Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/SXyn5T9WesyZTCgBHXtK5ToU2KI.roa
File: SXyn5T9WesyZTCgBHXtK5ToU2KI.roa (raw, json)
Hash identifier: 3L7ifymN5j6WmTsCVTPyvkC1JiBI+A4CmMt61ZL1I2E=
Subject key identifier: 49:7C:A7:E5:3F:56:7A:CC:99:4C:28:01:1D:7B:4A:E5:3A:14:D8:A2
Certificate issuer: /CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Certificate serial: 0194DFA377000968427CE02C39A6E0D280C8
Authority key identifier: 6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/SXyn5T9WesyZTCgBHXtK5ToU2KI.roa
Signing time: Fri 07 Feb 2025 09:00:19 +0000
ROA not before: Fri 07 Feb 2025 09:00:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213704
IP address blocks: 185.124.13.0/24 maxlen: 24
2a03:9000:100::/40 maxlen: 40
2a03:9000:300::/40 maxlen: 40
2a03:9000:400::/40 maxlen: 40
Validation: Failed, certificate revoked on Sat 15 Feb 2025 10:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:df:a3:77:00:09:68:42:7c:e0:2c:39:a6:e0:d2:80:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f1ba6e14d83a8b14b05026e710c86c46b73c3a6
Validity
Not Before: Feb 7 09:00:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=497ca7e53f567acc994c28011d7b4ae53a14d8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:b0:3a:cf:d2:75:e6:cb:23:99:08:31:56:
ab:35:86:23:59:2a:0a:51:e6:e3:a6:83:28:1b:a0:
a8:71:b5:9b:51:20:79:74:02:12:29:f3:99:81:bf:
3f:04:8b:bd:0c:16:9b:e7:ad:19:d8:8a:df:08:ba:
41:48:ff:06:d0:6d:62:1a:d1:a0:f7:ec:8c:60:70:
81:cf:1b:cf:ad:16:91:47:3b:e1:43:ba:59:08:4b:
5e:d6:b9:06:c7:e5:2f:23:de:88:29:d9:42:02:92:
36:7c:8e:19:40:b8:a4:30:85:19:9c:26:0b:c9:11:
ac:fe:84:8f:5b:99:e0:13:a6:38:05:9d:10:16:1e:
1d:fa:1d:f5:4f:6c:ab:94:cf:6e:cd:aa:17:52:be:
8c:a3:19:a8:cd:08:17:8b:27:18:b0:f3:21:5a:82:
c9:c5:9f:a4:a4:08:09:7b:ab:41:02:6c:ff:a7:9b:
b0:c8:67:b0:41:fe:41:b7:86:05:74:dd:d3:c3:7e:
d0:ff:0b:04:a2:6e:54:c8:48:62:3f:42:ba:45:93:
10:41:28:88:8a:88:d0:84:82:74:aa:d4:04:88:a4:
83:c8:43:f2:8a:e6:a2:87:af:09:85:81:56:0c:3c:
3e:e5:50:7d:8a:f6:b3:02:33:50:c4:6d:60:47:48:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7C:A7:E5:3F:56:7A:CC:99:4C:28:01:1D:7B:4A:E5:3A:14:D8:A2
X509v3 Authority Key Identifier:
keyid:6F:1B:A6:E1:4D:83:A8:B1:4B:05:02:6E:71:0C:86:C4:6B:73:C3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxum4U2DqLFLBQJucQyGxGtzw6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/SXyn5T9WesyZTCgBHXtK5ToU2KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ce81b6-bceb-47bc-adfb-dae9fb8bf0b1/1/bxum4U2DqLFLBQJucQyGxGtzw6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.13.0/24
IPv6:
2a03:9000:100::/40
2a03:9000:300::-2a03:9000:4ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
7b:2c:30:b8:f1:4e:cb:7c:34:bf:f8:86:95:ac:5b:08:d2:b8:
b8:49:0d:3d:5e:13:83:d1:42:2b:43:74:49:b6:ab:c7:ab:b8:
45:29:e8:fd:bf:bd:1f:f3:cb:ce:57:24:a5:1a:30:fb:e3:a6:
3d:e6:99:bb:34:bf:53:e3:03:9b:ef:cc:c8:8a:d2:16:48:85:
1d:3c:de:af:33:8a:72:50:72:77:f4:ea:78:f7:b2:d8:7c:73:
7d:d5:0f:44:97:3e:c7:51:8b:ed:43:ba:29:3b:61:fe:2b:8d:
32:4c:96:db:35:00:4f:ef:f9:d6:aa:de:a0:9f:64:44:de:b9:
d7:66:ff:ad:c8:53:92:31:7c:0e:b4:52:47:d0:01:19:05:2f:
c3:04:8c:89:e4:b8:5b:18:5f:ab:bc:72:f4:2e:28:cf:e3:fb:
ee:0d:e3:e1:fe:41:38:cb:99:ba:f6:6a:ca:cd:d4:12:67:72:
37:16:86:94:2a:28:26:d0:e2:9c:9c:ff:53:68:0c:9e:c0:76:
2d:aa:c0:39:d2:89:dc:65:ba:e0:12:47:b8:c8:55:46:c9:5f:
94:5f:f2:2f:53:2a:b2:6c:60:6e:fe:b7:16:13:3c:6f:86:65:
d8:b7:30:d4:9e:a4:23:51:83:c3:fd:82:24:b7:68:10:d2:d9:
f6:7e:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:22:35 2025 by rpki-client