Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/T_M3NNWohdjuw4pHwItfCWQaJSc.roa
File: T_M3NNWohdjuw4pHwItfCWQaJSc.roa (raw, json)
Hash identifier: R5+YPF9hwQ30lH66OBKkomtr+1SNiJcPHj7iIP8wU/M=
Subject key identifier: 4F:F3:37:34:D5:A8:85:D8:EE:C3:8A:47:C0:8B:5F:09:64:1A:25:27
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 018CE9BF58EDF949631D4D0F09C2604F16D3
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/T_M3NNWohdjuw4pHwItfCWQaJSc.roa
Signing time: Mon 08 Jan 2024 15:44:40 +0000
ROA not before: Mon 08 Jan 2024 15:44:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62651
IP address blocks: 2a03:efc0:3300::/40 maxlen: 40
2a03:efc0:2900::/40 maxlen: 40
2a03:efc0:2700::/40 maxlen: 40
2a03:efc0:2300::/40 maxlen: 40
2a03:efc0:2500::/40 maxlen: 40
2a03:efc0:1700::/40 maxlen: 40
2a03:efc0:3100::/40 maxlen: 40
2a03:efc0:3500::/40 maxlen: 40
Validation: Failed, certificate revoked on Mon 08 Jan 2024 15:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e9:bf:58:ed:f9:49:63:1d:4d:0f:09:c2:60:4f:16:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 8 15:44:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4ff33734d5a885d8eec38a47c08b5f09641a2527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:1e:44:40:41:69:30:3a:91:d3:a5:f4:ad:f5:
e8:1a:5c:57:e3:23:32:83:4f:88:a0:d9:ee:72:1a:
62:76:36:5e:9d:1b:cc:04:b2:8f:ea:15:04:87:0c:
df:6e:41:fd:a4:da:93:3f:e9:39:05:2b:5b:a4:f6:
9e:f1:96:df:8f:aa:6f:75:c7:e9:10:94:cf:8d:79:
96:cd:fe:ef:0c:73:15:6e:7e:33:e8:e3:93:74:1f:
fc:98:1b:ca:42:6f:a5:3d:d3:04:cd:a4:a4:7a:9f:
2b:ec:08:4a:3c:36:01:7e:25:8d:af:be:2e:a9:d1:
23:88:76:1f:2c:2e:6f:71:db:2e:19:4d:2c:51:f1:
2e:78:c1:b6:d3:aa:b6:cb:0d:c4:fb:43:60:63:40:
95:17:a6:d6:4d:3a:9f:a3:58:fb:0e:68:60:7f:2b:
86:3d:fa:90:14:8f:8a:c0:85:dc:b9:e1:db:b6:4d:
0d:02:03:5d:99:b1:51:86:01:e7:24:7c:d0:5f:c9:
fe:b9:6e:13:e5:5c:9c:83:45:de:1b:df:d6:cf:2b:
a7:1c:ac:45:fc:40:f9:69:87:4b:4d:97:95:ac:00:
d7:1b:71:5f:d2:66:e7:c5:7b:39:ae:d8:79:55:20:
21:09:79:c4:36:93:e5:fd:45:07:8e:d5:5a:36:41:
dc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:37:34:D5:A8:85:D8:EE:C3:8A:47:C0:8B:5F:09:64:1A:25:27
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/T_M3NNWohdjuw4pHwItfCWQaJSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:1700::/40
2a03:efc0:2300::/40
2a03:efc0:2500::/40
2a03:efc0:2700::/40
2a03:efc0:2900::/40
2a03:efc0:3100::/40
2a03:efc0:3300::/40
2a03:efc0:3500::/40
Signature Algorithm: sha256WithRSAEncryption
46:9f:30:0a:26:77:72:05:e3:00:8a:fd:e9:3f:03:c2:f4:b7:
3c:71:15:8f:c8:ed:29:86:2b:7c:d4:a1:42:e3:19:9c:77:6c:
d0:9c:d2:ad:9e:34:f3:83:b8:52:88:c4:3a:36:a3:80:41:cb:
b6:b8:f3:40:d6:00:b0:99:c9:8c:0b:67:40:fd:49:b4:7a:3f:
68:b5:29:04:33:ed:76:07:3e:5f:95:fa:94:bc:21:b4:c5:1c:
48:7d:f9:5f:30:3e:db:90:d7:20:63:1b:b0:91:ee:a7:91:c8:
2a:3f:e4:bc:45:7e:67:31:38:29:9b:31:48:1c:f2:ca:dc:f6:
35:2c:7e:cf:52:9e:ee:53:7f:d5:66:28:b7:7f:1e:c6:11:03:
59:b7:cd:b7:f3:2f:6f:1b:94:0b:bb:41:d7:4a:f7:e9:82:94:
a9:21:b0:4e:79:04:92:27:c9:91:85:c6:6d:e6:ad:66:c0:10:
31:f0:a2:5e:a4:1a:94:3d:cd:4b:dd:77:dc:47:05:66:a8:21:
17:0f:df:db:3f:da:01:88:7e:eb:c7:01:d2:dd:ac:57:8e:11:
24:8b:5f:c4:da:d7:5f:9d:a3:0f:72:b0:be:23:10:23:10:17:
1e:db:85:04:75:cf:35:8a:dd:b4:77:47:7e:28:d1:d0:9b:8f:
c9:a2:03:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:27:46 2025 by rpki-client