Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/4F68cYC7faxFpiX1SJKuGrSxIXU.roa
File: 4F68cYC7faxFpiX1SJKuGrSxIXU.roa (raw, json)
Hash identifier: 1IwQjAZWUUSMohi9MZLjqprWeOfBivskJXyXyrWJckc=
Subject key identifier: E0:5E:BC:71:80:BB:7D:AC:45:A6:25:F5:48:92:AE:1A:B4:B1:21:75
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 0194266B692AC0BB5A246E5B3EBB82A44648
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/4F68cYC7faxFpiX1SJKuGrSxIXU.roa
Signing time: Thu 02 Jan 2025 09:49:21 +0000
ROA not before: Thu 02 Jan 2025 09:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215913
IP address blocks: 2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:4::/48 maxlen: 48
2a13:d046:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Feb 2025 15:59:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:69:2a:c0:bb:5a:24:6e:5b:3e:bb:82:a4:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jan 2 09:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e05ebc7180bb7dac45a625f54892ae1ab4b12175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:05:2c:39:18:a7:6f:fd:6f:a7:2e:34:95:
06:a1:17:1f:be:c0:84:68:1f:ce:1d:76:ad:2c:bb:
93:b0:32:4d:4f:6d:43:e5:58:f3:cc:17:76:2c:31:
94:c5:6a:6a:b3:1b:93:b3:db:a7:f6:13:ac:a9:f2:
45:91:81:44:76:12:ab:ec:0f:33:df:78:d8:77:2b:
e2:dd:6c:2c:44:30:fe:4b:f8:c6:c8:15:a5:b6:d8:
d2:da:60:5c:1e:85:f1:6e:48:1b:de:5e:98:a4:cc:
41:85:4c:64:f7:f7:64:b8:c0:04:b5:71:57:e9:e0:
4d:26:1e:14:17:fb:d8:9f:7f:4e:50:9f:27:78:90:
2d:16:af:c8:9a:d7:ba:8c:17:c4:e7:a8:bc:1e:ed:
78:d0:3d:bf:50:6f:c1:23:d6:96:00:3a:b7:a6:58:
06:10:06:2e:e8:ea:58:03:e2:0c:c8:b2:43:fe:86:
46:ed:d2:da:1c:f6:37:c8:13:20:65:d1:0b:b1:22:
fc:ec:c8:6b:9a:cf:ea:ad:f9:71:2e:d3:d8:2e:c2:
cd:25:0c:48:a6:94:68:a8:d9:03:82:7e:b6:4a:05:
22:d2:e8:bc:c8:0a:a1:86:de:24:43:b6:02:c4:70:
30:c1:ce:39:fa:06:3d:41:8b:a1:e3:c5:c9:f7:c5:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:5E:BC:71:80:BB:7D:AC:45:A6:25:F5:48:92:AE:1A:B4:B1:21:75
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/4F68cYC7faxFpiX1SJKuGrSxIXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040:2::-2a13:d040:4:ffff:ffff:ffff:ffff:ffff
2a13:d046:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
6a:ba:16:68:05:a5:35:3b:1f:59:b4:d6:89:4c:cc:28:f2:32:
22:7f:20:41:f4:93:1e:b9:63:08:4c:bc:7c:80:10:41:6e:03:
dc:57:e0:22:4e:b1:56:9b:54:7d:94:bf:10:ca:6f:23:c6:f4:
23:2a:0e:fc:9a:07:72:79:c3:50:ea:fe:08:be:20:28:e6:77:
db:2d:a9:7b:81:f8:8d:32:83:8b:56:c4:42:bf:3c:c9:c7:a5:
23:e9:c2:6c:82:fc:50:00:90:41:7f:cd:34:94:ac:2c:00:3f:
09:01:b1:ec:91:e8:2a:e9:8d:1d:9c:4f:3e:47:3e:39:62:38:
4b:08:9b:ea:6a:b2:dc:33:df:e7:d4:7f:9e:cf:09:c8:72:32:
f1:d3:f0:84:d1:7e:e0:8e:27:fc:96:50:b4:dd:9d:27:07:79:
e4:70:f1:42:3c:e0:2c:b2:aa:e0:ac:7b:df:58:ae:81:6f:cf:
a8:b6:83:10:a0:57:8f:14:b9:a5:64:49:0e:df:9b:6a:08:5d:
ce:fa:87:f6:a3:47:70:8a:03:e6:22:a7:2e:e8:a1:e6:d6:5b:
70:62:10:f8:2c:35:ed:59:83:f6:0b:8f:f1:55:64:59:fd:d0:
c6:9b:be:1a:75:2e:b4:73:dd:69:c1:df:6a:be:f4:57:22:69:
48:1e:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:33 2025 by rpki-client