Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/o6Y2J6fW0iHHAYeLY4hiZ650k0g.roa
File: o6Y2J6fW0iHHAYeLY4hiZ650k0g.roa (raw, json)
Hash identifier: 2zXEHn1T2+YD1HUWFX037xKOgUmXs16ifoqZ+Gh0L30=
Subject key identifier: A3:A6:36:27:A7:D6:D2:21:C7:01:87:8B:63:88:62:67:AE:74:93:48
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 019425FCAB206C16799FAD7CC773B68AA01B
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/o6Y2J6fW0iHHAYeLY4hiZ650k0g.roa
Signing time: Thu 02 Jan 2025 07:48:23 +0000
ROA not before: Thu 02 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35491
IP address blocks: 2001:1a68:15::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 16 Jan 2025 08:49:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:ab:20:6c:16:79:9f:ad:7c:c7:73:b6:8a:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3a63627a7d6d221c701878b63886267ae749348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f3:bc:80:62:b8:ae:56:ab:3f:6e:28:34:9c:
34:c0:48:9f:59:22:05:c9:16:11:df:00:9f:e0:4e:
34:e7:35:c6:3c:d0:6f:cc:e7:cc:c8:45:7d:ed:c0:
89:f0:b2:42:5f:8d:cb:d8:3d:43:f8:c2:b7:4c:02:
cd:e3:b5:e4:55:86:9b:94:d7:1c:3e:9d:4b:16:c1:
97:57:4e:de:59:83:cf:75:92:2a:7e:ea:7a:3c:b3:
c6:7a:4b:8e:6c:51:01:ee:6f:ad:23:8c:94:c2:f6:
48:74:50:fb:33:23:16:57:f4:16:6f:44:4c:71:56:
1a:31:a2:be:85:ea:11:d6:73:f2:8d:22:93:0f:e7:
79:59:70:37:3d:d4:e2:94:c0:33:09:9f:33:7a:b2:
49:e6:3c:01:c4:47:98:30:69:9e:82:54:59:69:ae:
28:8a:ee:52:b3:fa:f7:49:7c:b4:63:2e:16:d5:95:
89:7e:39:fa:33:99:1b:ae:ca:2d:4f:7b:4b:33:06:
64:82:33:3c:38:05:9d:aa:39:3d:ce:ae:bb:df:40:
ce:e6:8f:aa:65:e0:2b:f1:25:82:2f:18:cb:a7:e5:
d5:30:50:b0:09:0c:03:fc:d3:59:6c:ab:ea:00:d0:
28:a1:21:fb:62:c5:75:7f:10:32:23:1f:be:b5:55:
52:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A6:36:27:A7:D6:D2:21:C7:01:87:8B:63:88:62:67:AE:74:93:48
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/o6Y2J6fW0iHHAYeLY4hiZ650k0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:1a68:15::/48
Signature Algorithm: sha256WithRSAEncryption
3b:83:ee:20:ce:1c:43:b2:ad:c9:4c:3d:e4:f9:30:41:41:5a:
0e:f7:34:4c:03:fa:74:03:d1:c8:68:30:2d:cf:a9:36:11:c1:
d2:dd:2f:52:1b:92:0a:25:38:8f:af:f7:23:46:84:ad:9c:53:
55:49:b9:2d:a2:3c:b1:4f:a6:f3:59:ac:c9:2c:88:65:fe:0f:
38:08:5d:c5:b9:02:cb:22:aa:e7:0c:a3:d1:32:81:08:3f:fd:
71:0b:a4:67:f3:b1:12:55:95:4e:a3:c1:7d:22:fe:d4:70:35:
fb:6e:c0:ac:81:d5:9c:8b:e7:ca:4e:cb:41:33:43:8d:64:d7:
12:cb:0c:e5:35:c4:4b:fc:6e:23:f6:42:5e:de:ce:13:6b:43:
8e:0a:68:b5:2d:48:b2:3c:0d:70:3e:0f:dd:9d:f5:05:23:85:
9a:9d:fa:e4:06:f7:12:38:34:6c:08:70:c1:14:22:28:ce:82:
1e:71:7d:56:c5:7b:0f:09:f5:c7:13:16:67:84:25:77:bd:fc:
6b:f5:8b:47:45:d3:fc:e8:0a:69:be:de:16:f7:c9:01:a2:6c:
fa:92:bf:32:9b:fa:31:9f:d9:41:56:22:1a:ea:83:9c:8c:2d:
d5:97:a0:7c:fa:3c:06:3e:bf:c1:01:00:78:85:3c:f0:71:97:
ee:3e:33:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:42:02 2025 by rpki-client