Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/99ljxxswRRcWZzXl1ZguyqBy8Qk.roa
File: 99ljxxswRRcWZzXl1ZguyqBy8Qk.roa (raw, json)
Hash identifier: 2ajyjaZ0WiDiWa3Ct5XavYK5uxxRQ/vmaZxbYlsNcfk=
Subject key identifier: F7:D9:63:C7:1B:30:45:17:16:67:35:E5:D5:98:2E:CA:A0:72:F1:09
Certificate issuer: /CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Certificate serial: 01937322F0FC733663DD69544189885A3253
Authority key identifier: 8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/99ljxxswRRcWZzXl1ZguyqBy8Qk.roa
Signing time: Thu 28 Nov 2024 14:18:09 +0000
ROA not before: Thu 28 Nov 2024 14:18:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47263
IP address blocks: 2a09:9340:1800::/37 maxlen: 37
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:22:f0:fc:73:36:63:dd:69:54:41:89:88:5a:32:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8daf61f6608f9a9eac14b18224854807bcdc1324
Validity
Not Before: Nov 28 14:18:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7d963c71b304517166735e5d5982ecaa072f109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d2:80:15:43:f9:0b:da:53:d4:87:13:ff:8c:
b6:81:b1:e3:3b:99:5f:a7:ad:91:4f:5b:9e:c9:e5:
16:f8:d2:1f:93:da:a2:e9:a0:c0:4e:5d:94:37:28:
a3:7d:98:f7:b5:1e:bb:8c:b4:b8:cb:b7:7b:a6:52:
3b:11:5e:12:10:46:ac:5c:1a:c7:b1:38:dd:10:4e:
96:6c:40:f3:b3:8f:e5:f3:31:3a:73:9b:e2:74:30:
ec:a8:77:ca:94:24:ab:6e:20:99:b7:f5:94:07:be:
69:5b:83:71:5d:6e:72:a2:3b:33:92:ff:5d:f7:0a:
6e:5d:31:82:e1:74:b0:1b:1f:cc:3f:1c:c6:64:3a:
42:44:df:20:f1:a8:af:31:f9:83:59:5f:55:56:e2:
1d:db:eb:4e:0e:3f:3f:24:76:85:67:60:50:5b:ed:
ec:bb:77:11:ed:95:25:c5:19:27:fb:29:af:be:49:
ef:ea:b8:1a:42:91:27:24:dc:b7:d0:af:1d:e5:0c:
31:c9:e0:b0:50:ab:59:b2:d5:33:0b:73:f1:fa:71:
32:6a:73:ce:85:9f:22:cf:ba:3a:5a:09:fe:30:ff:
a6:84:5c:22:ea:66:22:3c:a7:30:67:4a:77:4a:03:
49:a5:bb:47:f5:e9:03:cb:5b:59:56:22:7d:13:44:
da:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D9:63:C7:1B:30:45:17:16:67:35:E5:D5:98:2E:CA:A0:72:F1:09
X509v3 Authority Key Identifier:
keyid:8D:AF:61:F6:60:8F:9A:9E:AC:14:B1:82:24:85:48:07:BC:DC:13:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/99ljxxswRRcWZzXl1ZguyqBy8Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/50f935-d675-4089-aae5-fb24be75a3f4/1/ja9h9mCPmp6sFLGCJIVIB7zcEyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9340:1800::/37
Signature Algorithm: sha256WithRSAEncryption
7e:d0:fd:0f:1d:ed:16:05:95:e5:41:e4:0b:38:bf:65:6f:a2:
e4:20:22:22:c1:e5:b0:f2:bb:5f:7f:59:d4:75:00:71:2f:10:
55:46:bd:5b:bb:f8:ed:b8:3b:a5:8b:ab:b0:04:c6:93:53:9e:
e7:2e:06:59:83:48:74:70:63:cc:84:a2:1e:83:79:6a:9b:6a:
58:82:72:af:0e:da:a5:25:46:6e:93:79:a7:12:1d:63:68:30:
60:22:0b:d9:48:79:54:c8:8d:75:bf:95:ae:44:f0:e0:39:85:
67:f9:e5:2f:e7:02:76:da:30:13:f4:08:50:7c:94:63:93:0d:
aa:61:9b:f4:a8:a7:89:ce:aa:6e:20:04:86:79:43:07:1c:48:
ff:67:45:ac:24:eb:36:ff:64:e5:0d:08:24:a1:f9:9e:2a:b5:
d2:ae:a2:8f:a3:f2:e2:e5:b3:8d:3e:79:2d:9c:73:12:4c:f3:
0f:cc:5d:a7:45:db:d3:5b:f7:9e:de:42:63:6c:f6:b5:8e:f4:
29:90:e3:f7:e5:d9:1b:e9:e5:8d:a1:0a:af:38:2f:08:74:0d:
d8:2a:7a:d7:e0:21:5e:97:ac:6a:90:9b:dd:53:13:63:17:ef:
c9:bb:00:1b:01:56:d8:c6:3e:57:fc:0d:56:7c:da:98:a9:39:
24:e5:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:22:56 2025 by rpki-client