Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/oWh13R0F6SiWew9yZxD1QnMt0cI.roa
File: oWh13R0F6SiWew9yZxD1QnMt0cI.roa (raw, json)
Hash identifier: Eh0eIAvxGIo1+sut3ODEw8SEHMcMaQCbE2pc7sq/oOo=
Subject key identifier: A1:68:75:DD:1D:05:E9:28:96:7B:0F:72:67:10:F5:42:73:2D:D1:C2
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 018CC493445D03C63B6682D4CE747DB53DC1
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/oWh13R0F6SiWew9yZxD1QnMt0cI.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216291
IP address blocks: 2a13:cc87:fc00::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:47:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:44:5d:03:c6:3b:66:82:d4:ce:74:7d:b5:3d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a16875dd1d05e928967b0f726710f542732dd1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:03:8a:bb:30:06:5f:4d:d2:bc:2a:7c:26:5a:
8a:21:94:2f:48:6f:5c:8b:38:c1:bd:96:66:74:c0:
b6:5c:4f:3b:f0:60:d8:67:75:57:b2:17:1f:4e:4a:
dd:eb:38:c2:06:af:16:9f:b0:7b:07:7b:d8:92:6c:
ce:78:70:b3:e2:48:64:fb:41:46:ed:b8:4d:dc:35:
ff:89:0c:a8:58:44:5f:1a:76:ea:2a:0f:75:9f:58:
5e:a6:79:3c:ed:b9:37:63:e9:09:ff:cb:d7:1b:e1:
54:74:39:a3:23:14:05:bf:e0:69:2e:9c:8e:09:ae:
6e:fe:37:fb:0d:99:c3:48:f2:ed:2b:d1:ed:28:c2:
3e:c8:45:2e:ff:7d:fc:60:6c:0c:d5:6e:27:f5:43:
c4:0a:4e:fc:eb:95:e9:fc:44:d0:a3:f5:98:d0:2a:
de:a6:4a:68:17:45:0f:9d:52:c5:29:17:21:2c:0b:
d3:77:3b:1d:2b:d7:54:ee:91:16:57:f9:cc:69:f9:
b0:3b:20:66:78:4f:fe:5b:1d:c3:30:f1:0f:66:2e:
d0:fd:f4:0b:21:2a:52:5b:7a:b0:b0:5e:09:c1:c0:
b3:11:5b:59:ff:ed:43:a7:c0:90:22:a9:69:cd:34:
bc:47:2d:e7:fa:98:0e:4c:27:1d:ea:43:53:da:51:
33:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:75:DD:1D:05:E9:28:96:7B:0F:72:67:10:F5:42:73:2D:D1:C2
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/oWh13R0F6SiWew9yZxD1QnMt0cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:fc00::/48
Signature Algorithm: sha256WithRSAEncryption
37:86:f7:b4:9b:5b:ad:15:d8:b1:ef:73:8a:e5:56:ab:a3:20:
80:3b:fc:a9:ab:97:b6:7d:a3:c7:7c:c5:ca:99:de:0f:76:08:
65:ee:7a:86:a4:1e:3f:0b:65:fa:c5:ac:41:5f:0a:dd:f7:d0:
e8:1f:a7:41:13:be:06:29:99:ff:df:14:a1:4d:ca:3f:4a:11:
c9:40:4c:a2:60:b7:14:7f:56:0d:47:ef:54:f6:77:5f:b3:f2:
30:88:86:6e:a9:2f:d9:8e:27:6a:6d:86:42:67:c9:9c:96:1f:
0c:2a:c7:6d:bc:da:83:4a:e4:df:0a:38:61:3e:76:8b:4d:d0:
92:69:aa:8a:7e:ad:63:45:dc:52:74:7a:3e:e4:82:5d:e5:dc:
d8:18:f7:1e:1f:5d:2a:17:f8:79:ff:2b:1d:7f:8e:82:73:e0:
dc:59:5d:d6:5d:b9:d6:58:dc:7d:3a:f1:d3:20:ef:2b:32:60:
22:c8:9f:7e:5e:26:4a:3d:d5:e5:6a:8f:d6:ee:69:fb:36:f4:
d4:49:9d:61:8a:23:76:91:b6:09:b6:46:c7:b0:8f:a5:20:30:
55:6e:ce:f0:70:58:dc:14:bd:08:7a:45:b3:18:e1:57:97:b9:
90:d5:47:34:0e:17:aa:71:35:05:39:6c:5e:cd:18:f9:d4:3f:
3a:45:f6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:05 2025 by rpki-client