Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/V1OMtLI2FxarEAfIUjrW1ruxHyg.roa
File: V1OMtLI2FxarEAfIUjrW1ruxHyg.roa (raw, json)
Hash identifier: LsygrrHrz17RYL3uOqbm9JOLSsCjiY4z6xeFafYFAEk=
Subject key identifier: 57:53:8C:B4:B2:36:17:16:AB:10:07:C8:52:3A:D6:D6:BB:B1:1F:28
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B55F00ADECBE6E4810A062D41797BC
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/V1OMtLI2FxarEAfIUjrW1ruxHyg.roa
Signing time: Thu 02 Jan 2025 15:49:45 +0000
ROA not before: Thu 02 Jan 2025 15:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 2a11:4b41::/32 maxlen: 32
2a12:a340::/32 maxlen: 32
2a12:c304::/30 maxlen: 30
2a13:8580::/29 maxlen: 29
2a13:8580::/32 maxlen: 32
2a13:93c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 03:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:5f:00:ad:ec:be:6e:48:10:a0:62:d4:17:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57538cb4b2361716ab1007c8523ad6d6bbb11f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:58:ce:d7:00:e2:a3:82:05:15:78:f1:0b:
fb:82:87:6a:3f:2d:0e:0b:31:9d:e4:b2:3f:17:39:
58:5a:ae:7b:8a:3a:d0:f2:ad:69:bf:a0:d0:48:b7:
96:4c:78:92:0b:86:10:17:fe:d4:62:99:69:27:5e:
6e:4a:13:7a:26:48:34:95:7d:80:4e:c0:e5:a9:02:
cf:c3:7e:b0:79:53:bc:17:34:51:06:fc:31:f1:65:
bf:e4:24:7a:58:71:be:6a:f8:4f:47:ba:91:8e:11:
83:73:fc:31:ab:1b:c7:10:41:b9:ab:bb:ce:36:05:
81:89:78:c7:2c:ca:a6:c2:d4:5d:8a:dd:73:10:b4:
33:24:a8:25:5c:be:74:c0:5f:9d:00:bb:57:84:3e:
9e:02:66:7e:70:7a:0c:59:8b:95:e5:b5:c9:92:71:
67:58:07:11:07:41:7d:79:ab:82:0b:4a:32:e2:08:
6e:ea:80:ea:91:49:b3:c3:37:c5:d8:59:27:f3:81:
9d:d8:ee:8c:86:66:a7:77:a1:fe:43:48:4b:58:56:
e7:a1:01:b0:11:c6:44:61:18:ae:58:50:89:10:45:
2b:69:6f:67:d0:c1:8d:60:31:20:55:2d:b2:33:e6:
79:cc:f9:98:0a:b7:7b:d1:91:d3:65:e1:90:79:05:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:8C:B4:B2:36:17:16:AB:10:07:C8:52:3A:D6:D6:BB:B1:1F:28
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/V1OMtLI2FxarEAfIUjrW1ruxHyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4b41::/32
2a12:a340::/32
2a12:c304::/30
2a13:8580::/29
2a13:93c1::/32
Signature Algorithm: sha256WithRSAEncryption
25:df:f7:d7:04:5f:e3:5f:62:82:ae:b3:30:0a:5d:41:5c:72:
13:99:00:d7:31:99:6d:8a:7f:ef:c6:25:ef:d4:6d:78:0a:fa:
ea:65:da:57:0e:89:5c:6f:70:60:79:92:90:57:b5:8f:b2:7f:
e9:6c:06:77:f2:68:26:d3:93:55:6e:fe:96:1f:3e:0d:39:c0:
a6:a2:e3:a4:b8:33:75:45:4f:a7:9c:aa:19:d1:bb:cf:22:4c:
16:0f:f7:76:66:b3:71:a6:61:9b:ec:ee:f2:5e:40:50:60:ca:
d2:81:ff:8d:04:35:61:1f:32:f0:ff:47:f6:f7:d1:8d:93:3e:
5d:9a:7b:e6:d4:6d:63:5f:7a:1b:ef:7e:06:08:1b:10:4d:d8:
3f:73:8c:33:e9:c9:57:12:6d:5a:d2:f8:c4:a1:fd:26:e2:97:
f1:e5:76:d6:7e:6a:ff:18:ff:40:c8:46:f3:6a:fe:a9:e8:e1:
6e:0c:7a:77:86:99:a5:c0:9b:de:a3:d5:bd:9e:5f:72:dc:3d:
16:84:81:6d:8f:28:e0:81:57:23:99:36:8b:97:e1:b1:71:50:
ba:bc:b7:8d:0d:38:5a:25:0d:68:08:10:2a:71:1c:94:42:f6:
c4:f8:bf:b4:10:76:1a:fb:2d:d2:41:88:8a:16:d9:8f:5a:f9:
60:de:a4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:05 2025 by rpki-client