Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/y-m34i3lTxTGBMVWxmnbBt0bs_A.roa
File: y-m34i3lTxTGBMVWxmnbBt0bs_A.roa (raw, json)
Hash identifier: hjgTgVwV+DpH/VOYRDjHT4egMq4eSxxI7wMeDWwBoz4=
Subject key identifier: CB:E9:B7:E2:2D:E5:4F:14:C6:04:C5:56:C6:69:DB:06:DD:1B:B3:F0
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0192413A3E788EC31F42EF79A930B30246E2
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/y-m34i3lTxTGBMVWxmnbBt0bs_A.roa
Signing time: Mon 30 Sep 2024 04:39:48 +0000
ROA not before: Mon 30 Sep 2024 04:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214958
IP address blocks: 2a04:6e40::/29 maxlen: 29
2a11:91c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 23 Nov 2024 12:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:3a:3e:78:8e:c3:1f:42:ef:79:a9:30:b3:02:46:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 30 04:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbe9b7e22de54f14c604c556c669db06dd1bb3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:c6:d9:11:e3:36:3d:e5:01:f8:6e:0f:2b:
c6:b2:e9:f3:ec:2e:e0:65:cc:b0:14:1b:46:88:7e:
74:97:1e:b4:a9:9a:6c:bb:ab:65:bf:e1:11:b5:0d:
35:fa:05:46:d0:b1:ca:ef:b5:61:e4:e3:82:e0:e2:
c1:27:0a:e6:87:7e:7c:f9:52:a7:c8:4b:14:5c:81:
53:f7:66:42:86:cd:15:b7:4b:30:48:f4:90:d4:f1:
35:fb:80:56:11:62:c4:c6:7d:43:d7:66:b6:29:87:
ea:5b:14:94:10:51:39:0d:44:dc:9d:62:2a:49:01:
03:54:3f:f6:d3:d7:2f:5a:04:0b:57:4b:6e:44:0a:
3e:35:71:a6:1c:f0:d4:c7:68:98:e3:0f:a2:e6:a9:
d7:e3:c8:d8:bd:45:ba:20:ec:22:c3:58:92:4d:fe:
2d:74:56:dc:8e:cc:14:93:9e:7d:25:d1:c4:7d:ce:
26:d6:6c:bd:6f:58:5f:87:52:96:70:96:0d:db:0a:
8f:ac:f2:9d:a6:a1:fe:eb:85:13:f6:83:94:8b:16:
62:31:02:9d:dd:3b:c6:e6:6b:bc:e8:d0:a6:bd:dc:
8f:8c:ec:aa:76:d8:70:03:a6:3e:61:ce:12:00:ae:
56:7f:05:9b:73:a5:86:e1:26:5f:06:d5:08:7a:c1:
95:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:B7:E2:2D:E5:4F:14:C6:04:C5:56:C6:69:DB:06:DD:1B:B3:F0
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/y-m34i3lTxTGBMVWxmnbBt0bs_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:6e40::/29
2a11:91c0::/29
Signature Algorithm: sha256WithRSAEncryption
49:05:5d:7d:96:55:75:53:fc:d7:b0:26:fc:23:99:fd:7b:c3:
41:3a:db:67:6f:24:92:49:24:e6:8e:d5:3f:4e:81:dc:e5:a5:
90:e1:a5:45:21:1b:9b:e0:90:b5:29:11:9a:80:52:10:0b:71:
47:7f:5d:78:b3:b8:12:fa:85:58:98:24:07:64:d6:dd:1e:9f:
da:0a:0c:05:56:ec:d8:eb:2a:3b:0c:6d:8f:be:c2:d6:03:80:
89:d5:ea:44:de:72:bf:f6:a9:af:df:01:bb:76:56:6e:cf:92:
a6:87:ed:5f:69:01:5a:d5:e0:f6:3d:57:bb:bd:4f:dc:d8:74:
18:cb:f1:4b:0a:00:01:0d:76:fc:0a:c2:09:74:88:e2:96:6d:
df:ed:4a:30:f6:16:d8:5d:90:d5:61:7f:7a:3f:88:78:85:82:
52:9c:b8:36:1b:45:f3:c5:94:da:cc:72:4c:fd:5c:80:3f:b3:
85:44:02:91:2c:21:63:15:a0:c1:c5:04:e6:7e:49:76:87:06:
dd:1f:f6:e2:ce:ea:f6:8a:38:87:7e:d1:e7:10:00:f5:0d:e9:
74:db:d9:cb:f6:03:c0:c3:c9:13:83:41:99:74:ad:97:ca:a0:
fc:80:a9:16:b1:c9:b6:88:d5:0b:76:13:3c:43:5a:c7:00:1f:
dd:2f:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 01:29:25 2025 by rpki-client