Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KMw9RO8VE83AKA46hejCoTUdvF8.roa
File: KMw9RO8VE83AKA46hejCoTUdvF8.roa (raw, json)
Hash identifier: doWT4ZOCJNbUZmPRLHzaNHMk/uSDHfapP675fAAElw8=
Subject key identifier: 28:CC:3D:44:EF:15:13:CD:C0:28:0E:3A:85:E8:C2:A1:35:1D:BC:5F
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01942143ED871763CF45D1C2549346C26A25
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KMw9RO8VE83AKA46hejCoTUdvF8.roa
Signing time: Wed 01 Jan 2025 09:48:07 +0000
ROA not before: Wed 01 Jan 2025 09:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215350
IP address blocks: 2a05:9080:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Feb 2025 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:ed:87:17:63:cf:45:d1:c2:54:93:46:c2:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jan 1 09:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28cc3d44ef1513cdc0280e3a85e8c2a1351dbc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:39:4f:66:02:39:11:89:f5:e6:21:ce:7e:8e:
44:a8:f5:97:68:cb:99:d1:9c:4d:a5:36:79:af:13:
4c:f2:5b:51:49:f6:c1:86:65:4d:a1:61:c1:b1:f1:
2d:ee:c5:ef:2d:d8:dc:6a:be:ec:23:3b:f8:72:66:
e1:d0:30:67:2b:20:89:2d:6d:f5:ef:8d:2e:5f:45:
4f:eb:68:2b:a6:8e:98:57:95:81:47:53:ce:fc:e7:
8d:ac:39:04:38:f5:11:a7:a6:67:c7:f0:3a:a9:f5:
4a:a8:a4:e5:4f:7b:ce:6c:f5:fa:56:25:e6:dd:cd:
30:e9:7d:18:ea:ab:b0:62:a7:7b:f4:a0:8e:07:b9:
ec:cb:6b:87:6e:dc:8e:14:11:28:6a:92:eb:a8:0b:
93:7a:03:cd:48:0e:57:d7:04:09:0a:f5:4d:0d:ff:
f3:e9:24:a7:26:b5:e3:6f:77:0a:f8:68:76:e8:18:
36:2c:5e:4d:fa:f9:9a:15:b1:2d:6a:11:95:e3:22:
8a:41:b0:c4:34:1f:da:7b:39:58:05:6b:a4:61:3a:
16:2e:3e:62:7d:1d:be:db:15:5d:8b:6f:a0:31:93:
94:52:78:2f:3d:9e:c9:dd:ec:42:62:e8:63:d2:75:
f4:c5:fc:09:f3:95:65:6c:5e:69:9d:ac:5b:56:22:
e6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CC:3D:44:EF:15:13:CD:C0:28:0E:3A:85:E8:C2:A1:35:1D:BC:5F
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KMw9RO8VE83AKA46hejCoTUdvF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9080:1::/48
Signature Algorithm: sha256WithRSAEncryption
5f:6a:5d:83:06:5e:3c:e4:14:5c:94:c3:ce:54:02:2c:ce:58:
6d:cb:6e:f0:f9:ad:4b:6c:59:28:86:82:fd:9a:37:7a:9a:b7:
ed:74:1e:26:88:07:db:2c:95:27:ba:b4:78:53:57:90:3b:9d:
79:ff:7e:1d:12:32:54:da:6e:fb:a5:95:70:9d:17:c1:60:84:
c5:3b:91:00:8d:d9:36:43:1e:2d:e0:92:18:13:5b:f2:56:4a:
48:59:c8:5f:cc:67:0b:d7:86:7b:d3:14:0d:c9:17:3d:72:6a:
a9:f8:d0:ad:eb:71:5a:33:cb:7e:df:cc:a8:8b:e4:1c:cd:00:
53:12:27:b4:ce:dc:39:db:3b:3c:22:7a:e4:3a:49:ff:f6:cb:
bd:33:a8:c9:bd:70:ec:f2:b8:49:c0:80:65:f2:5a:1f:e8:79:
5e:69:16:08:a1:cd:14:28:ff:8e:66:1d:94:83:fb:e1:c8:81:
70:76:dd:69:cc:88:bc:56:86:97:bb:e1:be:60:b2:b0:71:04:
ed:7b:9b:c6:6b:21:e6:ea:93:a6:54:cf:a6:5d:a2:6d:88:45:
f9:5d:cf:62:cf:e7:c3:41:4c:0e:3c:71:a9:01:ea:cf:43:09:
9a:8e:5c:f9:b0:16:2d:e7:27:6b:8f:3a:27:1d:f7:f7:2a:89:
22:e7:1b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 08:58:51 2025 by rpki-client