Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/Y_OR8ANZFIL87NEexBLfDZgo3c4.roa
File: Y_OR8ANZFIL87NEexBLfDZgo3c4.roa (raw, json)
Hash identifier: nr40qAmEjXaaInvRHNy6h9ClcG24P8cnk+QkcqnfIJU=
Subject key identifier: 63:F3:91:F0:03:59:14:82:FC:EC:D1:1E:C4:12:DF:0D:98:28:DD:CE
Certificate issuer: /CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Certificate serial: 018CC2DB4E832E092C72946B86F26A84BE49
Authority key identifier: F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/Y_OR8ANZFIL87NEexBLfDZgo3c4.roa
Signing time: Mon 01 Jan 2024 02:30:01 +0000
ROA not before: Mon 01 Jan 2024 02:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216333
IP address blocks: 2a13:d6c0:20::/48 maxlen: 48
2a13:d6c0:110::/48 maxlen: 48
2a13:d6c0:100::/48 maxlen: 48
2a13:d6c0:101::/48 maxlen: 48
2a13:d6c0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 10 Jan 2024 08:51:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:4e:83:2e:09:2c:72:94:6b:86:f2:6a:84:be:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f618619ae3c9b59d868bcdfcc7e73d813f8504e5
Validity
Not Before: Jan 1 02:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63f391f003591482fcecd11ec412df0d9828ddce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:3b:e1:3c:2a:d5:1d:12:70:42:9a:1a:e1:
c9:27:98:4f:2a:97:b2:f2:69:4a:15:f9:c7:18:fd:
c3:37:b3:1e:10:b3:23:17:75:98:24:24:11:cb:c5:
5e:73:2c:fc:17:7d:31:27:fe:e4:41:c7:85:d2:bf:
f3:27:d7:74:60:eb:72:6a:70:60:bd:85:51:82:29:
83:71:46:52:af:64:5f:99:34:45:86:7a:c1:a7:5e:
5a:ce:e2:16:d2:ee:f3:90:75:2f:ab:0a:29:5f:f7:
25:fb:f1:85:3d:2f:b5:bf:b6:96:68:48:ca:d1:32:
ad:01:fd:5d:89:bb:d0:24:fe:11:1d:74:49:17:7e:
0a:49:5f:78:88:d6:e4:4f:38:cb:43:73:82:e7:3e:
32:00:67:65:b9:09:04:2d:d2:ac:19:dc:3e:18:0a:
9c:b7:f0:9f:44:a2:9b:31:8b:5f:55:08:76:4c:16:
f0:85:0c:c9:75:66:0f:47:a6:11:71:7c:6a:9c:60:
3c:eb:b6:2f:5b:44:5b:34:fb:db:c5:a5:f6:e6:19:
7f:03:b3:bb:75:46:63:2e:ae:27:54:c0:99:2f:32:
63:db:cb:5c:10:a7:97:7d:b9:7d:f1:dc:5c:14:94:
31:cd:81:e8:4d:ff:b5:e4:fc:87:34:e4:d0:c5:7c:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F3:91:F0:03:59:14:82:FC:EC:D1:1E:C4:12:DF:0D:98:28:DD:CE
X509v3 Authority Key Identifier:
keyid:F6:18:61:9A:E3:C9:B5:9D:86:8B:CD:FC:C7:E7:3D:81:3F:85:04:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9hhhmuPJtZ2Gi838x-c9gT-FBOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/Y_OR8ANZFIL87NEexBLfDZgo3c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/9f5105-12d7-4f6b-9d0d-d977b389d5ab/1/9hhhmuPJtZ2Gi838x-c9gT-FBOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d6c0:1::/48
2a13:d6c0:20::/48
2a13:d6c0:100::/47
2a13:d6c0:110::/48
Signature Algorithm: sha256WithRSAEncryption
1f:18:14:9f:53:be:ed:10:5d:07:75:41:2a:b2:03:85:fa:cb:
94:75:51:72:34:a4:e9:62:54:01:89:c7:6b:e0:e2:e3:93:92:
24:da:1c:2d:66:6b:94:cd:24:42:2e:ec:8b:3e:e1:37:25:4b:
8c:3a:9c:2a:8f:af:d8:15:b1:30:45:5c:73:99:b6:da:99:0d:
0b:5f:b6:94:c3:11:b5:e0:08:10:6a:54:01:bb:d6:e2:f1:ee:
9f:35:74:1f:df:4c:8e:ed:f7:dd:39:fe:c5:ed:57:38:3c:d0:
b0:fd:3c:f2:bd:b0:cb:bf:98:4a:eb:7b:cf:ee:eb:35:fc:d9:
99:77:3d:30:75:82:58:3f:d2:dc:90:df:67:63:fc:e1:9a:d8:
c1:1b:81:fb:34:c4:98:af:36:94:10:1a:cf:9e:53:10:70:a6:
2b:12:43:d6:c9:59:8c:5e:a7:87:65:9e:85:07:a7:ff:49:fe:
41:50:0b:df:e0:14:3b:54:0b:b1:3d:88:9d:88:b6:ec:44:b2:
b1:13:d4:d1:87:43:66:68:ba:ae:55:1d:7b:55:f4:74:01:e2:
82:f1:86:66:f6:b7:2d:d1:4f:3d:6f:29:71:30:d2:0c:0f:39:
59:d8:20:ec:e1:60:bc:63:25:2f:49:70:70:d6:4a:4c:33:17:
b3:5e:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:00 2025 by rpki-client