Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/V6hYIofN7psclFL6zbGZHLeH6pY.roa
File: V6hYIofN7psclFL6zbGZHLeH6pY.roa (raw, json)
Hash identifier: fDPBNV7l0zyylVSP+1LGeMpUIIcP8C66rwDIcoiqwxA=
Subject key identifier: 57:A8:58:22:87:CD:EE:9B:1C:94:52:FA:CD:B1:99:1C:B7:87:EA:96
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018ED136B3ED2BB0306CCD29C5C6EC34CDF0
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/V6hYIofN7psclFL6zbGZHLeH6pY.roa
Signing time: Fri 12 Apr 2024 07:30:06 +0000
ROA not before: Fri 12 Apr 2024 07:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46844
IP address blocks: 2a04:ac01:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 12 Apr 2024 07:32:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d1:36:b3:ed:2b:b0:30:6c:cd:29:c5:c6:ec:34:cd:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Apr 12 07:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57a8582287cdee9b1c9452facdb1991cb787ea96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bd:76:e7:08:fe:b4:4c:3c:45:12:1d:f7:ac:
db:98:7f:81:ed:35:1b:44:fd:4f:26:ee:a2:7f:5a:
24:fe:d2:30:6e:f0:c0:5e:d6:94:43:d6:6f:15:22:
28:80:ec:d5:d2:d3:7c:35:f8:6c:d9:fc:47:f8:8a:
22:20:2f:f9:62:3d:a5:b6:5e:34:85:d6:ec:30:95:
dd:f6:73:ef:8a:ba:9b:cf:12:6e:08:12:cd:9b:a2:
b7:c3:c1:4d:2b:89:22:8a:e0:19:2b:e4:2c:e0:69:
85:48:66:c2:34:ab:8a:96:b8:7f:fd:48:1f:bc:05:
bd:d8:7a:10:d7:ad:9a:f0:65:01:17:78:53:a9:64:
89:75:fa:11:fa:65:e9:98:8e:c0:df:fd:42:c8:90:
6b:26:39:b9:56:83:cd:09:c4:f4:ee:24:b7:5c:3a:
00:19:4d:5c:8e:45:37:d2:52:65:6f:fb:01:d6:b6:
7c:d8:4c:6f:50:b3:6c:77:67:7a:16:05:b6:fd:96:
7a:0a:f2:3e:7b:6a:6b:f0:ac:a3:2e:3f:1a:0c:ba:
2d:df:3b:49:6a:9a:1e:71:d9:a7:c3:3f:80:98:81:
4f:1c:0b:b3:66:a6:2b:e1:29:e9:d0:fb:fc:5b:15:
3d:0a:c6:7b:39:db:3b:14:b6:17:14:73:b9:03:32:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A8:58:22:87:CD:EE:9B:1C:94:52:FA:CD:B1:99:1C:B7:87:EA:96
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/V6hYIofN7psclFL6zbGZHLeH6pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac01:1::/48
Signature Algorithm: sha256WithRSAEncryption
8e:0a:74:b1:9d:10:1f:41:ef:3f:11:4d:ff:e4:51:5e:36:34:
6d:46:de:12:a6:84:bd:b8:45:90:70:38:98:79:b7:80:eb:85:
14:41:b9:82:87:35:5e:a7:d8:67:78:fa:81:cd:d4:3c:ce:0e:
29:65:8c:38:9f:ab:c7:af:38:6c:23:2c:2a:b4:61:5f:e8:15:
31:99:e2:e1:10:0d:41:e8:47:aa:ff:e3:85:7e:77:06:86:a9:
f1:03:e8:da:3e:5a:d0:7a:29:13:0a:7b:f7:79:07:dd:de:fd:
c3:6f:61:c8:31:c5:f1:55:bf:cd:69:a3:32:e3:03:c1:05:71:
8f:f3:8b:ef:f1:00:94:04:15:ad:f8:cf:a9:cb:46:8f:0f:dc:
5a:4c:dc:39:e4:cb:79:0c:2f:04:31:d3:98:cc:93:e8:ce:05:
7a:ab:a6:99:00:5b:1a:96:b9:da:f0:5b:e3:b1:34:f9:e5:56:
af:a8:38:8c:e1:4f:c3:e7:3e:5d:9f:5b:07:3a:34:dd:e4:c9:
95:53:57:2f:63:13:eb:f6:30:64:68:15:fa:b6:1c:99:e8:f3:
25:c1:d0:0f:bb:b2:31:d6:ef:f4:ca:4a:d8:0e:08:67:e5:54:
7b:96:6e:9b:ac:6a:12:bc:63:0d:f6:d6:38:61:86:91:f4:b6:
ee:f2:35:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:40:21 2025 by rpki-client