Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/E-Exf78Okb_nD1TcifsRypY-yOM.roa
File: E-Exf78Okb_nD1TcifsRypY-yOM.roa (raw, json)
Hash identifier: DfFFnegC57pUWLRM2PFyDIV7xiNhCl5zh2jDdvb0XHc=
Subject key identifier: 13:E1:31:7F:BF:0E:91:BF:E7:0F:54:DC:89:FB:11:CA:96:3E:C8:E3
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01942143EC7496E002CB43EA3AFB90A3499E
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/E-Exf78Okb_nD1TcifsRypY-yOM.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214526
IP address blocks: 2a05:9080:3::/48 maxlen: 48
2a05:9080:7::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 26 Jan 2025 16:39:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ec:74:96:e0:02:cb:43:ea:3a:fb:90:a3:49:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13e1317fbf0e91bfe70f54dc89fb11ca963ec8e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:93:da:6c:00:5b:ae:8c:15:6a:06:33:97:
17:0b:a2:e5:a0:46:e0:dd:69:71:42:26:15:e5:5b:
61:ad:a1:95:4f:1f:36:20:10:1b:9b:db:38:26:22:
32:4f:d3:14:85:48:50:42:4d:ee:d7:22:e7:a1:cc:
6f:04:1b:94:2c:b4:28:dd:b8:61:3a:68:6c:a8:e4:
a5:15:21:d7:55:5c:ab:cc:89:6f:47:5f:94:d9:80:
cc:33:87:23:57:78:7d:42:db:8c:5b:84:8e:bd:6e:
09:fe:be:8a:25:fb:b6:2b:f2:57:5c:f9:e7:15:1f:
f0:80:5e:d1:5f:ea:53:29:ec:c6:dd:cb:4e:89:36:
5a:8a:28:f2:b1:13:e9:41:ee:9d:3d:e9:99:0c:92:
b2:20:31:43:60:2b:6c:c1:8f:d4:6b:6a:24:21:8b:
46:56:80:04:d9:38:86:72:28:4d:fa:2f:3c:39:35:
4b:83:bb:d3:cb:51:66:95:70:aa:a7:b5:a2:33:c7:
70:29:3b:a6:0e:7d:58:3a:a6:8c:8e:29:cc:8e:d2:
8d:27:ab:3f:19:0c:ec:72:4f:52:ee:a5:52:77:8d:
b0:b1:33:e8:1b:b5:ab:8b:8a:9f:f8:52:dd:09:2e:
ac:30:84:71:02:f5:89:4b:ca:b4:fe:47:61:c1:08:
35:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E1:31:7F:BF:0E:91:BF:E7:0F:54:DC:89:FB:11:CA:96:3E:C8:E3
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/E-Exf78Okb_nD1TcifsRypY-yOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:3::/48
2a05:9080:7::/48
Signature Algorithm: sha256WithRSAEncryption
ae:6c:4d:32:d9:82:d1:e5:ae:1f:00:06:21:98:14:eb:1d:82:
5e:d6:93:bf:6d:d8:20:60:80:2d:71:ba:d7:89:75:86:94:21:
97:a8:69:1f:a4:ee:22:74:80:4a:00:92:91:8c:d7:80:98:0a:
c4:b0:8f:3c:fd:66:5b:af:f0:b0:f7:ca:8c:a5:d3:a0:0f:4f:
34:5a:c4:47:66:9d:03:a8:c0:74:28:ce:18:e8:60:44:4c:d6:
40:71:e4:a0:7b:b8:13:6b:7b:16:d0:b1:92:5f:d0:ba:7f:8c:
59:ce:bd:f0:b3:8d:c0:bc:6f:5f:34:84:71:96:9d:5e:02:92:
4b:19:01:e0:64:f1:56:82:59:65:ab:f5:db:65:d3:19:c4:71:
af:49:4a:10:72:31:22:46:b7:e3:d5:50:58:5f:89:3d:8c:cd:
37:8c:38:a0:27:92:e0:65:bf:e4:e2:84:a9:8a:f1:eb:a9:49:
ea:1a:94:4f:7f:c5:21:2a:ab:05:44:64:ec:d3:cb:11:69:b2:
05:aa:1a:d1:30:56:c0:0d:34:b8:66:bb:2a:e5:49:70:01:08:
72:e2:3c:91:3d:4c:c8:76:2c:52:3b:8b:5e:24:65:ad:1b:d6:
d7:ee:de:1c:16:4f:e4:74:58:c7:a3:14:e5:d7:e4:c4:b8:4a:
53:6f:a6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:59:33 2025 by rpki-client