Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/B224yzbsfhhU4NIRHqUyUu8cTEY.roa
File: B224yzbsfhhU4NIRHqUyUu8cTEY.roa (raw, json)
Hash identifier: vR9bcrLiFgfFK7ArPPZv6CiNldsqcSBHc2kCw3rT3Cc=
Subject key identifier: 07:6D:B8:CB:36:EC:7E:18:54:E0:D2:11:1E:A5:32:52:EF:1C:4C:46
Certificate issuer: /CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Certificate serial: 01923E1493524C48825434E85D674C7B7A2C
Authority key identifier: DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/B224yzbsfhhU4NIRHqUyUu8cTEY.roa
Signing time: Sun 29 Sep 2024 13:59:48 +0000
ROA not before: Sun 29 Sep 2024 13:59:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215230
IP address blocks: 2001:678:a30::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Nov 2024 19:46:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:14:93:52:4c:48:82:54:34:e8:5d:67:4c:7b:7a:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd8ae4d9ad863dda1401b490c28cff82d998e3b5
Validity
Not Before: Sep 29 13:59:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=076db8cb36ec7e1854e0d2111ea53252ef1c4c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:d8:c0:7c:8a:7a:a9:84:6b:28:38:63:67:
8b:42:72:92:1a:a0:21:d3:13:66:0f:70:76:8c:66:
b6:27:e5:2d:b4:b2:20:fd:4c:04:ea:4c:bf:dc:db:
a3:f8:2e:eb:fc:83:41:c2:71:d1:bf:42:c2:f6:b5:
0d:f6:92:7d:e3:b0:07:64:46:b6:cc:bf:e7:9a:c3:
55:14:85:61:2d:84:76:c1:fd:8c:7b:e9:7f:f1:03:
f9:7b:3f:7b:da:af:43:e4:22:86:17:96:bf:4b:f2:
16:be:54:d0:8e:29:04:1f:5c:0a:08:0c:fc:df:71:
92:4f:ef:a4:16:8d:d0:9b:54:c5:66:ba:45:0c:65:
0b:13:e4:12:81:ed:37:b5:aa:5f:ff:47:15:09:1d:
dc:58:83:c1:26:b3:1b:c8:35:b3:fd:ec:d5:8d:ab:
5a:83:0f:67:4a:1c:53:b7:19:f5:60:4d:2c:4f:74:
cd:14:cd:7a:86:98:89:d7:46:4f:2b:90:b0:3a:13:
61:12:3f:0f:c8:6b:d0:a8:f2:b1:da:2f:46:18:c3:
ca:ba:f9:37:83:4e:68:fb:39:81:cf:7c:7b:46:6e:
45:2c:fb:83:76:04:55:d6:ab:80:74:f2:77:e3:94:
da:fa:62:55:92:18:dc:62:b3:29:dd:6d:c1:8b:b6:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6D:B8:CB:36:EC:7E:18:54:E0:D2:11:1E:A5:32:52:EF:1C:4C:46
X509v3 Authority Key Identifier:
keyid:DD:8A:E4:D9:AD:86:3D:DA:14:01:B4:90:C2:8C:FF:82:D9:98:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Yrk2a2GPdoUAbSQwoz_gtmY47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/B224yzbsfhhU4NIRHqUyUu8cTEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/347d71-ff78-4b3a-a5db-4de9345c83bf/1/3Yrk2a2GPdoUAbSQwoz_gtmY47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:a30::/48
Signature Algorithm: sha256WithRSAEncryption
3f:ec:8c:dc:7d:ea:56:5d:da:d6:2b:0c:dc:4e:52:1f:c2:f7:
fa:f6:05:cd:0f:09:b0:9e:ac:e0:a2:33:e2:d1:d8:d6:6d:3b:
04:fe:9f:a5:4e:e2:2b:27:7c:4a:1e:b3:cf:ca:2c:e7:9d:89:
a7:65:d6:8e:b2:56:b1:9c:d6:2f:d5:1c:74:b3:52:af:b3:c7:
56:dc:19:71:55:3b:e7:5d:46:8c:34:89:8c:05:c3:fd:14:ca:
eb:2f:63:2f:0e:fd:f7:b9:80:e1:0f:3e:48:6c:e2:78:7e:ca:
88:07:75:e8:e7:0c:50:d7:1d:89:b1:80:9f:ce:58:af:96:80:
31:b0:ba:7f:72:8a:51:c8:97:8b:32:cf:d0:97:39:9a:c4:4a:
e4:ca:f1:c7:ec:6a:e9:4f:69:ae:a7:b6:d4:b1:d8:a2:32:98:
d7:f9:7b:df:d3:0e:2d:f7:96:59:ec:8d:e2:68:c3:fa:f4:47:
6f:c6:66:7b:a7:ba:28:69:5d:9b:b0:72:d7:01:6b:e9:e7:24:
98:41:c4:fd:6b:fc:46:bc:45:60:2e:b5:26:fb:3f:c6:b8:c2:
26:89:08:95:ef:a5:a1:b8:09:4d:dd:a2:c9:ea:22:04:f3:07:
5f:f4:95:c8:82:33:ad:87:a7:b4:3d:83:6e:5a:b2:a3:fb:3a:
7a:68:6b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:59:37 2025 by rpki-client