Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/t3yXzjd025yauyjN_jC3F4SfoE0.roa
File: t3yXzjd025yauyjN_jC3F4SfoE0.roa (raw, json)
Hash identifier: uyqOISpDT//PCet4M8pLefyGO+W/8j4vWbEb7yZ+ugQ=
Subject key identifier: B7:7C:97:CE:37:74:DB:9C:9A:BB:28:CD:FE:30:B7:17:84:9F:A0:4D
Certificate issuer: /CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Certificate serial: 018CC348A9D675D31377540C530D03DD7033
Authority key identifier: F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/t3yXzjd025yauyjN_jC3F4SfoE0.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60391
IP address blocks: 2001:67c:12ac::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a9:d6:75:d3:13:77:54:0c:53:0d:03:dd:70:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9cb9094cb7cda138bd010013eb9ecc331903041
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b77c97ce3774db9c9abb28cdfe30b717849fa04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:62:e7:09:82:67:26:21:bb:26:a7:bf:b2:dd:
ea:fc:86:a1:c5:da:17:d7:60:62:a1:62:9d:41:00:
5d:4d:38:90:57:d7:11:39:3c:ea:f3:66:6c:63:ba:
43:5a:cb:71:3c:f3:90:11:18:c9:0a:4c:55:3e:61:
7f:12:ee:74:e4:e2:67:7f:f7:5e:36:a7:96:ce:e6:
e8:7d:8f:c2:86:c8:d3:88:a2:81:30:90:5e:07:f2:
4b:7c:40:0c:a1:3c:02:e6:55:59:a2:1a:b6:0a:b2:
c5:c5:1f:0f:04:e5:01:bd:99:d7:66:79:bb:b1:99:
11:5e:3b:ae:9d:13:0b:1d:6a:a5:b2:b1:58:44:83:
00:0c:9a:0f:2a:5c:5b:9b:e0:62:9e:d9:3d:12:60:
02:af:30:b3:32:5e:b5:79:a0:3b:b9:94:53:0a:5a:
8f:cd:88:d7:2f:8c:9c:c9:fc:af:2f:1c:c8:54:f1:
ed:2b:60:61:10:29:63:57:0b:9c:0c:4e:c8:9a:72:
2e:45:2c:37:54:79:ca:47:0e:15:91:b1:df:ff:ac:
29:d8:2c:85:f6:94:5e:f3:0f:4c:3a:1c:4a:8b:92:
71:98:3a:b0:9b:54:bb:00:26:0c:3c:73:a3:4c:77:
78:0b:c9:52:be:86:54:00:5e:9b:be:06:6b:17:bc:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:7C:97:CE:37:74:DB:9C:9A:BB:28:CD:FE:30:B7:17:84:9F:A0:4D
X509v3 Authority Key Identifier:
keyid:F9:CB:90:94:CB:7C:DA:13:8B:D0:10:01:3E:B9:EC:C3:31:90:30:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cuQlMt82hOL0BABPrnswzGQMEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/t3yXzjd025yauyjN_jC3F4SfoE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/624546-4ac8-4dbe-8697-aace878bab65/1/1-cuQlMt82hOL0BABPrnswzGQMEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12ac::/48
Signature Algorithm: sha256WithRSAEncryption
ca:91:a1:1d:51:0c:9c:6a:66:10:b5:e9:d0:68:ca:cc:6e:84:
47:c8:d5:a1:f9:d2:b3:d9:f4:ce:d7:11:f1:2c:27:bc:c0:20:
f6:2d:9c:8d:a0:bf:f7:17:e5:e1:3d:2a:dc:e9:68:5e:69:a9:
d4:e6:61:de:6a:07:70:ee:3a:87:39:e2:c3:ea:c8:8e:5b:b9:
43:45:ec:63:ff:22:a3:49:83:be:96:a5:0a:24:20:2d:04:c7:
69:1b:02:92:a4:e3:00:17:84:4c:2d:96:fa:04:52:eb:a9:cc:
9f:6b:92:f6:d2:0b:81:1a:c2:ec:7a:e6:c1:13:6d:83:af:8a:
17:23:c0:1a:41:38:11:d6:a2:e0:04:7e:9a:ad:ce:8a:fe:e5:
63:a3:30:82:bb:5e:44:af:e0:7a:de:e8:e2:d6:5e:69:d4:0f:
d8:36:01:6e:82:d3:00:05:79:fc:13:70:db:67:9f:bc:bf:67:
e2:24:86:eb:3a:86:8d:38:ca:e7:73:99:ae:2e:07:1e:88:03:
64:7f:e4:b4:e9:79:93:28:e2:39:77:87:c3:d4:1f:45:f1:82:
e2:79:52:66:30:d1:0b:fd:24:bc:6d:c9:b8:08:1f:c8:e2:66:
73:42:61:a2:0f:05:9e:c2:68:a0:c3:e3:91:95:4a:4e:8a:ac:
8b:33:84:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:26 2025 by rpki-client