Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/24zTivgaNavPeQ7MoiJbCW50kng.roa
File: 24zTivgaNavPeQ7MoiJbCW50kng.roa (raw, json)
Hash identifier: UwN2RnX1So36/MA15dnu7Ib/2pT35lqUXIW0LX4v2ME=
Subject key identifier: DB:8C:D3:8A:F8:1A:35:AB:CF:79:0E:CC:A2:22:5B:09:6E:74:92:78
Certificate issuer: /CN=23607105955c764a813fd9524a7e41b940c56832
Certificate serial: 01946A1F391DB86AB9EC3829EE03CF3EAF0B
Authority key identifier: 23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/24zTivgaNavPeQ7MoiJbCW50kng.roa
Signing time: Wed 15 Jan 2025 13:20:18 +0000
ROA not before: Wed 15 Jan 2025 13:20:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59516
IP address blocks: 2001:67c:2b78::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 06:38:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:1f:39:1d:b8:6a:b9:ec:38:29:ee:03:cf:3e:af:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23607105955c764a813fd9524a7e41b940c56832
Validity
Not Before: Jan 15 13:20:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db8cd38af81a35abcf790ecca2225b096e749278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b9:76:56:e0:5b:dc:fc:d6:63:ff:3d:a5:
6a:32:70:c9:1a:27:38:54:b3:15:0f:85:3f:87:82:
01:a3:30:af:f9:0f:c1:c4:e6:d6:41:57:cc:4c:e7:
a4:7b:4a:5d:bb:39:4e:13:03:ee:97:86:0b:d2:f1:
b7:1d:38:bd:88:13:eb:95:1a:02:72:3c:1b:75:a4:
a8:56:7c:f6:d6:cf:fe:2f:7c:c5:ed:0b:db:5e:05:
88:f8:d0:ef:54:69:74:c2:9c:5f:ba:f2:ef:22:d3:
5b:44:36:b7:36:42:35:e2:1c:34:62:65:e5:fc:8d:
99:f5:00:2a:5c:0c:6c:ad:7b:55:53:9d:37:0f:73:
af:08:a5:3b:3a:fb:8c:12:dd:b6:03:f3:7c:f0:95:
7f:fa:cd:54:ad:1b:91:34:09:f7:10:1e:f9:e9:a7:
a5:f5:10:d2:7d:a7:05:86:a0:ee:9d:80:92:91:fa:
6c:9a:95:93:eb:1d:35:10:02:56:2f:d5:01:80:4f:
bc:4e:01:57:de:a6:2d:fd:6d:92:29:da:d3:19:2e:
be:1c:15:b4:b2:a2:e7:65:de:5d:66:5d:51:38:6c:
9f:7d:2d:8d:b8:87:05:b4:23:8d:c7:6b:69:6f:2c:
7f:a0:fe:be:6d:ed:8d:63:9a:c6:df:5f:a6:7b:8f:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:8C:D3:8A:F8:1A:35:AB:CF:79:0E:CC:A2:22:5B:09:6E:74:92:78
X509v3 Authority Key Identifier:
keyid:23:60:71:05:95:5C:76:4A:81:3F:D9:52:4A:7E:41:B9:40:C5:68:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2BxBZVcdkqBP9lSSn5BuUDFaDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/24zTivgaNavPeQ7MoiJbCW50kng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2a2969-d5de-4ee0-9399-48470f69d79d/1/I2BxBZVcdkqBP9lSSn5BuUDFaDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2b78::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e9:35:b9:4d:0c:94:e4:34:af:44:69:60:d7:23:27:80:02:
cb:4b:28:b5:b9:5a:06:93:b2:25:a4:7c:d9:d0:21:8b:b3:61:
5f:0d:5a:b9:c8:89:35:a7:0d:8c:ba:4e:85:5c:e3:33:99:37:
b9:14:75:34:2b:28:85:ca:82:3e:7b:ff:10:ef:f7:56:1b:82:
8f:89:71:e3:6b:ff:e0:55:a7:37:16:8a:20:52:1a:1f:7d:a7:
85:3b:18:93:be:b6:7f:89:bc:61:df:10:57:3b:61:13:23:e5:
59:77:89:01:55:5c:dc:e7:ca:7e:0b:31:bc:6e:1c:22:4f:cf:
58:1a:eb:ee:be:f3:0c:f7:e1:e8:6c:a5:bd:66:c2:e0:7d:8a:
21:a3:3b:bf:3d:7f:15:64:7a:21:a8:71:bc:ae:3f:14:be:63:
82:24:e5:96:e7:dd:2e:64:b0:f6:6f:9c:d1:45:74:b7:c9:35:
85:f0:1a:ae:05:62:d3:cc:5c:8d:09:95:79:61:84:87:dc:07:
bf:e7:08:f5:9b:84:25:90:86:5b:6c:ab:b7:d6:65:d9:9b:c4:
89:c7:b9:98:08:e5:b9:52:8f:be:b4:cc:17:f0:65:67:32:a2:
63:d0:b9:a4:17:45:87:fd:aa:1e:9d:6b:ec:3c:9b:58:9e:1b:
3a:e7:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 02:48:22 2025 by rpki-client