Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Xc9I0LNuVqzOzSj0Ps5DR6FM0zA.roa
File: Xc9I0LNuVqzOzSj0Ps5DR6FM0zA.roa (raw, json)
Hash identifier: ZU7cIfJBOfHeiB0cPNMgmbVuxo9zPzDPqP8OZnfMqCU=
Subject key identifier: 5D:CF:48:D0:B3:6E:56:AC:CE:CD:28:F4:3E:CE:43:47:A1:4C:D3:30
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018CC2DB6CA2A533AD2F6360068D176DB13E
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Xc9I0LNuVqzOzSj0Ps5DR6FM0zA.roa
Signing time: Mon 01 Jan 2024 02:30:09 +0000
ROA not before: Mon 01 Jan 2024 02:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 2a11:fc80::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 17 Oct 2024 04:07:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:6c:a2:a5:33:ad:2f:63:60:06:8d:17:6d:b1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 1 02:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dcf48d0b36e56accecd28f43ece4347a14cd330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e9:fd:b1:46:5e:a8:71:40:6c:41:8d:6c:3d:
28:d2:7e:51:bb:3b:ae:95:45:c0:5b:18:d4:3a:6b:
1b:0e:b3:fd:39:59:96:ab:2e:50:91:d0:4c:bf:e1:
ed:34:c4:8b:dc:5a:a4:44:86:32:c6:6a:f6:43:9d:
ec:d0:ab:f0:33:b7:2e:ca:64:1a:42:57:26:27:9f:
a3:6d:55:ba:07:c1:5e:08:27:0f:4b:79:b6:a2:c1:
bf:8a:40:f9:1c:5e:fe:86:8e:28:d5:a7:47:bd:76:
4c:02:2c:de:e5:0e:3d:12:9f:50:5f:a9:52:31:0c:
e5:5b:eb:a1:a1:cc:52:d6:f3:ca:58:dd:d5:21:66:
10:1d:58:00:5c:4c:c0:2f:5b:76:91:22:8a:9b:7b:
ab:77:33:3c:43:d0:ee:63:56:62:b7:b8:ae:40:09:
6d:0c:1f:b5:8a:d3:2b:2e:10:9e:93:13:02:2e:8b:
43:30:a1:c8:28:93:1b:aa:3f:57:c1:45:66:5b:f1:
a5:3a:d5:90:d1:df:5e:ab:aa:88:5e:c1:6f:9e:a6:
46:cf:4b:96:70:58:1c:24:92:89:3a:1c:dd:71:c8:
2d:68:2e:8f:cf:ba:d1:60:33:e9:9b:bb:92:14:0f:
9b:f4:66:0d:08:22:ff:57:0d:c4:9f:e9:57:94:d1:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CF:48:D0:B3:6E:56:AC:CE:CD:28:F4:3E:CE:43:47:A1:4C:D3:30
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/Xc9I0LNuVqzOzSj0Ps5DR6FM0zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fc80::/30
Signature Algorithm: sha256WithRSAEncryption
2f:f7:7c:83:a1:6c:56:46:4a:a3:ec:96:16:95:bf:f1:19:cb:
4a:f0:20:10:82:66:3d:28:36:e8:ef:86:0d:1e:10:85:17:c0:
e1:78:59:01:05:57:c9:33:38:04:4e:fa:35:f3:b2:ef:2d:83:
27:5d:90:25:e4:bc:61:a2:00:50:b3:3d:00:01:b5:4e:8a:17:
ad:6e:35:7f:e2:ec:ec:d3:ce:af:69:e6:f9:95:45:37:16:42:
b2:fc:9d:ee:7b:7f:e2:a3:62:aa:0f:a2:4e:97:74:ae:78:79:
7a:e6:7f:6d:d3:e4:cc:d0:14:a8:4b:30:ca:d4:a7:54:31:2c:
16:20:da:df:7b:8c:4c:42:ad:da:5f:4d:52:81:ed:6d:cd:3b:
6f:f3:7d:ea:40:f6:14:72:dd:d0:30:be:95:ca:48:6e:0c:87:
3d:5e:52:3d:9e:00:f9:5d:d1:a9:9f:c1:0b:14:42:bd:53:fa:
02:d4:8d:61:b7:a4:7d:f0:c8:8e:72:30:a8:c2:27:f6:10:7d:
8f:cb:79:82:10:42:2c:73:5b:74:44:d8:37:2d:e5:a2:99:1f:
b1:95:bf:08:d7:c7:05:12:40:25:a2:6f:52:c1:41:95:ec:19:
a0:6f:02:7d:f6:28:cb:1c:33:e8:f4:df:92:83:c2:7e:d4:78:
61:6b:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:06:54 2025 by rpki-client