Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/AfZPnIBLYtTiLnClxUN3-VfzVMs.roa
File: AfZPnIBLYtTiLnClxUN3-VfzVMs.roa (raw, json)
Hash identifier: R/cQDKRg13fMSEdWVccKBODg2MhkGll8f8IgexE6124=
Subject key identifier: 01:F6:4F:9C:80:4B:62:D4:E2:2E:70:A5:C5:43:77:F9:57:F3:54:CB
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 01933F1E988C1BE818BABD020738DAD879C9
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/AfZPnIBLYtTiLnClxUN3-VfzVMs.roa
Signing time: Mon 18 Nov 2024 11:53:09 +0000
ROA not before: Mon 18 Nov 2024 11:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42772
IP address blocks: 128.65.2.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:14:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3f:1e:98:8c:1b:e8:18:ba:bd:02:07:38:da:d8:79:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Nov 18 11:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=01f64f9c804b62d4e22e70a5c54377f957f354cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:1f:3c:0d:2d:b5:4d:02:ef:3b:0b:9d:e9:
18:91:6d:d1:6f:da:bf:ea:48:83:72:23:2b:70:b5:
f9:af:a8:e1:f3:e7:94:13:8a:d1:61:13:10:c4:6b:
9d:b3:17:4c:af:f1:89:45:3a:bd:fd:64:65:3f:40:
32:27:9b:e0:6d:19:fe:67:e3:8a:67:99:65:69:f4:
a6:ab:38:ed:06:ad:ed:f3:6a:ba:d4:cc:1c:4c:ff:
77:57:37:91:c5:3d:7e:33:0a:c1:d4:07:bc:93:dc:
c6:6d:6e:c2:63:03:bb:f7:b4:0d:72:44:2c:fe:bc:
8b:66:cc:38:f1:e9:9a:82:9e:fc:ac:bc:f5:2a:49:
b1:cd:38:ae:da:c2:39:13:c0:33:c8:36:a5:5b:95:
72:f9:fe:12:06:34:23:b2:7c:e6:74:6f:09:9f:ce:
0a:1c:c6:14:b8:d9:11:ef:6a:01:81:51:57:2e:87:
cf:b6:6a:32:39:0b:74:b9:18:90:d8:27:f3:ee:f3:
71:03:90:3f:04:67:14:bc:2d:57:9e:38:a5:c4:89:
38:cb:42:e8:e2:4d:20:8d:9a:7d:99:46:df:8e:f1:
30:ba:d7:be:ef:5c:69:cc:0d:2c:85:d9:16:d0:36:
c6:ec:73:c9:77:59:2d:72:8d:32:fd:59:0e:f9:a1:
81:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F6:4F:9C:80:4B:62:D4:E2:2E:70:A5:C5:43:77:F9:57:F3:54:CB
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/AfZPnIBLYtTiLnClxUN3-VfzVMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.65.2.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:7f:d3:5c:f2:62:fa:c7:ad:7a:f3:75:b3:f6:c4:2d:88:65:
62:ac:cf:c7:a8:a3:7a:e8:c1:14:7c:df:66:28:09:78:12:34:
f2:a8:97:a8:9e:d2:55:80:8b:85:ed:41:da:80:a0:5d:8e:5f:
ed:3d:0f:c7:a9:22:77:dc:9d:e5:7f:36:f3:15:a8:50:48:1f:
b2:44:1f:bd:c2:eb:57:d9:6b:8c:6c:e9:38:66:0e:82:99:a8:
80:f9:d3:19:a4:93:f5:21:64:1b:6f:01:3c:a4:5c:08:ab:4b:
21:12:c7:06:35:d5:58:2c:fe:6a:46:f5:06:64:06:63:40:11:
6e:b1:55:05:35:49:9d:f6:50:32:cf:9e:1a:b7:42:ab:e3:b3:
a8:07:3e:03:5b:e4:50:a8:27:ab:02:40:6c:20:f9:44:49:72:
c1:80:00:c5:c5:c4:43:13:cf:1e:df:e4:16:09:f6:9f:48:ec:
9d:69:32:b2:14:97:6a:01:e0:8b:42:a8:ca:b5:b5:da:16:01:
a3:66:93:fd:14:f7:cf:34:6b:29:a8:2f:d6:33:36:a6:f6:68:
50:39:31:d5:70:eb:5b:e4:18:a5:77:84:e2:6c:f5:32:2b:3c:
f5:51:3b:63:dc:94:06:e8:0d:61:77:ce:9c:17:ff:3f:6b:12:
5a:02:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:52:44 2025 by rpki-client