Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/sjXcC3Kci3jsEq5YaiWbbFCnGtI.roa
File: sjXcC3Kci3jsEq5YaiWbbFCnGtI.roa (raw, json)
Hash identifier: 3WMlTH/IhRGlultdRrTInOu+CKlJhbo8pJ63+GWti8M=
Subject key identifier: B2:35:DC:0B:72:9C:8B:78:EC:12:AE:58:6A:25:9B:6C:50:A7:1A:D2
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC4245FDFE722801F8D6DFD9991E02AA7
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/sjXcC3Kci3jsEq5YaiWbbFCnGtI.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 2a0f:7803:fec0::/44 maxlen: 48
2a0f:7803:fe50::/44 maxlen: 48
Validation: Failed, certificate revoked on Sat 27 Apr 2024 15:39:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:5f:df:e7:22:80:1f:8d:6d:fd:99:91:e0:2a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b235dc0b729c8b78ec12ae586a259b6c50a71ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e5:f1:48:26:9c:0c:6e:87:3b:a7:df:63:3b:
79:2e:8c:fe:9b:29:ae:fe:44:3d:6a:ab:48:18:b6:
e4:8f:ef:42:93:87:db:3a:96:35:d1:0e:32:81:b9:
c9:2d:da:ac:5f:88:d2:2c:28:59:34:48:08:58:56:
cc:bc:63:ef:82:19:bf:4e:d9:24:54:d4:9a:85:64:
29:ad:dd:f1:95:67:78:26:f3:84:bb:f8:b8:ad:c7:
7c:1e:6d:c2:63:b1:08:c9:a1:b8:7b:46:b7:b0:d4:
0e:e5:16:ae:9e:63:95:ee:16:93:a2:c3:46:c6:ad:
59:81:4b:ea:c0:88:5c:c6:d7:d5:a4:87:da:55:b9:
a1:27:29:34:b7:6b:5f:89:c8:fc:2b:3d:6c:b8:43:
13:3d:61:3d:fa:aa:8d:91:d8:24:8d:02:f8:b4:c4:
7a:b3:6c:23:a6:41:d9:35:1b:b0:bf:06:db:7b:46:
e9:80:1f:5e:32:c3:89:11:ce:0a:10:02:ac:67:64:
f3:b2:1d:2b:84:4f:f8:bb:a3:c8:87:7e:63:64:6d:
69:45:24:91:6d:e2:bb:e6:48:53:57:8c:b5:2b:ff:
36:4d:b0:46:7d:03:87:97:42:fa:f5:05:43:0c:14:
41:d3:3c:f3:d5:33:fd:4c:9e:db:4d:82:64:bf:70:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:35:DC:0B:72:9C:8B:78:EC:12:AE:58:6A:25:9B:6C:50:A7:1A:D2
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/sjXcC3Kci3jsEq5YaiWbbFCnGtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fe50::/44
2a0f:7803:fec0::/44
Signature Algorithm: sha256WithRSAEncryption
9b:dc:8f:66:ee:c6:7d:3f:de:be:7c:a1:42:54:fd:05:5d:63:
e3:a7:0d:55:b0:36:d0:b5:20:9c:38:17:5b:84:08:f2:88:bb:
18:0c:3d:bf:82:51:6d:e6:2e:a9:8d:f9:45:be:df:d5:6d:6e:
2b:70:09:fb:ef:fb:50:47:9b:73:d2:7d:4a:47:ac:04:8a:2e:
fb:c9:e9:76:1a:51:44:36:85:e3:e5:d6:6d:8e:0d:38:aa:ce:
02:92:a0:85:51:cf:df:bd:68:c1:dc:0f:85:dc:03:f9:46:1e:
7f:21:bf:3b:ca:01:34:d6:f9:92:c5:ab:43:ae:2a:0a:30:bb:
c2:29:ef:c0:a5:aa:eb:3e:92:97:89:f2:aa:8e:f5:91:14:e8:
79:e4:dd:08:b0:93:a2:92:f7:d6:d2:b6:e7:0d:ba:96:12:3c:
65:1c:c8:13:d2:b6:87:dd:a0:a7:07:d3:4c:00:83:3d:bd:73:
f5:97:b2:13:00:0f:3d:c9:cf:6e:52:c4:cc:e8:c0:3d:e4:cd:
8e:f2:60:0c:97:f1:46:00:c6:3b:01:0d:8d:56:36:cb:ef:bc:
c0:aa:55:5f:a2:2c:30:da:08:22:dd:2e:0a:22:3e:75:ea:d6:
17:7d:ec:98:f7:7a:74:15:22:74:3a:d6:ef:f2:86:81:21:db:
7f:35:ae:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:46:24 2025 by rpki-client