Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/6kaWP8Jy5QSu3AOxLdfKdp0u7nE.roa
File: 6kaWP8Jy5QSu3AOxLdfKdp0u7nE.roa (raw, json)
Hash identifier: LIcGvaCfJ5faDYU995O5HzgFZBdfGyi8cjI42JzVwoQ=
Subject key identifier: EA:46:96:3F:C2:72:E5:04:AE:DC:03:B1:2D:D7:CA:76:9D:2E:EE:71
Certificate issuer: /CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Certificate serial: 019579BACC2277E3E1F158E6DFB734B7E1D5
Authority key identifier: 67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/6kaWP8Jy5QSu3AOxLdfKdp0u7nE.roa
Signing time: Sun 09 Mar 2025 07:07:19 +0000
ROA not before: Sun 09 Mar 2025 07:07:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213605
IP address blocks: 2a14:67c1:a020::/44 maxlen: 48
2a14:67c1:b100::/40 maxlen: 48
Validation: Failed, certificate revoked on Sun 09 Mar 2025 18:17:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:ba:cc:22:77:e3:e1:f1:58:e6:df:b7:34:b7:e1:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f31bde46516347f4edfcbe30edac9a09e4e0e0
Validity
Not Before: Mar 9 07:07:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea46963fc272e504aedc03b12dd7ca769d2eee71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:63:aa:57:03:f5:30:9f:7e:65:eb:2e:4a:4d:
2b:af:72:ec:51:ce:78:3c:8e:2f:47:6d:f5:e5:7e:
a1:16:bb:f9:92:3f:05:c4:d3:56:3a:ea:be:b6:70:
1d:39:f9:2b:d9:20:24:4d:76:86:a4:df:a9:3f:0e:
23:8e:7f:0d:f3:6c:d3:07:dd:f4:47:84:fd:ff:06:
0a:42:ab:5d:78:cb:6e:8b:6d:c5:68:ff:34:b7:56:
e9:15:26:6f:4a:98:a7:ce:4c:3f:48:63:70:c4:85:
3f:2e:32:20:74:13:29:f8:32:6e:47:9d:f8:f6:d0:
56:e3:98:06:4c:bb:e1:90:5c:63:1d:f3:54:b1:48:
1b:fc:a4:3a:6a:d8:e3:77:56:9d:90:e0:e6:47:fa:
1d:04:ee:34:75:20:e2:16:c8:bd:58:5e:83:64:53:
bd:b8:07:35:49:9b:2a:72:90:b2:8d:a0:30:35:e2:
62:bc:d2:0c:e8:11:d5:93:d0:99:bd:83:2e:c6:6e:
b2:5a:49:84:88:97:1c:76:f5:96:1b:48:b2:87:bb:
cd:cb:14:90:e7:1a:c5:f3:f9:f9:e0:c8:df:89:76:
f4:e6:27:30:89:be:7c:ee:95:6f:8f:12:ee:82:35:
4c:4e:1b:92:8c:7d:5a:73:fa:ae:53:9a:73:0d:1e:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:46:96:3F:C2:72:E5:04:AE:DC:03:B1:2D:D7:CA:76:9D:2E:EE:71
X509v3 Authority Key Identifier:
keyid:67:F3:1B:DE:46:51:63:47:F4:ED:FC:BE:30:ED:AC:9A:09:E4:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Mb3kZRY0f07fy-MO2smgnk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/6kaWP8Jy5QSu3AOxLdfKdp0u7nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/732b6c-48e4-4350-8a56-f6cc4ef0f7df/1/Z_Mb3kZRY0f07fy-MO2smgnk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:67c1:a020::/44
2a14:67c1:b100::/40
Signature Algorithm: sha256WithRSAEncryption
ce:3a:ad:d7:1e:a8:96:1e:99:26:e1:ee:61:13:ee:ff:2b:01:
6a:9d:c9:9e:96:ca:a5:03:f8:7a:34:33:53:59:7e:08:49:31:
dd:20:6e:15:99:fc:bc:8b:98:4a:fd:68:43:55:67:89:67:d5:
95:31:1d:7c:34:d6:1d:8e:d1:af:c6:9c:92:a6:de:4d:ee:6c:
fa:e9:a2:e4:f2:18:1f:3a:df:ca:93:70:69:b4:dd:3b:5d:15:
f8:79:4d:e1:4f:3d:ba:22:3a:8c:cd:82:21:66:e4:37:81:cd:
2f:61:e4:f0:66:8c:21:f3:4f:f8:79:6a:aa:94:2b:b9:cb:9c:
1a:76:f2:1e:e6:75:00:57:c0:40:00:f1:08:67:43:64:cf:97:
29:6a:58:5d:50:1c:98:1e:d2:bf:2d:d7:48:a5:02:f4:36:38:
9b:da:f2:d9:dd:4b:89:2a:fa:3d:1e:1f:1f:4c:2b:76:28:eb:
b2:6e:76:36:bf:c3:78:53:e5:7d:a8:de:03:ad:46:89:fb:9f:
cc:97:89:12:15:cd:dd:40:a6:fb:75:98:17:35:e6:05:31:2f:
ad:b9:bc:f7:77:b0:7c:4f:e2:f6:11:f0:6f:90:1d:ed:1d:31:
62:d4:c9:fa:cc:7f:81:a4:5d:cc:12:8c:b7:9c:d8:53:03:41:
3d:cf:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:10 2025 by rpki-client