Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/1uRIbmkN6pSDhMOiHE6jzBnjmYw.roa
File: 1uRIbmkN6pSDhMOiHE6jzBnjmYw.roa (raw, json)
Hash identifier: G5qcByvPbZndtQRG9Isw9o0v7ZoS87h5UJSOyanxQY8=
Subject key identifier: D6:E4:48:6E:69:0D:EA:94:83:84:C3:A2:1C:4E:A3:CC:19:E3:99:8C
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 01946CACB96C5682F494466BAC4DD6D93F1F
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/1uRIbmkN6pSDhMOiHE6jzBnjmYw.roa
Signing time: Thu 16 Jan 2025 01:14:06 +0000
ROA not before: Thu 16 Jan 2025 01:14:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202525
IP address blocks: 2a13:d040::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:5::/48 maxlen: 48
2a13:d040:6::/48 maxlen: 48
2a13:d040:7::/48 maxlen: 48
2a13:d046:fffc::/48 maxlen: 48
2a13:d046:fffd::/48 maxlen: 48
2a13:d046:fffe::/48 maxlen: 48
2a13:d046:ffff::/48 maxlen: 48
2a13:d047::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Feb 2025 15:51:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6c:ac:b9:6c:56:82:f4:94:46:6b:ac:4d:d6:d9:3f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jan 16 01:14:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6e4486e690dea948384c3a21c4ea3cc19e3998c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f2:76:ab:e7:77:7c:b0:d1:9b:47:cd:71:7d:
c0:43:62:48:99:23:82:04:36:89:66:50:7b:50:d7:
fb:8c:35:9e:2d:e0:92:ba:a2:54:10:16:2c:33:33:
4c:55:9a:d2:a0:23:f1:10:a3:6c:73:11:03:0f:aa:
d0:91:1b:ed:a5:70:3a:6c:c9:43:54:bd:03:c2:5b:
c3:55:5a:d0:36:98:b8:99:b3:72:00:5a:76:ce:b9:
d9:03:98:b7:a6:11:b7:62:02:58:0f:9b:1e:bf:cc:
b2:8b:be:4d:a9:b5:89:1a:e8:a7:84:c6:ce:b7:9b:
a6:b4:b2:35:08:35:4f:65:7c:fd:0b:21:b9:3b:60:
c5:7c:10:e4:22:63:36:21:fa:dc:c4:f5:76:0b:73:
73:a9:a6:03:8b:d1:82:df:05:7e:6e:56:ef:fc:c1:
6c:11:33:60:b7:a2:d9:b8:e5:a7:75:cc:ed:fd:fc:
5a:61:c3:d9:ca:54:38:08:c6:ba:07:6f:0a:7b:aa:
16:28:e3:d6:99:8b:fe:08:75:6a:ba:dc:13:8f:3d:
92:05:8e:05:a9:17:97:46:14:ff:3b:0c:40:a7:2d:
ce:2a:30:14:20:e8:38:ef:c9:60:6d:25:37:0e:73:
28:52:81:2c:67:db:87:b1:dc:f6:6d:86:f6:c8:d3:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:48:6E:69:0D:EA:94:83:84:C3:A2:1C:4E:A3:CC:19:E3:99:8C
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/1uRIbmkN6pSDhMOiHE6jzBnjmYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040::/48
2a13:d040:2::/47
2a13:d040:5::-2a13:d040:7:ffff:ffff:ffff:ffff:ffff
2a13:d046:fffc::-2a13:d047:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:e4:18:d5:bc:2a:c2:79:59:d6:e9:84:7c:2a:66:43:ca:5d:
f8:06:8e:86:1e:5f:c7:90:65:ac:9e:85:1d:7a:53:00:45:eb:
83:00:2a:83:e7:35:ea:26:23:b4:c4:53:c7:ff:5d:34:41:f6:
1e:0a:06:2d:b7:8c:79:4b:d8:83:80:e5:52:7c:64:dc:82:72:
2a:42:52:52:19:2c:63:d8:d8:d3:1a:ca:ac:8b:fe:47:de:04:
5c:ee:9b:15:5a:62:0d:bf:a9:58:8a:83:79:b1:b4:43:67:81:
13:1d:11:60:4d:a7:e9:b6:0a:dd:d9:6d:d5:3c:a3:a4:aa:84:
ff:44:76:89:c5:1e:4a:ff:9a:66:ed:7a:a7:4c:74:72:0a:92:
5c:f5:ea:cc:12:37:9a:d7:4c:8e:ea:a4:5d:2f:98:6e:03:57:
e7:33:70:ff:b2:30:f2:27:2e:90:d3:fe:d9:b7:da:15:74:7e:
0a:10:b0:9d:d4:fe:37:79:ef:de:fc:fb:42:e6:95:1c:91:9a:
f2:13:7f:0e:80:c7:20:82:e0:cb:58:08:17:1f:64:6a:01:3f:
4b:8f:e2:23:a9:91:a0:f9:a0:7a:69:e7:5f:9a:d2:ce:14:40:
76:b6:90:6d:a3:c1:58:8e:f6:0e:b2:fa:6e:ef:99:16:9c:f1:
8d:79:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:03:56 2025 by rpki-client