Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/P83KpIzw7qhAsnkSt3MygxRwobI.roa
File: P83KpIzw7qhAsnkSt3MygxRwobI.roa (raw, json)
Hash identifier: ZY6QhVgoJdF9PoqwZH8BqgfrWM4p+mk4x5HGnW/Dmz4=
Subject key identifier: 3F:CD:CA:A4:8C:F0:EE:A8:40:B2:79:12:B7:73:32:83:14:70:A1:B2
Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702
Certificate serial: 018CC3B671C612C4C8F27E8AF5F1FD25B1A0
Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/P83KpIzw7qhAsnkSt3MygxRwobI.roa
Signing time: Mon 01 Jan 2024 06:29:22 +0000
ROA not before: Mon 01 Jan 2024 06:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62336
IP address blocks: 141.78.128.0/18 maxlen: 18
2a02:2761::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 10 May 2024 09:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:71:c6:12:c4:c8:f2:7e:8a:f5:f1:fd:25:b1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702
Validity
Not Before: Jan 1 06:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fcdcaa48cf0eea840b27912b77332831470a1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:c4:0a:76:76:7d:44:14:56:11:e0:b4:68:
89:19:da:d9:8e:75:2c:c6:46:1d:d2:19:1f:bf:21:
1d:89:d5:a7:57:69:cf:10:3d:e8:4b:bf:6d:cb:a9:
f4:c7:b8:75:a8:5d:2f:44:c1:f1:dc:d4:6b:b8:6f:
f6:4e:90:cd:37:6e:d8:90:7e:92:3c:db:d0:f5:46:
7a:f4:82:4c:d9:b2:f9:cc:59:ae:0a:11:74:96:7f:
4c:63:50:b3:82:b7:26:97:4c:64:0d:aa:9e:2e:32:
90:40:75:fe:3b:b5:13:bf:03:1d:b0:58:b9:4a:b7:
28:43:f4:1d:b7:ff:e3:96:46:9a:44:10:d4:72:ed:
c5:d1:f4:36:7a:7b:ea:6d:0e:1c:5e:05:07:0c:c5:
f7:7e:ff:00:d5:35:db:a3:6e:73:3e:31:08:6c:6a:
97:b2:34:b0:ad:e7:85:74:cc:96:2a:f0:ad:a1:5e:
d5:da:e3:71:40:a6:ac:b9:03:39:6f:3f:23:09:cb:
52:da:ff:33:f4:01:52:35:dc:f9:54:2c:c2:c9:9b:
28:f6:6d:39:a6:5c:d4:10:70:bf:3d:48:e2:5d:fa:
0b:cc:1b:4d:c6:0e:3a:42:7e:9e:ec:30:7e:83:db:
5b:e1:d3:4c:69:f1:0b:3e:f5:c0:b0:50:ee:06:e6:
b2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CD:CA:A4:8C:F0:EE:A8:40:B2:79:12:B7:73:32:83:14:70:A1:B2
X509v3 Authority Key Identifier:
keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/P83KpIzw7qhAsnkSt3MygxRwobI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.78.128.0/18
IPv6:
2a02:2761::/32
Signature Algorithm: sha256WithRSAEncryption
67:46:7b:1c:ad:5f:67:c8:78:55:ee:58:3b:26:2f:cc:12:91:
e6:e7:c4:da:d5:2e:ea:af:aa:7a:fa:29:fa:2f:20:3a:f4:49:
20:2a:35:55:8d:de:0a:ea:0b:d6:7c:01:fc:17:b7:9f:c3:37:
c1:f1:14:7c:06:c9:a4:58:3f:d2:fc:b0:00:41:20:8d:3b:4a:
a5:72:80:61:f0:43:71:a7:a8:b7:d9:42:66:84:53:ee:35:d9:
c9:f2:27:cd:78:6a:47:32:96:9c:c2:b8:c7:b2:39:9c:94:01:
ea:7d:fe:46:29:b0:da:61:42:2d:a5:bc:5c:7e:04:06:f1:3c:
d8:af:88:88:95:bb:a9:18:4c:82:26:f1:27:ad:1d:92:11:dc:
95:b7:22:dc:c1:03:c0:e2:64:e1:09:b4:62:04:80:f1:f4:e4:
12:d1:e0:3c:bc:7a:ac:30:77:fb:f5:48:fa:8a:dd:60:85:27:
44:21:ae:ec:dc:4d:86:a1:25:60:5e:3d:e2:81:78:7b:32:f7:
35:17:a0:29:40:68:a8:b6:54:ca:78:0a:d5:36:d7:cd:21:af:
1d:85:60:97:83:73:dc:79:f5:3d:a5:7e:aa:cd:df:b5:b3:ef:
c4:6c:87:3a:1d:ca:d3:b8:42:57:d7:52:c7:ad:13:64:a9:69:
b7:ce:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:20 2025 by rpki-client