Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/5Dxo91IxcuK5WjGOlfQAngfir_Q.roa
File: 5Dxo91IxcuK5WjGOlfQAngfir_Q.roa (raw, json)
Hash identifier: CwMHvI2/15k7TZqKlMFfKuK0X+Udx2YBiQnBmKjRD1g=
Subject key identifier: E4:3C:68:F7:52:31:72:E2:B9:5A:31:8E:95:F4:00:9E:07:E2:AF:F4
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 0193A1792A03B711A5E01646D662DCB8362A
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/5Dxo91IxcuK5WjGOlfQAngfir_Q.roa
Signing time: Sat 07 Dec 2024 14:14:52 +0000
ROA not before: Sat 07 Dec 2024 14:14:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16181
IP address blocks: 2a0b:480::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 08 Dec 2024 18:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a1:79:2a:03:b7:11:a5:e0:16:46:d6:62:dc:b8:36:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Dec 7 14:14:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e43c68f7523172e2b95a318e95f4009e07e2aff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:11:c2:e0:ad:fd:f4:47:7b:98:05:4a:ab:
22:41:2b:11:34:a2:39:80:e6:ed:9e:c2:f0:12:fc:
d6:16:a1:21:f0:71:cc:20:a4:e6:d1:63:5b:a9:af:
b0:a9:5b:37:07:86:20:74:ed:d4:dc:04:77:71:9e:
c8:9e:d7:86:8f:4b:c7:8f:89:7d:de:9c:21:2b:49:
9d:79:77:04:f5:c7:69:85:d1:68:41:56:f7:a2:d7:
25:3f:16:82:25:87:78:20:28:9e:8f:19:ea:b5:71:
99:82:88:37:3d:73:5c:9a:c4:06:c9:f8:e5:d6:a7:
a8:43:3f:32:1a:5e:18:77:cb:78:76:a1:68:ad:ba:
ce:be:c9:d9:b8:ab:74:d6:50:2e:5b:1c:fc:ba:a6:
14:bb:4c:29:ce:50:fc:b5:6f:9f:49:ff:5a:0c:a8:
82:0c:ad:c2:b1:f3:79:7a:18:62:48:10:f5:d6:46:
42:f2:1b:81:d3:df:7a:0f:99:30:12:cf:dd:42:f9:
36:8e:d5:42:7f:61:c5:47:02:85:57:2f:18:a9:e9:
cd:3e:48:07:04:59:57:69:1f:12:c6:1b:f5:c2:80:
74:99:e5:6f:c5:57:21:2a:fb:d0:7a:d6:aa:16:ec:
69:35:35:ea:d3:a7:81:ac:c4:6e:a0:92:2b:17:70:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3C:68:F7:52:31:72:E2:B9:5A:31:8E:95:F4:00:9E:07:E2:AF:F4
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/5Dxo91IxcuK5WjGOlfQAngfir_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:480::/29
Signature Algorithm: sha256WithRSAEncryption
22:50:5f:1b:cc:1e:81:67:19:e4:81:16:66:80:cd:73:a9:0e:
ce:f7:d7:e1:0f:c1:54:c7:86:09:f2:13:3f:10:b2:ad:7f:df:
23:a9:3e:61:c5:c3:69:14:10:63:c5:b8:eb:5e:93:ca:74:f0:
1c:d4:eb:7b:29:c9:a2:69:b3:cb:44:9d:98:15:87:c7:6b:15:
ed:bd:53:e7:a9:30:ef:c8:f6:1a:12:a7:39:18:b7:d5:39:ad:
94:3d:ab:f5:14:25:b3:a2:ee:05:e1:cf:c0:d3:20:15:83:99:
5e:2b:86:d0:72:2f:c2:97:7a:b2:55:86:6a:0c:2e:b0:7f:80:
f4:7a:91:81:3a:97:b3:94:ad:6e:71:c0:de:f6:b9:22:97:ef:
14:0b:2d:32:9c:72:99:e5:c2:ec:cd:4c:b7:e9:97:be:25:bc:
c7:e8:78:b1:e5:c8:10:9c:74:07:2c:22:f2:53:2a:76:21:c4:
4f:c1:7d:e9:61:6a:11:cb:59:04:8d:7a:db:bd:43:ef:9c:7f:
71:f9:f1:fa:ed:1e:0f:72:2f:0b:14:e0:20:1f:77:04:db:f2:
e1:9a:67:97:4c:37:f4:3d:d5:81:d3:99:5a:2b:4d:68:7a:88:
a6:ff:1c:0a:b9:d9:23:6d:1f:6b:af:3a:53:ae:5d:d3:d9:47:
52:c6:07:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:05:01 2025 by rpki-client