Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/wLIJQ2VHlOEBSzTY3kVhjFyJS9s.roa
File: wLIJQ2VHlOEBSzTY3kVhjFyJS9s.roa (raw, json)
Hash identifier: RKNgieD/DgMfe1BbgW+ExZ3WCpRIuguWIM24be/slZM=
Subject key identifier: C0:B2:09:43:65:47:94:E1:01:4B:34:D8:DE:45:61:8C:5C:89:4B:DB
Certificate issuer: /CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Certificate serial: 0194266B685C9BF6B05773A8FAFB9EF30B3F
Authority key identifier: 6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/wLIJQ2VHlOEBSzTY3kVhjFyJS9s.roa
Signing time: Thu 02 Jan 2025 09:49:20 +0000
ROA not before: Thu 02 Jan 2025 09:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a13:d040:1::/48 maxlen: 48
2a13:d040:2::/48 maxlen: 48
2a13:d040:3::/48 maxlen: 48
2a13:d040:10::/48 maxlen: 48
2a13:d040:11::/48 maxlen: 48
2a13:d040:12::/48 maxlen: 48
2a13:d040:13::/48 maxlen: 48
2a13:d040:14::/48 maxlen: 48
2a13:d040:15::/48 maxlen: 48
2a13:d040:16::/48 maxlen: 48
2a13:d040:17::/48 maxlen: 48
2a13:d040:18::/48 maxlen: 48
2a13:d040:19::/48 maxlen: 48
2a13:d040:1a::/48 maxlen: 48
2a13:d040:1b::/48 maxlen: 48
2a13:d040:1c::/48 maxlen: 48
2a13:d040:1d::/48 maxlen: 48
2a13:d040:1e::/48 maxlen: 48
2a13:d040:1f::/48 maxlen: 48
2a13:d040:20::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 02 Feb 2025 15:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:68:5c:9b:f6:b0:57:73:a8:fa:fb:9e:f3:0b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa8fa75c5020cd6218cf7f109de420265204bac
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0b20943654794e1014b34d8de45618c5c894bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e9:21:51:61:fa:b6:ac:43:25:0a:57:3d:b3:
92:cd:1d:e8:bc:b7:84:41:76:7e:85:f5:64:3f:93:
ea:5a:ad:72:53:b9:aa:09:01:43:6d:f1:7b:c5:f3:
7f:6a:38:e2:39:49:92:7b:cb:6d:80:b1:97:1f:1d:
3c:4c:14:ef:d9:13:6e:ab:12:2e:e7:ff:46:07:c7:
ab:f6:78:2f:f1:cc:c9:65:53:77:15:80:db:22:7b:
fc:30:76:5b:f2:a3:dd:bd:47:1b:40:92:fb:46:3b:
e5:6e:f5:2c:ba:4a:1c:01:43:99:d4:4d:c4:93:25:
1c:df:c6:58:0e:82:61:8f:05:96:51:f0:e4:11:a6:
88:33:8e:05:98:8a:cb:88:c6:9b:f6:bd:3a:6b:87:
dd:15:eb:20:28:c3:8e:68:9a:c2:60:b7:13:6e:19:
a8:50:21:0f:b8:8f:97:3c:2f:72:13:83:4f:39:42:
dc:dd:f8:b7:64:eb:fe:ba:4e:62:97:4a:4c:d5:22:
4c:c3:57:b3:2b:72:b6:a1:a7:62:5d:ca:c1:60:11:
4a:82:1a:ed:d9:53:63:5c:3f:af:c4:dc:49:c3:92:
70:35:70:92:b8:a2:91:b3:00:cf:92:fd:ba:f2:53:
f8:8c:1e:b7:86:db:d3:fc:86:64:06:f1:2f:f9:ae:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:09:43:65:47:94:E1:01:4B:34:D8:DE:45:61:8C:5C:89:4B:DB
X509v3 Authority Key Identifier:
keyid:6A:A8:FA:75:C5:02:0C:D6:21:8C:F7:F1:09:DE:42:02:65:20:4B:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqj6dcUCDNYhjPfxCd5CAmUgS6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/wLIJQ2VHlOEBSzTY3kVhjFyJS9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7012d8-afa1-419b-8b60-35c63fa765a2/1/aqj6dcUCDNYhjPfxCd5CAmUgS6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d040:1::-2a13:d040:3:ffff:ffff:ffff:ffff:ffff
2a13:d040:10::-2a13:d040:20:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a6:30:ed:ee:c5:3b:89:27:d6:85:4a:e1:92:e0:9f:72:c5:8b:
7f:da:ec:b4:2b:58:ac:1b:08:ce:de:19:46:70:2d:7c:f8:1f:
ef:fa:80:86:3b:2b:45:f5:5a:86:c4:f0:b6:e3:9c:af:f4:41:
03:d1:2d:fc:32:a6:80:7c:6b:01:80:7c:74:bc:b7:a0:9e:90:
a8:b7:8a:cc:5b:fa:b3:f8:78:22:20:f6:2b:4b:f8:3e:c6:09:
e0:62:1e:42:de:03:96:9d:5d:91:8c:8a:ee:cb:51:c3:3c:cc:
d1:a7:2f:ae:2a:88:b1:36:f3:88:0a:38:0c:e2:b7:76:fb:22:
68:d9:f5:d5:ae:11:76:3a:91:6b:15:ac:fa:55:ca:3d:e0:13:
01:d7:d7:d4:c7:c8:aa:da:36:59:62:4c:18:7c:ba:c3:44:ba:
1c:08:ae:b0:9d:6b:c1:36:df:a1:8c:fc:d5:2f:a9:b2:09:2c:
a1:58:40:92:20:99:dd:bd:4a:48:cc:6d:eb:93:b9:2f:8e:6b:
14:c6:20:fc:ea:8e:23:b7:fa:68:d0:bd:93:4f:60:3c:53:f3:
fc:9a:2b:11:6b:c3:b9:7d:a9:84:e3:33:84:cf:e4:2f:cc:b5:
73:32:ca:d6:23:1f:35:7f:70:95:dc:b5:75:a2:b4:e4:5f:d6:
47:68:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:44:26 2025 by rpki-client