Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/goRaJRnssZQKnLV6TfSDaw2UjAo.roa
File: goRaJRnssZQKnLV6TfSDaw2UjAo.roa (raw, json)
Hash identifier: 2HmO3WjrtYLeMS7kKmzyThx35Aa1gFuUf5Jqtg5C1wg=
Subject key identifier: 82:84:5A:25:19:EC:B1:94:0A:9C:B5:7A:4D:F4:83:6B:0D:94:8C:0A
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 019233B6760F68AA811D3C58DF75CFA9F1A5
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/goRaJRnssZQKnLV6TfSDaw2UjAo.roa
Signing time: Fri 27 Sep 2024 13:40:48 +0000
ROA not before: Fri 27 Sep 2024 13:40:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214610
IP address blocks: 2a0f:7803:f7f0::/44 maxlen: 48
2a0f:7803:f800::/44 maxlen: 48
2a0f:7803:f810::/44 maxlen: 48
2a0f:7803:f840::/44 maxlen: 48
2a0f:7803:f860::/44 maxlen: 48
2a0f:7803:f8b0::/44 maxlen: 48
2a0f:7803:f970::/44 maxlen: 48
Validation: Failed, certificate revoked on Thu 31 Oct 2024 15:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:b6:76:0f:68:aa:81:1d:3c:58:df:75:cf:a9:f1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Sep 27 13:40:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=82845a2519ecb1940a9cb57a4df4836b0d948c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:01:05:15:35:d0:d3:ca:e0:34:bd:23:89:bb:
18:2f:67:e6:fd:9d:b5:ca:f0:f0:92:19:19:20:e8:
57:50:f4:8a:2e:6b:7b:04:80:c8:2a:9c:4d:bd:f8:
c4:39:46:45:d6:56:47:ad:6a:33:f0:ca:5d:15:c4:
8b:22:05:89:e2:a8:3a:c6:40:27:62:28:55:6d:50:
8d:52:52:dd:c9:d2:8c:b5:8f:67:fe:60:0b:95:9d:
d2:6e:c7:d1:3d:f7:24:99:46:5a:60:88:35:23:87:
ae:04:5f:a1:9e:40:b7:4e:99:37:ea:52:84:9d:4e:
ea:6c:d5:d9:a5:8e:c5:35:b2:d1:fb:c0:2d:2d:eb:
2c:54:31:f0:c6:09:77:da:f6:98:5b:26:16:96:d4:
3e:99:58:14:d4:c1:cc:db:c4:24:68:ef:eb:d1:61:
85:c0:bb:39:f6:e9:76:d8:53:19:0d:5d:85:33:f2:
7f:b3:54:2a:9e:a8:4f:d3:90:b4:22:61:7b:67:79:
b7:e7:a0:9c:c0:39:33:6f:95:3c:5d:37:22:0a:93:
60:d6:df:d7:51:f7:5c:94:81:cd:14:9e:66:6b:cc:
a4:f5:a5:c6:77:86:65:81:97:aa:4d:dd:79:b9:97:
4e:d5:11:33:b0:76:5a:da:cd:be:f1:5d:9c:8f:82:
cc:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:84:5A:25:19:EC:B1:94:0A:9C:B5:7A:4D:F4:83:6B:0D:94:8C:0A
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/goRaJRnssZQKnLV6TfSDaw2UjAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:f7f0::-2a0f:7803:f81f:ffff:ffff:ffff:ffff:ffff
2a0f:7803:f840::/44
2a0f:7803:f860::/44
2a0f:7803:f8b0::/44
2a0f:7803:f970::/44
Signature Algorithm: sha256WithRSAEncryption
32:52:7d:3c:24:ef:f8:3d:f8:df:15:a1:5f:a0:02:af:ae:b3:
0b:2d:11:d3:77:c7:44:02:46:cb:48:a7:9d:91:a1:f9:10:fb:
8a:cd:9a:ed:dd:dd:e5:4d:b5:df:19:84:a4:93:00:73:2b:12:
e4:54:01:94:be:fa:0c:b0:b1:83:13:97:a0:24:ce:db:53:3f:
9d:ec:ab:fd:1c:76:6d:38:21:f0:8c:81:ba:ee:6d:c5:cb:23:
f9:62:d4:13:ec:38:aa:d0:7a:a6:74:b1:18:fe:9b:75:c6:6e:
4e:ce:b1:e5:56:d3:93:f3:18:97:a2:d4:17:93:4e:3a:09:97:
29:93:fc:a5:8d:d4:ef:3b:87:79:45:7e:8e:6b:56:a1:5b:5d:
f9:4f:f4:11:a4:70:f3:4d:7d:33:30:3a:4a:86:75:0c:5b:60:
18:ee:6f:dd:ed:e5:ee:47:91:ff:f7:a1:2e:03:4f:87:36:f9:
b0:46:c6:0b:ce:77:2f:75:de:7e:0b:7b:ef:97:aa:44:c2:31:
f0:13:1d:7e:46:e0:1d:7c:37:03:6a:55:d4:28:9f:b3:52:94:
e0:d8:78:bc:4d:83:17:55:d9:b9:f8:f6:8a:ac:56:b3:e9:11:
e0:35:6b:4c:88:23:43:18:37:e9:db:6c:53:b1:20:6b:f5:17:
49:70:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:02 2025 by rpki-client