Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/bbQBgg-xUGxbpI3qSOdtzGNkngc.roa
File: bbQBgg-xUGxbpI3qSOdtzGNkngc.roa (raw, json)
Hash identifier: yztm1/INuDG1a8DD3uazipaXPPocoFJDsDzKrUTtHMY=
Subject key identifier: 6D:B4:01:82:0F:B1:50:6C:5B:A4:8D:EA:48:E7:6D:CC:63:64:9E:07
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 0193F792790D4D398C7E2314539E6887BA20
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/bbQBgg-xUGxbpI3qSOdtzGNkngc.roa
Signing time: Tue 24 Dec 2024 07:29:51 +0000
ROA not before: Tue 24 Dec 2024 07:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202525
IP address blocks: 2a13:d040::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d046:fffc::/48 maxlen: 48
2a13:d046:fffd::/48 maxlen: 48
2a13:d046:fffe::/48 maxlen: 48
2a13:d046:ffff::/48 maxlen: 48
2a13:d047::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f7:92:79:0d:4d:39:8c:7e:23:14:53:9e:68:87:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Dec 24 07:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6db401820fb1506c5ba48dea48e76dcc63649e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:00:0f:92:d4:65:5f:c4:e2:08:0c:3a:28:
d4:cd:4d:60:f4:e5:8f:6e:9f:91:a8:45:ab:b3:75:
dc:9c:99:31:99:64:f6:e3:8b:27:0d:64:d3:57:76:
64:35:8c:17:b2:3e:9b:7d:68:c0:99:ce:54:90:84:
11:4b:6a:07:c0:a0:7d:f5:e4:61:23:7e:95:e7:53:
46:c1:85:72:68:d8:d4:07:a2:74:c7:52:5b:5b:dd:
11:65:51:f0:8b:d3:a1:f9:e9:1e:69:a3:77:ec:b6:
f5:8a:61:f8:9a:44:c1:0a:45:b4:3d:ba:c1:46:44:
62:e8:8d:09:fb:44:d3:42:ce:81:58:fb:b5:9c:7f:
7b:16:a2:c0:91:0c:2e:a5:c2:20:71:14:51:6f:7d:
8d:19:04:bc:6f:52:31:ba:fb:8c:18:5b:48:d5:f3:
52:86:b0:90:fa:a8:dd:53:27:e9:c8:c4:84:2c:48:
37:f9:cf:a2:9a:a1:68:42:29:55:77:c4:b3:87:70:
4a:90:38:dd:8d:c4:f9:7a:10:8e:5a:ab:de:e1:7a:
5c:a1:43:bc:b5:97:4c:44:c4:a5:4b:a8:2e:a9:2b:
70:0a:64:80:6f:ab:ef:70:a8:11:55:d6:a6:73:0a:
61:ba:4d:d9:f2:67:31:35:37:c8:7e:c3:08:dc:08:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:01:82:0F:B1:50:6C:5B:A4:8D:EA:48:E7:6D:CC:63:64:9E:07
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/bbQBgg-xUGxbpI3qSOdtzGNkngc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040::/48
2a13:d040:2::/47
2a13:d046:fffc::-2a13:d047:0:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
65:71:b9:eb:4d:33:db:de:cd:14:e6:39:c8:a7:df:71:6f:da:
47:ec:05:aa:18:2d:4a:f2:52:ff:58:63:6e:ce:d5:71:ae:fb:
d8:8b:10:13:28:22:90:86:e0:d9:6a:32:8e:62:c6:70:ad:9b:
ef:5e:9c:e0:4e:cf:d5:a7:9a:be:6f:dd:d9:d5:1c:05:a4:56:
36:8a:0f:6b:6b:1b:69:2b:d8:53:08:f0:86:15:64:10:28:10:
5c:b0:33:5a:63:a6:ea:93:69:d3:d8:e2:1d:28:83:96:1f:e6:
1d:0f:c0:18:43:14:d0:31:60:57:f4:90:38:d5:dc:9d:07:fb:
3a:cf:08:63:a8:8b:c1:bb:07:c7:7d:3e:c1:ba:a0:6e:c6:cd:
ac:87:4c:97:a6:1c:b7:46:e0:05:73:1b:44:63:76:35:20:bf:
bb:25:99:c2:b6:bf:0b:72:6e:74:8f:6a:62:f5:46:12:08:d5:
45:85:01:89:af:72:c0:1b:6a:e3:ca:0a:92:aa:75:81:93:57:
12:16:ef:41:9b:38:3e:e0:d3:14:4a:13:55:27:76:55:9a:d5:
3c:54:4a:03:34:ff:ff:29:88:e2:01:42:43:1d:93:ed:32:3c:
64:b7:60:9b:39:64:c1:d9:58:4e:6d:c4:72:22:01:8b:75:8a:
aa:b3:7f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:57:00 2025 by rpki-client