Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Xt6-8lfZuqjbmZrxqMVMn-sdalY.roa
File: Xt6-8lfZuqjbmZrxqMVMn-sdalY.roa (raw, json)
Hash identifier: tpGJBi/5tV9ewTbLARxH0rGH6g0b4vcB+Z4Xlt/OaC4=
Subject key identifier: 5E:DE:BE:F2:57:D9:BA:A8:DB:99:9A:F1:A8:C5:4C:9F:EB:1D:6A:56
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 018CC50159136AC8AFC0168B6CD0F21A80CC
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Xt6-8lfZuqjbmZrxqMVMn-sdalY.roa
Signing time: Mon 01 Jan 2024 12:30:49 +0000
ROA not before: Mon 01 Jan 2024 12:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202505
IP address blocks: 2a0f:6580:107::/48 maxlen: 48
2a0f:6580:105::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 May 2024 09:42:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:59:13:6a:c8:af:c0:16:8b:6c:d0:f2:1a:80:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 12:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5edebef257d9baa8db999af1a8c54c9feb1d6a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f9:b6:7c:85:45:ef:a3:3e:e0:70:88:da:62:
d2:6b:4b:0d:95:88:61:f9:5e:3d:51:57:f3:fc:a1:
af:23:f9:25:3b:8b:59:ed:64:b9:a8:25:e6:24:10:
4c:a0:56:fa:33:ea:4c:6c:c9:86:6b:80:67:ac:03:
cf:a6:85:2a:3e:b2:b4:03:49:b1:af:7a:d0:f2:b5:
6d:57:c3:89:42:40:aa:59:88:f7:94:0a:6c:0d:d8:
f2:19:a7:5f:76:bf:b3:d3:93:d0:96:ef:e6:85:47:
81:f8:9f:6e:11:ac:6c:86:f5:1f:ac:5d:52:b6:05:
27:02:41:2d:fc:b0:2b:d9:70:75:54:f9:fa:15:53:
31:c6:aa:41:ad:2b:e5:9a:a0:53:6e:eb:8d:c0:61:
3e:57:c4:81:3f:d2:60:a5:48:65:02:63:a2:1a:7c:
f3:bb:64:dd:75:b8:2c:ba:31:9c:82:7d:94:3a:2a:
31:c2:db:00:3c:4e:95:15:23:0e:16:2d:71:98:f5:
08:a2:50:f0:d7:94:cf:ae:a9:1a:8b:f3:e2:93:07:
78:12:e4:64:57:ea:98:96:13:bc:2e:c1:6b:32:64:
b4:26:e7:01:6d:d5:bb:42:d0:a8:58:06:f5:b3:8e:
00:98:e4:9f:3f:da:d8:06:dd:ae:0e:85:bf:2c:c2:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DE:BE:F2:57:D9:BA:A8:DB:99:9A:F1:A8:C5:4C:9F:EB:1D:6A:56
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/Xt6-8lfZuqjbmZrxqMVMn-sdalY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:6580:105::/48
2a0f:6580:107::/48
Signature Algorithm: sha256WithRSAEncryption
2d:d7:32:1b:ca:c8:90:ef:3d:1a:2b:00:fb:fd:cc:d9:89:f2:
c4:2d:57:1c:f5:a2:62:a0:1a:99:58:7f:6f:22:24:e2:00:6a:
74:b9:3d:62:37:c5:aa:0d:ef:07:4d:67:fd:15:d9:f4:3d:b4:
ab:9f:c4:69:93:29:ad:e2:0d:f2:0c:af:1d:bb:c2:2e:e0:b8:
48:d0:2b:fa:1c:66:a7:59:a8:6e:94:f1:ab:57:87:1e:e9:fd:
e6:8a:16:1d:a1:f3:c8:ce:7e:fd:35:c2:81:b5:56:18:e1:01:
e1:d9:85:75:e3:3a:f5:2b:aa:28:f8:53:61:61:df:ec:c8:86:
eb:44:c4:cc:72:0a:5c:68:43:7b:88:51:4e:dc:7c:8a:9f:0d:
00:4c:d8:0a:bc:54:25:77:d6:b6:a7:a4:26:99:69:5b:06:60:
82:72:c1:57:d3:74:c5:42:40:83:86:bd:a4:f9:b5:34:e7:56:
0e:ee:04:d5:34:73:9a:b3:bd:81:20:e8:ba:f4:ec:40:12:eb:
17:94:89:ea:62:b8:31:d3:60:d2:45:cb:3a:5e:b3:e2:de:74:
ab:aa:82:35:7e:51:dc:b8:4b:46:9d:ce:d0:24:69:b6:ec:9b:
92:df:15:c5:0a:19:26:a5:5b:fe:59:0e:4a:fd:67:0e:f1:81:
e4:5b:15:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:19:13 2025 by rpki-client