Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/CiK7i_Hr89fVp_uAXwwychXcpMk.roa
File: CiK7i_Hr89fVp_uAXwwychXcpMk.roa (raw, json)
Hash identifier: hSutDv4KWb4KcMLKEbwF3FY9H2pG+G0WIRBToOUF2yQ=
Subject key identifier: 0A:22:BB:8B:F1:EB:F3:D7:D5:A7:FB:80:5F:0C:32:72:15:DC:A4:C9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018CF19803B9C49D18D6D85EB6DC0AC4AAB5
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/CiK7i_Hr89fVp_uAXwwychXcpMk.roa
Signing time: Wed 10 Jan 2024 04:18:40 +0000
ROA not before: Wed 10 Jan 2024 04:18:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48503
IP address blocks: 2a03:32c0:5001::/48 maxlen: 48
2a03:32c0:7001::/48 maxlen: 48
2a03:32c0:5002::/48 maxlen: 48
2a03:32c0:5000::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 04:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f1:98:03:b9:c4:9d:18:d6:d8:5e:b6:dc:0a:c4:aa:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 10 04:18:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a22bb8bf1ebf3d7d5a7fb805f0c327215dca4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:1a:21:4d:d9:15:93:00:ba:ac:bc:ee:46:
79:94:3f:57:d5:22:41:06:e1:f9:92:13:6d:4e:7f:
03:11:59:ac:f3:e1:ad:57:15:0c:e8:36:53:6c:75:
16:e2:d4:ac:29:de:72:4d:26:6c:77:af:a5:65:7d:
31:83:39:63:0b:98:82:43:67:35:4e:2a:60:b8:a3:
5e:8f:e5:a5:6a:c4:3b:b6:d6:05:1c:fc:f0:58:42:
72:0d:76:e2:26:7a:80:1d:93:60:4e:5f:51:0d:81:
74:b6:5d:5d:9e:ab:cf:84:5d:99:41:91:6b:8b:e5:
14:c0:af:95:c9:62:81:93:03:43:aa:a5:ef:1a:a5:
99:d5:1e:32:ba:26:92:f3:4b:b0:69:a3:e0:0e:ef:
02:8f:04:d7:2f:b9:de:d9:f0:64:77:78:f6:94:8a:
5b:ec:f0:61:ee:e3:93:45:cc:7d:a4:1a:38:40:f1:
f8:65:d7:fb:29:95:19:34:ff:f0:c2:22:a4:3e:90:
5e:0d:a8:45:b6:19:a1:c9:f8:bf:f2:e1:ba:8b:69:
43:bc:00:d5:d1:02:3a:df:29:a9:6d:16:f4:af:24:
e2:d2:79:48:02:8a:6b:bd:1d:a7:f6:42:6b:6b:c5:
e6:b1:d9:50:1c:9a:2b:ff:f9:5f:ae:7f:57:f3:65:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:BB:8B:F1:EB:F3:D7:D5:A7:FB:80:5F:0C:32:72:15:DC:A4:C9
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/CiK7i_Hr89fVp_uAXwwychXcpMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
2a03:32c0:7001::/48
Signature Algorithm: sha256WithRSAEncryption
6e:f5:71:47:22:40:c2:e5:22:76:6d:82:90:42:38:32:a0:34:
82:0e:4f:d5:5a:69:62:06:9a:9f:0b:0f:1a:83:8e:bd:ff:c8:
3e:51:7f:5e:ea:55:0f:3c:d0:7a:15:26:9a:6f:9a:e5:ca:9b:
c1:cc:80:65:bd:df:d2:31:41:6f:f6:cb:4d:4d:46:89:82:5a:
f6:0c:01:cd:d3:bf:b1:46:0b:74:c9:f1:a7:b7:06:e1:7f:44:
46:d2:d8:da:26:7e:3c:95:e8:3a:90:33:29:c0:9b:10:75:e7:
0d:21:8e:42:38:70:d8:cc:c8:38:1e:f4:1d:94:4c:be:9a:31:
48:08:be:63:c7:4d:6a:a4:a1:b7:4c:02:44:b8:ed:e8:3d:53:
29:00:a7:06:19:56:91:2c:d7:88:d9:e8:2e:f5:46:36:86:e4:
95:fe:dc:a9:e9:59:cf:48:8c:af:ef:3e:a8:ef:76:10:37:87:
bb:08:b9:21:ff:c9:fd:a9:81:36:84:05:39:4a:83:b5:3d:e6:
25:0a:20:d9:b8:9a:67:f6:a1:4e:75:f3:b1:bc:ee:79:31:49:
01:95:20:22:5d:0c:44:e2:73:d8:a2:89:28:3d:80:39:c5:d7:
ae:a9:c0:42:3f:98:8f:f5:10:82:bc:21:46:f1:77:ee:aa:65:
d6:86:ac:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:20:31 2025 by rpki-client