Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/b9foO6uShUf_0AicqfzsoLKVyrE.roa
File: b9foO6uShUf_0AicqfzsoLKVyrE.roa (raw, json)
Hash identifier: gJ7rZ/YrkzGXNQpDhhZVxr6myTAe9coYmTexinUq7hA=
Subject key identifier: 6F:D7:E8:3B:AB:92:85:47:FF:D0:08:9C:A9:FC:EC:A0:B2:95:CA:B1
Certificate issuer: /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial: 0194266BF30130009FDF95227C43309555F5
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/b9foO6uShUf_0AicqfzsoLKVyrE.roa
Signing time: Thu 02 Jan 2025 09:49:56 +0000
ROA not before: Thu 02 Jan 2025 09:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 2a13:5242::/32 maxlen: 64
Validation: Failed, certificate revoked on Wed 26 Feb 2025 11:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f3:01:30:00:9f:df:95:22:7c:43:30:95:55:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Validity
Not Before: Jan 2 09:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd7e83bab928547ffd0089ca9fceca0b295cab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:f6:83:96:a8:88:49:bc:5d:ef:ae:d2:6a:
a6:e1:b2:38:46:35:b2:ac:4e:19:ba:25:00:57:b9:
07:cf:bb:63:a0:5a:19:cd:1f:30:c2:83:b9:a0:61:
b9:71:60:ba:57:cf:77:ed:a7:84:88:1b:97:78:c9:
b1:19:fa:fc:ff:3f:a7:66:54:3f:38:a6:8f:35:16:
b9:55:a1:46:e6:e6:1e:1d:32:f1:14:09:2a:ca:f3:
20:8e:26:2f:55:55:cf:6e:bd:12:e5:ec:4e:8e:7f:
7a:34:c1:bd:27:29:d6:33:9e:0f:35:70:44:fb:72:
2f:d8:fd:bb:da:e4:07:6b:3e:bd:5a:14:3e:2a:59:
70:2b:3f:c3:67:53:f5:0d:f2:17:0d:97:a6:7b:99:
7a:c0:c3:de:03:5c:c5:4a:52:12:ad:43:cf:7a:69:
ae:ac:54:d5:fa:84:2f:66:c0:fb:08:8b:77:2a:71:
2d:19:ab:6b:62:f0:70:90:79:1a:e6:98:27:05:44:
30:9f:16:70:96:13:61:57:a4:61:4c:13:d8:72:73:
34:ba:b8:e4:09:90:9c:ee:0f:42:4f:75:e9:dd:e4:
4f:a9:3b:ab:9f:1d:7a:3d:c3:50:f4:6e:93:2e:59:
94:5c:7e:82:e2:93:36:f1:8b:95:e1:db:51:eb:6f:
c9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D7:E8:3B:AB:92:85:47:FF:D0:08:9C:A9:FC:EC:A0:B2:95:CA:B1
X509v3 Authority Key Identifier:
keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/b9foO6uShUf_0AicqfzsoLKVyrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:5242::/32
Signature Algorithm: sha256WithRSAEncryption
2a:52:18:65:cf:c0:2d:f6:f7:f7:83:40:51:7c:4e:2d:be:7f:
4b:06:1e:c3:2a:db:30:94:12:36:77:d4:69:da:77:50:6c:c2:
a6:87:97:4c:0a:38:a9:f2:aa:4c:35:fd:48:d8:d0:2a:39:35:
f5:56:9f:81:43:d3:6d:ad:19:b4:af:83:a5:70:95:69:a6:9d:
f5:91:79:59:05:6c:12:d0:b8:59:28:cf:f1:3e:4a:b7:e6:99:
f0:01:41:ce:9c:5f:2e:86:b9:37:c9:e7:c1:99:25:f9:96:eb:
22:4e:4d:33:1a:53:13:9d:7d:a7:31:93:83:af:a8:6a:19:94:
0c:dc:86:75:b7:31:06:b5:32:64:2b:a3:eb:2e:81:1c:e1:6a:
b4:96:56:f5:91:2d:eb:59:50:fa:47:e0:7e:bd:39:71:a6:49:
94:94:d8:9a:33:1d:e3:e9:80:a7:d5:cd:75:80:e6:ff:35:9e:
22:69:62:d8:f9:70:78:6e:bc:5e:e9:92:4c:d8:54:e3:39:0e:
89:64:53:59:90:78:9b:04:f1:51:33:46:e9:da:8b:cd:bd:92:
ac:74:4a:b1:fa:31:d9:20:01:77:d3:8e:06:73:aa:28:fd:23:
53:b7:4b:3b:58:cd:30:89:96:a8:4f:26:11:be:5f:a2:bc:5a:
47:eb:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:42:00 2025 by rpki-client