Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oJISaS29AjVMp1lin7OaJhKb7Lo.roa
File: oJISaS29AjVMp1lin7OaJhKb7Lo.roa (raw, json)
Hash identifier: AA5bAOs1x07bsCjvP850WkHneQR0xlwk6+459VvFiYM=
Subject key identifier: A0:92:12:69:2D:BD:02:35:4C:A7:59:62:9F:B3:9A:26:12:9B:EC:BA
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018DC4C688A149EFC908DB3E318EA2CC9940
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oJISaS29AjVMp1lin7OaJhKb7Lo.roa
Signing time: Tue 20 Feb 2024 04:29:21 +0000
ROA not before: Tue 20 Feb 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44812
IP address blocks: 2a09:e5c0::/32 maxlen: 32
2a09:e5c1::/32 maxlen: 32
2a09:e5c2::/32 maxlen: 32
2a0e:b140::/29 maxlen: 29
2a11:4b40::/32 maxlen: 32
2a11:4b44::/32 maxlen: 32
2a11:4b45::/32 maxlen: 32
2a11:4b46::/32 maxlen: 32
2a11:4b47::/32 maxlen: 32
2a12:a343::/32 maxlen: 32
2a12:a344::/32 maxlen: 32
2a12:a346::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 Feb 2024 03:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c4:c6:88:a1:49:ef:c9:08:db:3e:31:8e:a2:cc:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Feb 20 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a09212692dbd02354ca759629fb39a26129becba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:71:36:f5:68:45:a2:b5:ce:f4:69:7c:79:90:
e3:2f:87:c8:3c:ac:16:7a:70:8e:90:d4:bf:6a:39:
31:e8:d7:19:c0:fd:3e:59:68:2c:d7:49:e7:6d:15:
39:ab:1a:0a:48:a5:9d:a0:c9:51:6a:e5:1d:f9:a6:
9d:da:a3:07:b2:9e:1c:21:01:cc:23:b5:ac:76:7d:
fb:8c:bc:5c:c8:86:5f:b5:6f:e2:44:e3:92:f9:49:
9e:55:88:58:fa:ab:36:4c:dc:a6:1b:92:d0:ad:e9:
38:be:ce:f7:c9:12:f7:07:3e:0e:df:5a:6b:f8:9b:
d8:03:d7:b5:92:93:c6:a4:b3:47:99:56:4c:e4:06:
d0:c2:89:8d:08:75:bd:7b:1c:c0:03:41:16:d1:26:
60:0c:33:6e:5f:17:27:ca:3d:ce:a9:ea:6b:e7:c2:
59:7f:ff:38:02:27:a1:91:74:04:ee:4b:81:68:9c:
e0:90:cf:03:09:23:31:1f:bf:a9:db:8d:6e:4a:c6:
4d:27:03:77:8e:8c:3d:72:ec:56:e9:b7:0e:0e:21:
de:d6:5e:51:d7:d5:5c:6e:5f:c4:1a:f5:fb:35:11:
50:77:81:7b:12:15:78:cc:ad:5a:96:74:0a:e2:b6:
2c:aa:bf:58:c3:ae:94:1b:80:d7:51:74:03:77:3b:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:12:69:2D:BD:02:35:4C:A7:59:62:9F:B3:9A:26:12:9B:EC:BA
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/oJISaS29AjVMp1lin7OaJhKb7Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:e5c0::-2a09:e5c2:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b140::/29
2a11:4b40::/32
2a11:4b44::/30
2a12:a343::-2a12:a344:ffff:ffff:ffff:ffff:ffff:ffff
2a12:a346::/32
Signature Algorithm: sha256WithRSAEncryption
2f:4d:ed:90:bd:44:95:56:14:3f:ed:fa:51:b2:6a:b4:00:a0:
10:be:97:1c:cf:57:31:4d:b8:1a:e8:f9:e4:8a:1e:eb:90:eb:
39:4f:73:7f:09:3d:04:1a:a6:6c:ad:cd:9c:6d:3d:d0:29:83:
92:10:19:85:22:42:ae:c5:77:a7:ec:d0:29:93:c3:82:91:17:
42:8a:53:14:d2:1e:ef:fe:b7:22:cf:d3:a2:a0:8e:5a:cb:c6:
11:e5:04:20:7c:5a:f4:29:e9:b9:8c:df:0e:a5:cc:cd:8a:bb:
42:76:19:f8:e8:58:31:80:ba:c6:71:3d:16:65:48:65:93:29:
c2:01:7c:91:1a:1c:7b:d3:b8:c2:f8:ea:10:da:2c:1e:0d:73:
06:bc:9a:66:f9:d1:26:37:2f:a3:f5:ed:81:aa:6f:dd:9a:3a:
81:48:0a:22:4a:3c:f9:35:6e:77:d9:66:69:9e:d6:ba:ef:b5:
74:83:64:cb:e4:7b:6c:37:73:d6:38:d9:98:02:bc:6e:21:11:
91:2a:8c:a6:22:a6:77:b3:f1:58:f4:31:90:fe:66:1b:7d:c7:
b9:0b:0b:d3:35:cd:d6:92:03:db:37:7b:cf:a6:a3:ab:5f:ca:
d0:79:5f:7c:c5:7c:b6:cf:12:9b:1c:31:88:99:44:c8:c9:c1:
f8:58:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:31 2025 by rpki-client