Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cvhQ4qmG5FAnAkcMsJMUBkLhAXQ.roa
File: cvhQ4qmG5FAnAkcMsJMUBkLhAXQ.roa (raw, json)
Hash identifier: QDRB6HWlwCrgco/n6mgOcZGJW8/O5SU2QIV2J3mgOEg=
Subject key identifier: 72:F8:50:E2:A9:86:E4:50:27:02:47:0C:B0:93:14:06:42:E1:01:74
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64ADEA00FD53022AA6A438897B896F4
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cvhQ4qmG5FAnAkcMsJMUBkLhAXQ.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51058
IP address blocks: 2a01:360:99::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:de:a0:0f:d5:30:22:aa:6a:43:88:97:b8:96:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72f850e2a986e4502702470cb093140642e10174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:eb:72:50:be:cb:3c:5a:5e:36:4a:54:7c:
96:d3:8b:4c:a5:77:f1:3a:7a:57:38:c6:86:72:eb:
a5:9b:04:9e:29:0d:b9:f8:e3:70:fd:2c:7c:ea:d8:
1f:14:31:e2:d1:fb:08:be:19:32:9b:a4:e3:25:56:
da:33:0b:f6:39:98:1a:c9:2e:14:ab:b4:4f:b4:cd:
d7:20:b4:21:83:87:f3:d5:a4:87:e6:db:98:e2:64:
cd:3d:c3:bd:1c:02:19:18:29:c5:53:d8:d7:c0:10:
d3:4a:2f:92:40:c6:61:1c:a2:a6:1f:04:f5:07:19:
54:1c:a4:85:83:81:ce:53:c5:a8:21:1f:c3:74:5a:
d8:ed:c7:21:12:85:35:6c:81:b2:08:c0:25:04:7b:
be:cf:de:02:1a:c2:81:51:d6:30:df:9b:e7:fe:e3:
4f:9c:f8:0d:1f:d5:ab:d1:9d:4a:04:ad:98:30:28:
d6:c0:b5:47:9e:2e:61:5e:9a:e2:d4:bd:5f:9c:f9:
d7:1c:5f:f6:37:45:62:ec:79:de:11:8a:fb:c7:64:
db:cd:f3:51:40:2e:95:1e:03:50:b9:cb:40:af:60:
db:af:c2:e7:8c:d9:5e:2a:6c:18:3e:02:c0:74:ed:
92:1c:54:60:05:c4:af:fd:1d:96:b9:9c:d4:57:c2:
ab:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F8:50:E2:A9:86:E4:50:27:02:47:0C:B0:93:14:06:42:E1:01:74
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/cvhQ4qmG5FAnAkcMsJMUBkLhAXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:360:99::/48
Signature Algorithm: sha256WithRSAEncryption
a9:0b:4e:c2:22:1e:e4:1d:3e:b2:a7:b8:51:32:04:a2:ca:50:
4c:e5:be:00:6f:99:5e:27:a5:80:7b:e5:a9:95:ac:ee:57:af:
73:3d:3a:23:ca:b3:51:16:4a:bf:03:4d:64:1e:9f:86:a9:37:
03:cc:e2:6e:32:1d:f5:fd:41:56:2e:9b:db:03:a4:36:e2:5c:
ee:96:d0:2e:02:5a:ac:2b:79:44:cb:66:2d:48:a8:d8:3b:5b:
d7:ec:a6:90:b5:11:32:9c:2a:40:e7:0f:ed:a1:70:03:d6:5c:
78:5b:60:e2:1a:a5:49:fb:d4:7d:51:37:9b:38:fa:96:a2:44:
ff:25:a2:c5:ab:4c:ad:ab:5a:4d:24:43:23:29:ad:85:cb:f8:
f6:a2:89:22:70:82:4b:c1:a0:e3:1e:f1:bc:29:91:81:1c:6a:
c6:e4:1e:f2:67:b1:25:f7:93:b2:59:d1:a4:b9:d3:26:86:6f:
0f:89:26:1c:46:49:c1:2c:35:6b:b3:37:1e:25:20:a6:2b:be:
68:2d:ee:51:44:6d:f9:44:d4:91:bf:89:19:25:84:3e:d7:85:
f3:c4:a6:16:27:8a:5c:92:8c:e5:c5:07:8e:55:c9:8e:78:68:
49:4e:f6:a6:f2:3c:df:c3:98:61:97:6f:a5:80:2a:a3:88:ad:
35:5f:9c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:19 2025 by rpki-client