Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/bg9CC8B4H3bfD0eKsLYicx8pmlA.roa
File: bg9CC8B4H3bfD0eKsLYicx8pmlA.roa (raw, json)
Hash identifier: srly92jVQGLzIK8S0HjTSdRKhtP2FbOat1S/gE/zHPg=
Subject key identifier: 6E:0F:42:0B:C0:78:1F:76:DF:0F:47:8A:B0:B6:22:73:1F:29:9A:50
Certificate issuer: /CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Certificate serial: 0194419A4D64B1FDD7B339E83B07D0630FA9
Authority key identifier: 42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/bg9CC8B4H3bfD0eKsLYicx8pmlA.roa
Signing time: Tue 07 Jan 2025 16:30:18 +0000
ROA not before: Tue 07 Jan 2025 16:30:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213981
IP address blocks: 2001:3a40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Jan 2025 17:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:41:9a:4d:64:b1:fd:d7:b3:39:e8:3b:07:d0:63:0f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420cc3f34bfd43ac5cdf61037b3d16c967d73237
Validity
Not Before: Jan 7 16:30:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e0f420bc0781f76df0f478ab0b622731f299a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:d5:0c:90:2f:87:f4:81:5c:86:6d:46:26:
b4:c8:e3:89:5d:84:91:39:89:ae:61:60:1e:66:e5:
05:d5:0c:97:3e:84:f1:17:b7:98:a7:bf:70:0c:20:
52:4e:c0:9d:da:8a:8e:91:f6:df:0b:d8:89:c1:86:
64:ee:c9:bc:84:c5:58:eb:2c:5f:6f:25:d2:4b:d1:
bf:3d:60:f6:b9:70:69:51:61:0a:49:a8:b8:7a:b5:
21:39:8f:4f:61:aa:e8:fd:cb:55:27:a9:f5:b0:0f:
e1:e1:21:20:6a:a3:a3:05:4b:dd:d8:83:60:eb:d6:
b4:bf:38:27:ba:a8:27:1b:3e:ce:da:4a:d3:4d:55:
9b:eb:be:a2:f7:ff:38:cf:2b:f2:d2:f6:b4:c1:8e:
f9:c7:5e:26:d0:26:d5:37:d2:e4:c9:6e:f3:01:47:
e6:9f:7f:70:19:c3:88:b7:f0:c5:b0:17:29:e0:71:
cb:6e:71:85:11:f1:8f:72:53:ab:d1:e3:ad:ad:c9:
c4:29:95:20:5a:4b:6e:fa:0c:0f:70:73:32:8d:ad:
b3:b9:d7:1b:7c:a8:5e:4a:d1:56:45:ca:16:03:4b:
b3:40:c5:72:3a:71:5d:14:ea:ec:e9:33:3d:9b:bf:
a0:ee:ce:6a:1d:fa:f6:1c:f8:ed:00:26:57:81:29:
be:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0F:42:0B:C0:78:1F:76:DF:0F:47:8A:B0:B6:22:73:1F:29:9A:50
X509v3 Authority Key Identifier:
keyid:42:0C:C3:F3:4B:FD:43:AC:5C:DF:61:03:7B:3D:16:C9:67:D7:32:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QgzD80v9Q6xc32EDez0WyWfXMjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/bg9CC8B4H3bfD0eKsLYicx8pmlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/56c116-9b7c-4a3a-91f6-593d0bb78be6/1/QgzD80v9Q6xc32EDez0WyWfXMjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3a40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:32:8c:0f:07:62:41:6b:03:4e:2d:aa:75:8c:42:e8:49:3f:
8b:e5:71:fa:10:6d:e8:2b:f1:c3:14:6d:6f:5f:86:71:ba:17:
cb:aa:3b:3c:0a:6e:40:7f:bb:83:91:0c:ff:88:11:de:e5:31:
2a:2f:72:8e:d7:89:92:c5:4e:ea:b9:fd:8d:b8:90:3d:61:07:
01:39:00:eb:08:39:72:3a:df:30:31:7c:e0:31:45:d4:c0:ff:
0d:96:1f:e8:a7:24:df:8c:61:1e:bc:6e:94:4c:08:b8:f4:53:
5b:2e:c7:8a:77:67:45:ea:14:d8:d7:fc:c1:43:47:a1:2b:1b:
41:8e:ce:c2:aa:cc:8e:87:b2:51:55:c8:cb:f1:8d:7a:7f:1d:
5f:9b:cc:d2:0d:8a:05:0c:c8:21:ed:db:90:cd:00:14:79:3a:
23:a4:de:8f:ba:a7:f9:12:2d:37:17:5f:d1:1e:61:a4:af:3a:
84:8d:d8:af:ab:9f:a8:3d:75:f1:84:75:f8:03:58:db:f3:be:
f7:1c:2b:fd:8d:18:a2:fe:28:86:1a:fc:1a:a0:e8:c8:82:2c:
b7:7a:b3:02:b5:57:5c:45:4d:7d:3d:98:eb:6b:e7:10:b1:fc:
7d:3c:98:80:2d:39:64:0b:12:f0:d4:d8:d5:6b:77:76:16:41:
e3:f0:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:24:47 2025 by rpki-client