Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/bxLloPXyVMMGrflbghAZqe15P68.roa
File: bxLloPXyVMMGrflbghAZqe15P68.roa (raw, json)
Hash identifier: lc+n1agsJ5y9fvUkR8qJ9eb+Udv9jgV5vmhXfECSFus=
Subject key identifier: 6F:12:E5:A0:F5:F2:54:C3:06:AD:F9:5B:82:10:19:A9:ED:79:3F:AF
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 018CC56ECFDA03BAD6BA30855471838158DB
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/bxLloPXyVMMGrflbghAZqe15P68.roa
Signing time: Mon 01 Jan 2024 14:30:22 +0000
ROA not before: Mon 01 Jan 2024 14:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207902
IP address blocks: 2a0e:7900::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:cf:da:03:ba:d6:ba:30:85:54:71:83:81:58:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Jan 1 14:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f12e5a0f5f254c306adf95b821019a9ed793faf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9c:a5:f3:4e:54:4f:58:b1:1c:65:7b:f6:47:
f6:84:a8:b8:dc:e5:11:90:ae:b0:18:7e:b5:4c:b4:
d2:a7:1d:db:70:19:93:f8:a1:12:8a:b9:ef:b4:be:
94:d5:c4:f0:8a:f2:b6:1a:60:4b:fc:b2:b2:1e:69:
dd:6d:48:1a:3c:9b:73:8d:e1:67:d8:9a:99:ce:48:
a7:7e:90:07:39:51:98:95:04:e1:91:e6:66:0f:d1:
a5:49:d9:c2:af:fa:28:02:4e:1c:26:11:8e:0a:67:
60:1d:ee:20:99:b1:05:12:82:8e:b4:cc:df:db:cd:
cc:bd:74:8e:b4:31:ba:77:02:14:ed:7d:97:b7:3c:
e1:1f:3b:5c:f1:28:c6:0d:39:e8:aa:9f:6f:0f:fd:
a5:db:d7:de:c7:d7:96:00:dc:fe:e3:4a:e2:fd:ba:
b7:a6:a9:94:13:20:6f:b6:47:b0:43:e1:5b:7f:05:
09:e7:24:16:53:d8:b8:0d:43:76:a3:37:bb:ed:6d:
7e:97:f7:dc:bf:c1:99:e6:70:03:2c:3e:44:8b:62:
12:d4:a5:57:3a:e5:a6:bb:bf:63:22:75:62:51:1a:
c8:87:43:38:82:c9:3e:2e:9b:b6:7d:55:85:df:05:
14:b2:5b:e0:3c:05:9b:c6:8a:1e:b7:7b:1a:01:17:
60:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:E5:A0:F5:F2:54:C3:06:AD:F9:5B:82:10:19:A9:ED:79:3F:AF
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/bxLloPXyVMMGrflbghAZqe15P68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7900::/29
Signature Algorithm: sha256WithRSAEncryption
39:eb:d4:c6:16:83:e5:65:ae:d6:bb:e4:89:44:76:00:41:dd:
65:3e:dd:b9:91:c1:06:7a:17:cb:8e:a9:49:77:e8:3e:a8:b4:
00:94:9b:b6:22:55:01:d1:f5:0f:d7:91:cb:49:69:75:67:3d:
70:b4:99:d2:fe:9a:d5:9c:05:70:9c:c3:be:82:43:5a:36:b3:
bc:2d:2e:92:1e:4f:49:6b:dc:77:ad:5d:9f:01:45:fd:ca:09:
63:01:31:cf:1c:5d:72:49:23:e7:75:21:2f:1c:ba:b0:d5:a9:
82:1a:77:fa:ed:0c:f7:2b:df:96:ea:ec:f3:15:7e:93:af:53:
ad:3e:7a:0d:a7:4a:f0:99:43:ba:89:3a:82:16:24:38:1b:da:
fc:ac:85:ce:a9:8a:f4:c7:30:64:4a:e8:74:3d:57:98:06:b7:
47:63:94:5f:16:30:10:e0:6e:4a:4f:04:20:aa:bf:50:1d:43:
07:3d:e5:e5:93:f4:52:91:ce:6e:de:25:51:9a:aa:48:81:4f:
a6:b0:0d:3e:3e:87:39:db:fd:a8:df:ac:48:8b:87:63:c3:c1:
29:c5:58:78:92:96:22:b3:df:96:61:13:cd:52:d7:49:c4:cb:
ba:0f:4b:86:bd:81:60:45:a3:d3:3c:6f:be:82:8e:2c:51:c3:
1a:99:80:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 05:53:12 2025 by rpki-client