Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1MNKAEW1mn6gIxLYNHa7bfy7hVI.roa
File: 1MNKAEW1mn6gIxLYNHa7bfy7hVI.roa (raw, json)
Hash identifier: LT75HcHcde7pSCfu+DSZUkMfKaD21mDhvALFPfkCF30=
Subject key identifier: D4:C3:4A:00:45:B5:9A:7E:A0:23:12:D8:34:76:BB:6D:FC:BB:85:52
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0192413A3D4F00ABB262F6CECE8E7F596B96
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1MNKAEW1mn6gIxLYNHa7bfy7hVI.roa
Signing time: Mon 30 Sep 2024 04:39:48 +0000
ROA not before: Mon 30 Sep 2024 04:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3175
IP address blocks: 2a04:a5c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:3a:3d:4f:00:ab:b2:62:f6:ce:ce:8e:7f:59:6b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 30 04:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d4c34a0045b59a7ea02312d83476bb6dfcbb8552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:92:62:a0:f6:22:51:66:45:3f:9e:0e:07:
df:f7:1a:26:11:48:00:6e:54:dd:5c:8b:bf:3c:f7:
2c:f2:36:af:00:7f:ff:57:61:c2:d9:fa:13:c7:76:
3a:57:b9:69:bb:83:95:8b:8e:55:d2:bc:e1:89:fd:
4b:8a:65:1f:f2:a4:b0:92:b7:e8:22:ae:42:51:f0:
b1:95:03:9b:09:7c:75:0e:9a:da:a9:2f:8d:57:89:
16:37:9b:3d:a9:95:1c:42:ef:f9:62:2b:52:20:22:
9d:8d:01:b0:37:82:d9:2a:91:47:03:66:54:70:57:
e9:70:38:49:44:cf:35:4b:5d:05:5d:38:26:06:81:
a7:c3:ea:ca:5e:b7:b8:bd:7b:16:a1:3c:9e:96:fd:
5b:3d:98:fe:46:ad:c4:bb:b0:08:da:43:f4:1c:ed:
6c:57:92:c6:99:bf:9f:11:62:4d:e6:9f:c0:a1:44:
d7:9b:0b:67:7e:9d:14:06:8b:e6:29:c9:39:5e:1c:
79:ca:f5:82:57:20:a0:58:70:22:97:98:4e:7e:e9:
d7:a5:43:c7:d9:36:15:93:e7:a3:d7:93:59:84:b5:
98:4c:c2:6e:0e:98:ac:c7:dd:86:dd:f4:33:bb:e1:
94:3f:3e:74:47:1b:41:ea:ed:4f:76:f8:73:d8:a5:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C3:4A:00:45:B5:9A:7E:A0:23:12:D8:34:76:BB:6D:FC:BB:85:52
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/1MNKAEW1mn6gIxLYNHa7bfy7hVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a5c0::/29
Signature Algorithm: sha256WithRSAEncryption
ce:ed:8d:bd:66:55:db:88:11:2b:f4:dc:c9:22:b9:48:4d:f1:
5b:4a:59:48:59:7b:2b:5d:3f:0b:fa:f7:ae:e8:be:bc:d6:66:
13:a1:0b:52:c4:51:61:aa:b4:a0:d0:97:86:15:43:79:e2:44:
a2:1a:9e:18:89:0e:17:0f:e4:db:4a:f4:1a:e9:00:ee:25:ad:
d9:85:4e:08:36:c9:52:21:f1:a4:f7:74:53:e0:d2:78:e3:0f:
35:39:0a:dd:4b:3a:f8:8d:b5:d6:5f:33:09:b8:44:24:83:39:
e9:86:19:44:fb:7b:ee:c5:3c:43:97:88:1d:56:81:e7:e0:bb:
0b:de:4f:db:74:7e:53:b7:ea:f7:fb:13:da:e7:f0:40:54:6d:
52:ad:6f:2a:da:9f:0b:31:74:c5:20:0f:0c:39:95:bf:eb:fe:
f2:73:74:e1:f2:f9:2d:2f:58:53:5d:ee:63:13:a9:53:ab:17:
f6:cf:b1:73:91:c6:6c:cb:0e:f3:62:4e:09:5b:50:98:b8:17:
60:62:15:c3:c1:1a:c2:62:96:50:02:39:a9:58:e9:e4:17:0e:
ea:08:cd:fd:d9:de:43:85:0e:6a:3e:33:cd:9b:0e:66:54:ea:
b5:e5:e1:0c:74:0e:0e:34:ae:a2:c2:c4:e2:0d:a5:43:88:8f:
55:d1:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:00 2025 by rpki-client