Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/pUhLV5jj3coAxE3Ju7rywmRya5c.roa
File: pUhLV5jj3coAxE3Ju7rywmRya5c.roa (raw, json)
Hash identifier: kBOsEAO5A7FXXMfxoUuO7F5xQDeCNI1O9Pci+7Z8sp0=
Subject key identifier: A5:48:4B:57:98:E3:DD:CA:00:C4:4D:C9:BB:BA:F2:C2:64:72:6B:97
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 018CC56E11C366E53E1DF6921FFC91481968
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/pUhLV5jj3coAxE3Ju7rywmRya5c.roa
Signing time: Mon 01 Jan 2024 14:29:34 +0000
ROA not before: Mon 01 Jan 2024 14:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48136
IP address blocks: 2001:67c:c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:11:c3:66:e5:3e:1d:f6:92:1f:fc:91:48:19:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jan 1 14:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5484b5798e3ddca00c44dc9bbbaf2c264726b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:58:7e:c5:9a:95:85:3d:bf:2d:07:45:da:
70:3b:65:c4:5d:3f:d8:2d:ac:fc:00:11:39:3f:e3:
12:98:47:b3:e1:06:ef:95:e6:54:53:03:36:c3:94:
9e:10:02:71:73:a2:df:cc:a4:19:f4:b0:18:1a:fc:
7d:cd:5a:95:b9:11:e2:0b:2e:b4:77:70:81:de:ad:
13:22:85:74:83:39:05:3a:17:28:af:9f:15:b9:a4:
7a:ab:9c:e5:d2:6e:78:cd:00:db:f7:07:08:36:ad:
5d:8e:e1:0e:30:0f:be:9e:06:1a:fa:4b:cc:c0:2a:
6b:f4:c7:26:99:63:53:c9:f0:8b:3d:48:9c:95:a5:
70:cd:a1:50:31:6e:7a:23:52:9d:2e:5c:8d:51:2d:
2d:bb:b4:08:1c:f6:b8:07:ed:34:0d:a2:97:87:11:
06:92:d1:e3:97:7d:d8:22:61:79:4e:b1:58:13:f3:
53:5b:08:30:d8:3f:61:46:ed:82:6d:db:b6:6b:78:
81:42:a9:45:08:98:4b:2c:e8:48:e3:94:2c:ee:b1:
90:f0:f1:19:66:45:84:65:a4:e0:1c:11:69:af:ed:
ab:13:5b:7e:5d:f9:17:62:86:c5:d5:05:31:6a:8b:
2f:7d:55:bd:6d:9b:9d:d8:aa:9d:24:54:ac:57:7a:
d7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:48:4B:57:98:E3:DD:CA:00:C4:4D:C9:BB:BA:F2:C2:64:72:6B:97
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/pUhLV5jj3coAxE3Ju7rywmRya5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c::/48
Signature Algorithm: sha256WithRSAEncryption
44:eb:a6:7a:d3:cd:b9:88:11:a3:d6:db:4d:04:b2:38:4d:e4:
9b:44:f8:8e:a8:0a:7f:d6:a2:1e:5b:12:7a:4c:51:cb:2d:f8:
49:4b:0c:37:03:d8:fb:f9:0c:af:07:1d:ba:a8:71:5b:42:a8:
57:c4:b3:ae:9e:56:73:f4:36:fd:58:5a:32:84:7a:2f:98:cf:
d1:cb:ec:14:97:77:30:02:a3:88:60:59:63:f5:bc:61:e6:c8:
b7:7d:76:ad:f5:be:b6:23:9d:82:3e:c2:02:3c:9c:bd:2b:fb:
a6:c6:b7:99:f3:6c:66:1e:bc:75:4f:24:95:6c:7d:6f:41:35:
41:f3:56:d5:2a:6b:72:45:5d:f7:65:0f:4c:f6:20:fd:bf:c5:
ab:6c:1d:6f:f5:a7:30:2d:d3:cc:ac:a9:1f:a6:b6:a9:e6:b5:
af:ae:12:0e:0e:5d:15:5f:cd:97:f3:c8:94:21:e0:a2:a0:a7:
6c:28:31:32:90:84:1c:9e:41:08:20:bc:e7:19:d7:c6:0c:d3:
73:5a:33:4f:a9:22:51:9e:6c:13:94:42:07:df:93:e5:71:8c:
ea:35:d2:aa:8d:a5:88:fb:4d:87:c0:f5:c3:cc:57:fd:88:fc:
9a:56:8f:df:36:3a:2d:26:0b:54:bc:19:f1:69:28:a9:63:d2:
6e:2a:15:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:23:18 2025 by rpki-client