Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/IYp8WWDFOrUi8X4uRas7Z3w7gtk.roa
File: IYp8WWDFOrUi8X4uRas7Z3w7gtk.roa (raw, json)
Hash identifier: UW8dHMjx54MU1Ct+F+I+umXxbChf2x/n55g6IyG4mB4=
Subject key identifier: 21:8A:7C:59:60:C5:3A:B5:22:F1:7E:2E:45:AB:3B:67:7C:3B:82:D9
Certificate issuer: /CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Certificate serial: 018DF672E612DCA2DACA619694CE71573329
Authority key identifier: 5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/IYp8WWDFOrUi8X4uRas7Z3w7gtk.roa
Signing time: Thu 29 Feb 2024 19:59:01 +0000
ROA not before: Thu 29 Feb 2024 19:59:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215398
IP address blocks: 2001:67c:e1c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 24 Jun 2024 13:10:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f6:72:e6:12:dc:a2:da:ca:61:96:94:ce:71:57:33:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a5c7c08d74901b7b810937ec63e85563d36786a
Validity
Not Before: Feb 29 19:59:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=218a7c5960c53ab522f17e2e45ab3b677c3b82d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f5:2b:4b:c7:b2:4e:57:38:bf:5e:73:64:46:
96:55:55:10:4a:ca:98:bc:a8:00:9a:68:b4:b4:ac:
79:8a:9e:77:fd:b8:02:0c:bf:45:96:90:52:a4:6d:
a7:4e:62:58:7b:6d:2b:aa:68:7f:3d:34:ff:61:0c:
d2:9a:70:e9:2a:02:8b:f7:b7:89:da:b8:ed:9d:66:
68:2c:5b:ea:03:c0:43:40:32:69:5d:a5:47:f3:7a:
f2:33:a4:01:bd:af:9d:e8:3d:47:e2:24:08:8e:ac:
46:6c:3e:01:58:67:e6:16:8c:bd:60:6a:57:71:8f:
60:4e:ea:8d:6a:7a:57:f4:18:0f:41:c8:bd:57:03:
4c:2f:6c:90:1e:bf:88:04:cb:79:a6:bd:c5:61:52:
55:1d:7b:78:f8:2e:cf:54:96:6d:10:11:9c:b1:24:
97:e4:47:6c:64:2a:28:96:88:e6:76:44:1b:00:af:
e0:af:cc:0a:86:19:1e:50:da:0b:fa:6d:74:bd:87:
eb:b0:e8:c6:8a:50:c8:3b:56:b8:70:e2:a2:2a:a8:
21:28:c5:cb:9f:39:c0:6e:d3:d3:00:15:20:4e:04:
78:37:9d:7b:a7:71:b4:cd:8d:b3:d8:a3:2b:c8:c3:
d7:a5:83:7a:fa:f2:92:37:2e:0c:0b:0d:d1:41:2d:
33:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8A:7C:59:60:C5:3A:B5:22:F1:7E:2E:45:AB:3B:67:7C:3B:82:D9
X509v3 Authority Key Identifier:
keyid:5A:5C:7C:08:D7:49:01:B7:B8:10:93:7E:C6:3E:85:56:3D:36:78:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wlx8CNdJAbe4EJN-xj6FVj02eGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/IYp8WWDFOrUi8X4uRas7Z3w7gtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/73805b-9bff-4d04-bdc4-1a5ba3bb70ab/1/Wlx8CNdJAbe4EJN-xj6FVj02eGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e1c::/48
Signature Algorithm: sha256WithRSAEncryption
9d:2c:66:3c:fb:d5:5c:5c:e3:3b:10:3a:cf:a2:37:4c:ab:fc:
4c:47:55:f5:d2:5b:18:2c:22:7d:f7:6d:74:12:72:30:27:19:
cf:ae:5c:c2:64:65:3f:66:a1:0e:79:b8:00:42:9e:f7:d9:2c:
6c:81:27:87:d2:91:4f:c7:33:5a:72:35:f2:42:95:7f:ae:67:
fa:9a:cd:92:b0:5e:15:29:05:17:91:c0:b4:9c:5a:2f:71:a0:
a7:56:c4:95:a0:56:23:84:15:0b:3d:71:09:06:a2:93:73:0a:
85:7a:c8:7d:0c:6a:f2:9a:b5:79:4a:3b:07:cb:b7:7c:e3:33:
57:e6:0c:14:0c:32:db:10:20:d4:76:10:66:7c:23:1c:fa:81:
aa:17:f3:2a:f8:6e:e6:b4:4c:e6:75:b2:a0:19:a7:bc:4b:fe:
1a:67:f4:45:03:45:e0:e3:7f:bb:8b:70:f5:95:bb:55:ac:0f:
06:72:a1:5e:84:e8:e2:fa:44:3c:44:87:88:8a:8e:65:46:14:
b0:c2:98:7a:42:52:1a:2b:e1:0d:1a:d1:c4:d2:89:df:e5:43:
40:01:69:de:72:f4:fa:8b:27:a1:21:75:24:07:3d:80:d4:1f:
24:68:c5:8f:37:eb:7a:6d:be:63:02:fa:c7:32:0d:20:57:0d:
7c:ee:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:08:32 2025 by rpki-client