Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/yDCivTiZaFFNaNgkQzKCTMRwnG4.roa
File: yDCivTiZaFFNaNgkQzKCTMRwnG4.roa (raw, json)
Hash identifier: CPP9Bw7T19lZEe93xuXGpdPBQWTVUSBo48IwlJQGblo=
Subject key identifier: C8:30:A2:BD:38:99:68:51:4D:68:D8:24:43:32:82:4C:C4:70:9C:6E
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 019464BE29348831EE1D673FECB26BACB80C
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/yDCivTiZaFFNaNgkQzKCTMRwnG4.roa
Signing time: Tue 14 Jan 2025 12:16:11 +0000
ROA not before: Tue 14 Jan 2025 12:16:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59980
IP address blocks: 2001:678:930::/48 maxlen: 96
Validation: Failed, certificate revoked on Thu 16 Jan 2025 12:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:64:be:29:34:88:31:ee:1d:67:3f:ec:b2:6b:ac:b8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jan 14 12:16:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c830a2bd389968514d68d8244332824cc4709c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:ef:c3:59:27:e4:0d:49:df:78:86:b4:c0:
09:b7:e6:cc:af:4a:91:6d:9d:9c:79:cf:d6:9e:35:
39:b9:78:72:ed:80:9f:a2:61:0e:08:91:ba:3a:31:
c3:24:23:37:f0:9c:ad:47:1a:fb:04:2a:29:c6:25:
91:9b:12:69:d2:cc:2a:c6:54:18:08:46:93:24:0e:
98:bd:e0:fd:4f:29:63:74:e0:41:c9:74:c7:2f:9e:
cc:bf:58:36:a1:14:d1:ee:78:e9:f4:95:c3:37:2d:
f0:3f:3f:5b:ce:db:22:f9:6d:6a:33:8c:b2:50:5f:
a4:ef:13:d7:58:12:b0:d7:1f:e3:c5:c2:bc:ce:4c:
61:0f:4b:af:c1:3a:16:9d:98:13:5e:83:91:43:b6:
7a:0b:ad:9c:52:44:48:c3:54:1a:81:e3:5c:36:2a:
7d:e3:23:e8:19:a6:e0:6e:67:31:50:42:3b:d2:9e:
6a:02:76:9d:06:0f:95:6d:84:70:7f:ff:dc:91:cc:
0c:78:c4:34:74:4e:68:7e:40:79:1a:29:91:f0:dc:
ec:ce:3e:ce:d0:3b:19:d3:d1:93:2e:bc:5b:98:8f:
57:7a:b0:fe:8a:9f:41:06:0f:f0:0a:02:0f:c2:19:
e0:c2:aa:ee:ce:94:91:4f:2b:8c:b3:45:47:4e:ba:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:30:A2:BD:38:99:68:51:4D:68:D8:24:43:32:82:4C:C4:70:9C:6E
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/yDCivTiZaFFNaNgkQzKCTMRwnG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:930::/48
Signature Algorithm: sha256WithRSAEncryption
78:37:71:ae:9c:51:69:44:04:28:c5:59:34:7f:8b:33:06:9e:
07:dc:76:cc:86:da:d2:a8:9a:db:24:19:1b:b4:20:80:f9:2d:
7b:df:9f:a8:d5:90:c7:36:f8:fe:f0:8e:3b:87:f3:9d:bd:ee:
41:bd:24:d2:40:f7:19:cd:8f:04:36:e5:0d:42:b1:8a:4e:1c:
ee:b1:ca:61:9f:5d:27:bf:80:a8:de:7a:60:a6:76:cb:5c:18:
17:ae:8f:6a:02:9c:3d:b5:9e:28:dd:a4:f2:d9:7c:1f:dc:dc:
18:89:d7:ec:9b:34:73:7a:c9:32:b7:ba:c0:35:13:17:90:85:
ae:22:67:46:a3:05:17:9e:6a:07:d2:a0:00:2a:01:a1:d8:5e:
94:cd:3b:a0:ed:bf:a7:12:90:d0:a4:76:c9:81:b1:a4:4e:e9:
22:a0:f7:c0:fd:7e:c6:14:78:f8:5a:26:1e:42:29:56:e2:ac:
97:78:31:73:7a:2b:03:72:ad:82:6b:81:a4:f4:72:b5:9f:b8:
08:f0:10:71:b9:af:86:a5:c2:66:34:36:f6:6e:51:11:d7:30:
8f:7f:2c:a9:8c:98:b6:54:5b:8e:18:e0:67:42:82:e6:32:f4:
fb:0e:7e:40:05:52:4f:a8:ac:59:53:d9:22:a6:25:6e:ce:b8:
91:b2:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:10:02 2025 by rpki-client