukAvA8g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:4::/48
2a0e:1c80:c::/47
2a0e:1c80:1b::/48
Signature Algorithm: sha256WithRSAEncryption
0e:2a:ea:c2:e3:44:fc:fb:45:ed:38:13:a2:11:3c:5f:a4:5a:
75:83:dc:c0:35:b0:62:99:3c:15:e6:41:ab:79:10:21:ec:7b:
a6:dd:5e:4a:21:f0:18:16:45:1b:13:81:05:ab:5e:ad:86:f7:
dc:b2:dd:1b:77:dc:e7:4a:f3:54:1a:1b:77:75:49:e2:cf:ef:
3a:00:a0:76:f4:72:85:96:e2:e2:d9:3d:34:a1:32:ef:88:d2:
5c:c2:ac:03:38:0e:c4:c5:68:f2:1f:9e:db:6e:fc:4f:d2:3b:
df:8d:53:10:16:43:a9:f7:c4:0c:b6:0b:4d:fe:0d:17:76:3e:
dc:c8:db:93:3c:ac:d5:2f:69:74:ba:c8:aa:00:5f:b0:12:00:
6e:05:00:0c:bb:7e:5e:dd:82:91:49:d0:3b:d4:33:fb:f5:a9:
ad:22:7d:53:f7:92:b4:49:5a:4a:75:77:31:8e:d3:56:e7:58:
7c:72:62:2a:fc:3d:c5:38:b9:49:fb:86:6d:a9:35:af:c8:35:
5b:b4:63:0a:71:99:11:11:93:3d:e9:7c:5d:eb:c2:81:93:34:
70:f8:5e:79:75:27:6d:54:f4:b9:cc:22:59:5c:d2:3f:cc:ac:
da:b8:f1:9b:a8:7d:6b:16:18:1c:b5:fe:7d:f6:3b:24:9b:56:
43:e1:a5:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:43:35 2025 by rpki-client