Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/eiq79IQk8gSjLlM3Zm32cWgsQp8.roa
File: eiq79IQk8gSjLlM3Zm32cWgsQp8.roa (raw, json)
Hash identifier: nLqS9aRbA0HzxyJMcBQdGXlgGdIg9Kc1q+Wg52SGebY=
Subject key identifier: 7A:2A:BB:F4:84:24:F2:04:A3:2E:53:37:66:6D:F6:71:68:2C:42:9F
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 01902B73E7A120D455D1F2B04E4CC7C07FB9
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/eiq79IQk8gSjLlM3Zm32cWgsQp8.roa
Signing time: Tue 18 Jun 2024 13:05:34 +0000
ROA not before: Tue 18 Jun 2024 13:05:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214704
IP address blocks: 2a0f:7803:fa20::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Jun 2024 16:58:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2b:73:e7:a1:20:d4:55:d1:f2:b0:4e:4c:c7:c0:7f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jun 18 13:05:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a2abbf48424f204a32e5337666df671682c429f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5b:e5:bd:8e:1d:8e:16:67:81:53:e9:82:76:
75:20:18:6e:38:40:ed:27:7e:cd:2d:10:bb:db:cf:
3f:16:aa:91:97:32:c0:74:78:dd:0b:5c:1c:9c:8c:
79:b6:98:7e:b1:03:a2:6e:9d:fe:fd:97:52:0c:9c:
db:0f:40:d8:99:76:eb:75:fb:d6:d6:d8:f7:22:c6:
e5:f8:0d:7d:7b:63:98:68:4b:b5:e8:21:c9:4f:7b:
d4:10:65:bb:6c:62:5c:76:f0:7e:e6:7b:e3:7f:48:
a6:fc:0e:49:6a:fb:3b:77:c5:19:fb:24:69:02:48:
45:d6:c9:99:91:32:53:b8:4f:fe:5e:55:bc:50:3c:
dc:02:36:09:01:76:84:c5:90:a3:71:be:38:8e:4a:
28:51:3e:01:c6:8b:0c:91:43:a0:51:00:0a:43:f3:
cc:b8:6b:12:b2:80:24:4d:76:29:8f:5c:2b:83:0b:
41:2f:23:f7:56:d2:9f:45:1c:60:21:98:71:f0:29:
ab:5d:80:97:43:5e:d7:07:18:a9:e3:78:74:c2:69:
60:01:98:00:50:a3:18:19:c8:10:bf:af:cb:26:1c:
dc:7e:14:4f:ea:f3:35:8a:85:f3:81:ab:80:fc:58:
61:5a:ed:8b:8e:2c:7c:36:2b:e2:e5:38:c0:4e:42:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:BB:F4:84:24:F2:04:A3:2E:53:37:66:6D:F6:71:68:2C:42:9F
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/eiq79IQk8gSjLlM3Zm32cWgsQp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fa20::/44
Signature Algorithm: sha256WithRSAEncryption
95:65:9b:68:41:0e:3f:ca:f0:5e:42:b3:ea:7a:8c:2d:13:72:
3f:cf:c0:cd:d0:4a:b2:af:ef:03:f0:b8:b2:97:dd:3d:a8:46:
69:e8:ed:2d:d1:70:d6:68:76:e3:69:e6:d2:ec:4a:01:01:2c:
a7:1c:dd:d0:d4:10:51:98:07:9a:7a:a8:c9:5e:d5:8b:0e:17:
d8:95:c1:0c:af:18:b2:4d:4c:77:3c:93:29:92:1b:bd:c3:5d:
d3:4f:ce:2c:22:e6:ca:8b:0c:00:d9:3f:d4:84:5f:75:57:86:
4b:cb:79:3c:23:fb:e1:1f:ca:37:19:c2:65:80:96:b0:32:48:
70:1e:0e:8f:78:55:78:e2:fd:9f:0a:20:01:58:5f:53:41:78:
2b:83:af:d4:95:af:e1:95:52:54:52:68:c6:e7:af:b1:bd:80:
68:4b:c1:ff:76:ea:3c:86:5b:a4:81:28:b2:ce:74:33:5c:45:
73:18:88:7d:37:d7:ae:f1:d5:57:e4:8a:e3:95:54:2e:4d:a7:
6f:e5:6a:bd:3a:98:3d:ef:39:55:64:b8:93:cf:27:5f:b8:e1:
07:25:35:be:f1:fd:16:af:c2:03:ab:f8:b0:ad:a1:82:4c:8f:
8b:75:ed:70:a5:c3:ed:30:bc:a8:e9:16:d2:99:eb:fe:7c:67:
22:80:7c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:00 2025 by rpki-client