Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5k9YO1evs9MbsiPv5Vpa5AN_h8Q.roa
File: 5k9YO1evs9MbsiPv5Vpa5AN_h8Q.roa (raw, json)
Hash identifier: 6aNnH7T+L3XAg+4qvN0jq7iK+Su/8UdhKJrF/Kgupm8=
Subject key identifier: E6:4F:58:3B:57:AF:B3:D3:1B:B2:23:EF:E5:5A:5A:E4:03:7F:87:C4
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01905DBCE4C27BC99B2FD6152BD7F04251A9
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5k9YO1evs9MbsiPv5Vpa5AN_h8Q.roa
Signing time: Fri 28 Jun 2024 07:26:18 +0000
ROA not before: Fri 28 Jun 2024 07:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214911
IP address blocks: 2a0f:7803:dd00::/40 maxlen: 48
Validation: Failed, certificate revoked on Fri 19 Jul 2024 09:35:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5d:bc:e4:c2:7b:c9:9b:2f:d6:15:2b:d7:f0:42:51:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 28 07:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e64f583b57afb3d31bb223efe55a5ae4037f87c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:3f:e2:0f:c5:2b:5d:0d:bd:a4:ef:89:a4:
60:10:d9:a5:26:90:be:5d:f5:40:1e:cf:06:ff:02:
2c:69:6f:29:cf:d3:9b:cd:e8:7a:5a:6c:6c:5d:fa:
68:80:3a:b3:7c:62:e4:35:8f:09:35:05:82:2c:30:
75:59:18:bd:d0:7e:fe:b3:bf:55:44:8c:2c:96:c6:
99:07:c3:86:64:c4:cf:84:12:03:43:d1:45:03:4b:
01:71:ab:72:66:e0:6b:91:eb:40:a0:01:bd:cd:3d:
3d:b9:a6:03:33:bb:02:5f:a9:09:ac:04:ee:1b:0c:
88:60:95:46:14:20:a5:ef:71:08:9d:9a:28:9d:97:
1a:05:19:00:b6:8d:bc:d3:c7:91:ab:42:59:c4:4e:
c1:ad:de:d8:cf:4c:23:fc:e8:df:8f:38:41:91:22:
dd:f1:9f:4c:7f:d3:2e:2e:29:fc:a2:27:09:a3:db:
51:63:da:98:95:09:0b:20:5c:0a:ea:6b:10:66:c3:
eb:a6:60:d2:e9:e5:38:58:12:2c:b9:38:be:33:a5:
15:e1:e1:cc:58:a3:d7:9d:92:17:95:c8:37:8f:c4:
8e:66:ec:94:c9:21:84:d2:c1:85:5b:64:55:26:da:
56:62:26:d7:69:39:16:58:81:47:fe:bb:e6:3f:a6:
40:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4F:58:3B:57:AF:B3:D3:1B:B2:23:EF:E5:5A:5A:E4:03:7F:87:C4
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/5k9YO1evs9MbsiPv5Vpa5AN_h8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:dd00::/40
Signature Algorithm: sha256WithRSAEncryption
0f:fa:49:e0:4f:6c:ae:df:ae:45:53:c9:5c:2b:b3:fe:ec:9f:
17:86:31:ee:fe:e6:ea:70:7d:57:09:04:6a:76:64:43:82:2a:
f8:9b:d8:99:2c:e2:88:ef:e0:ec:34:4f:03:36:6f:54:b9:69:
f4:a5:72:93:d0:87:98:c4:74:37:42:bc:67:4a:cf:7a:32:6d:
5a:b7:e8:82:d6:cc:e6:47:c6:21:85:00:a8:13:19:c0:b3:42:
f6:f1:b6:f9:bf:1a:fb:2d:40:e5:d4:f2:2a:e2:d5:27:4b:a2:
34:cc:7d:45:55:15:c6:da:db:e1:37:24:ec:ea:2f:47:e4:1f:
cd:ad:fe:41:b8:52:75:3e:aa:66:52:cf:81:91:6b:a9:c5:49:
59:6d:a9:c8:ca:65:1c:51:40:0a:60:54:41:e0:eb:0b:b6:da:
6c:cc:88:98:9a:cd:17:b3:43:59:28:6d:b7:05:1d:7d:05:f5:
a2:31:dc:a4:b6:0a:4f:56:4c:01:58:b8:da:e2:01:a2:ad:a6:
2d:86:0f:f5:73:10:56:e3:0b:56:7e:8a:db:0d:ec:e4:5a:e3:
f4:6e:84:6a:fe:a7:06:81:02:b4:bb:6c:7f:12:19:d6:09:52:
70:79:48:af:ec:8c:97:0c:bb:6f:84:c7:e7:f5:b6:8a:da:e5:
f4:71:b0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:18 2025 by rpki-client