Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/AR0rKzKjv6fQrjvsfMgvnTZcxJA.roa
File: AR0rKzKjv6fQrjvsfMgvnTZcxJA.roa (raw, json)
Hash identifier: RbQGjys1SBNRDXY1HtQaDIG1cfz7SCVpdVIpgR3/0iE=
Subject key identifier: 01:1D:2B:2B:32:A3:BF:A7:D0:AE:3B:EC:7C:C8:2F:9D:36:5C:C4:90
Certificate issuer: /CN=46846557b9e42955163e516b02dc8e3ee3828114
Certificate serial: 018CC94D793FB4A0ACC9DBC77962FF307123
Authority key identifier: 46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/AR0rKzKjv6fQrjvsfMgvnTZcxJA.roa
Signing time: Tue 02 Jan 2024 08:32:26 +0000
ROA not before: Tue 02 Jan 2024 08:32:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205627
IP address blocks: 2a11:ac7::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:79:3f:b4:a0:ac:c9:db:c7:79:62:ff:30:71:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46846557b9e42955163e516b02dc8e3ee3828114
Validity
Not Before: Jan 2 08:32:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=011d2b2b32a3bfa7d0ae3bec7cc82f9d365cc490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:e3:b6:31:05:3b:5c:f3:e3:08:fd:a1:df:
6a:0a:ba:a6:53:56:ef:b8:22:26:13:54:aa:76:70:
9e:07:9d:c1:e9:e5:7a:cc:11:06:dd:00:fb:43:c1:
d4:fa:1d:0a:55:99:29:a6:c3:5a:9f:08:4e:a0:86:
b6:43:30:72:8d:54:e6:2f:88:d3:6b:82:4c:ee:a9:
a3:a2:18:05:d2:d8:9b:e5:e8:9b:7d:e9:28:1e:16:
bc:af:0b:7e:0f:d9:25:6e:75:69:1e:a8:fd:ef:31:
c9:74:89:d4:72:70:71:61:ca:c5:1f:4d:8c:9c:6d:
24:66:50:d2:29:75:00:06:87:16:f7:d4:6d:19:f8:
0a:3f:51:a7:7c:2f:4a:dc:d7:4f:7b:88:7f:1c:cf:
73:65:58:b2:33:ad:fa:7d:b0:86:fa:0b:f1:56:5c:
9d:47:b2:25:52:06:81:ea:a9:59:1e:2a:4e:c5:45:
42:d1:33:91:02:d1:6e:fd:74:2c:4e:6f:7d:54:c9:
40:6b:98:26:6d:5a:00:97:df:bb:b7:8d:3c:c7:9a:
50:0f:32:fb:25:f1:a1:7a:84:18:d8:44:85:94:08:
bb:1b:e4:1f:27:4a:c0:92:08:37:3c:b5:fb:84:5d:
b8:a8:92:89:d2:38:07:ba:07:b3:ec:d4:76:88:d2:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1D:2B:2B:32:A3:BF:A7:D0:AE:3B:EC:7C:C8:2F:9D:36:5C:C4:90
X509v3 Authority Key Identifier:
keyid:46:84:65:57:B9:E4:29:55:16:3E:51:6B:02:DC:8E:3E:E3:82:81:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/AR0rKzKjv6fQrjvsfMgvnTZcxJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/987c4e-789b-4c26-8ce5-abb222507f17/1/RoRlV7nkKVUWPlFrAtyOPuOCgRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:ac7::/40
Signature Algorithm: sha256WithRSAEncryption
5f:dd:ad:ea:fa:19:60:b3:60:15:a3:a9:f3:1b:2e:f8:03:72:
a5:88:5d:b3:05:c5:77:7b:7f:c8:ae:a9:6c:d4:8b:43:10:82:
48:3e:a5:4c:da:54:c1:6b:66:ad:e4:25:b6:6a:a8:c9:39:74:
50:82:c4:24:f5:fe:7d:15:b9:8a:64:fa:71:83:cb:1a:96:2b:
2a:24:4f:86:c1:ea:bb:a3:6a:8d:f1:c6:01:b2:51:38:dc:36:
fa:ee:95:84:f3:e9:86:e6:bf:f7:1d:de:df:80:55:a6:53:4a:
85:e2:2e:bb:22:d1:f3:4c:08:ae:26:07:96:d0:ea:a2:a5:49:
b7:a5:fd:26:03:6d:4f:18:09:33:8f:b8:82:26:8d:41:33:92:
b9:94:da:84:2b:6b:80:5f:38:68:12:26:37:62:a4:11:e0:4b:
cd:8b:b7:ca:a0:35:24:9d:7a:73:56:c6:91:f3:13:11:69:00:
0b:da:81:76:0c:1c:b3:97:b0:74:c5:64:1a:44:16:2b:be:c6:
59:34:c1:ea:39:c0:cf:1e:b0:71:db:ab:a3:0c:48:86:1e:d5:
ce:a3:20:1a:ee:1c:c5:6b:ed:82:85:36:b8:c4:33:49:76:52:
96:75:70:c4:49:c8:10:f2:30:e6:36:0c:f4:ae:9f:93:43:9e:
10:b6:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:33:32 2025 by rpki-client