Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Ve6BAWPv6BXrmsXRiQfLhcmIxHg.roa
File: Ve6BAWPv6BXrmsXRiQfLhcmIxHg.roa (raw, json)
Hash identifier: pzww6RGVmyV1XOrwUWUE2r2Iu9BYyhbNm3kUDnSc62A=
Subject key identifier: 55:EE:81:01:63:EF:E8:15:EB:9A:C5:D1:89:07:CB:85:C9:88:C4:78
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194187614697937A46DD727858F14B2146F
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Ve6BAWPv6BXrmsXRiQfLhcmIxHg.roa
Signing time: Mon 30 Dec 2024 16:46:19 +0000
ROA not before: Mon 30 Dec 2024 16:46:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215006
IP address blocks: 2a0e:8f02:f06c::/48 maxlen: 64
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:76:14:69:79:37:a4:6d:d7:27:85:8f:14:b2:14:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Dec 30 16:46:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55ee810163efe815eb9ac5d18907cb85c988c478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:2c:48:12:d1:22:5a:fd:4c:bf:3c:b0:19:
ae:09:62:d5:5c:c5:8f:ad:9c:ef:77:17:1c:89:bc:
a9:7e:23:d1:38:ed:8c:63:96:8c:0c:4e:0f:6d:4b:
c6:7a:9a:b4:2c:82:1f:bc:71:53:9d:29:ec:f3:6e:
c9:3a:73:6f:94:f2:22:7f:6f:d2:86:fc:4f:ce:a0:
52:52:66:fb:d2:63:27:c5:92:44:64:1d:d7:e4:a8:
24:a3:eb:8e:39:03:73:af:fa:01:05:1a:6f:53:d8:
4d:50:28:98:52:49:9a:53:76:36:65:3b:30:fb:19:
8b:d2:30:92:c4:05:17:d1:07:bc:72:48:5d:18:4f:
0e:c9:44:54:ca:2a:f0:e8:8f:69:c8:bd:b3:ec:8d:
ee:7d:26:52:36:76:e9:c1:e8:66:57:db:a6:4e:46:
b0:b5:b3:9a:7c:0c:ed:c5:7f:33:ea:bf:b0:7c:88:
3f:29:60:d7:b5:ba:31:08:fe:64:ad:a9:c0:90:c5:
a6:d4:59:2b:2a:d2:91:b6:8e:d0:f5:c0:f0:37:98:
6b:e3:82:e5:38:50:6d:3c:12:31:ee:33:12:79:f3:
cf:ad:0c:65:de:07:80:6c:74:02:a3:35:b0:d9:b4:
70:2f:40:ad:76:c8:dd:8b:41:46:46:c7:2b:0c:34:
57:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EE:81:01:63:EF:E8:15:EB:9A:C5:D1:89:07:CB:85:C9:88:C4:78
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/Ve6BAWPv6BXrmsXRiQfLhcmIxHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f06c::/48
Signature Algorithm: sha256WithRSAEncryption
23:3d:44:3f:5d:db:f8:df:95:73:3b:92:69:31:f0:17:6d:7c:
bb:3c:5b:a6:66:37:40:14:b9:2f:7a:b0:16:cd:67:2e:6b:6d:
c6:d3:f9:25:5f:8a:0c:08:8a:2f:07:af:d3:0b:ac:19:65:2c:
a7:09:89:89:c7:83:47:46:30:bd:41:60:7a:b8:d3:21:bb:41:
ad:56:2e:37:19:d6:85:a1:b8:d8:66:89:64:62:2c:4b:41:5c:
27:bd:09:52:73:44:9a:3f:84:88:77:2a:7d:0e:70:4a:7b:9b:
0b:d9:f3:74:0d:12:fe:7a:8e:a5:66:9a:96:6f:6e:e6:92:7d:
4c:6b:d8:de:1e:e1:a2:d8:b8:45:26:d4:49:50:00:9d:e5:ac:
ea:fa:9e:db:2f:d8:ee:d8:79:f9:bb:6e:96:45:28:19:72:49:
84:64:af:ec:27:25:2e:2b:56:5f:ba:ee:9f:9b:56:e6:80:56:
e2:b4:97:11:3e:04:27:7b:8b:7a:c7:d0:05:86:69:3c:b0:e1:
09:b0:92:25:38:81:d9:d8:e6:b4:c1:16:1f:67:2b:e7:b9:e7:
fa:b1:5d:cc:fd:98:29:b7:42:30:d9:d4:a6:44:4c:0e:55:f6:
fe:79:35:ef:cb:45:31:34:42:43:be:ba:7c:b2:44:51:0d:4f:
99:45:02:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:47:22 2025 by rpki-client