Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/bgC3FwHo7U73KR5plg9vICVsOcw.roa
File: bgC3FwHo7U73KR5plg9vICVsOcw.roa (raw, json)
Hash identifier: R0Ey8vN1w9SSs9iQtrx7K49TThiaB2JI08vxCxyiEE0=
Subject key identifier: 6E:00:B7:17:01:E8:ED:4E:F7:29:1E:69:96:0F:6F:20:25:6C:39:CC
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 0193B42B15B4EB56F86C4A91B36475F44695
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/bgC3FwHo7U73KR5plg9vICVsOcw.roa
Signing time: Wed 11 Dec 2024 05:22:22 +0000
ROA not before: Wed 11 Dec 2024 05:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 150289
IP address blocks: 2a13:a5c5:f100::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b4:2b:15:b4:eb:56:f8:6c:4a:91:b3:64:75:f4:46:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Dec 11 05:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e00b71701e8ed4ef7291e69960f6f20256c39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2c:81:28:b9:e2:8d:be:53:54:a7:0c:19:e2:
f7:68:b2:75:dc:33:d9:7d:19:b1:9b:b2:38:42:2c:
bc:cf:d2:09:58:93:dc:3f:8d:19:cb:c8:7b:ff:4a:
93:1a:e2:62:37:97:44:ea:8b:35:6d:f8:1e:dd:0a:
37:ad:cf:40:38:f3:c0:b2:73:7a:c2:d2:a4:3f:70:
33:25:30:a7:4e:94:7a:08:8b:79:7f:6e:78:ab:2e:
9c:3d:60:3b:f6:29:51:7a:b4:ff:bb:58:57:41:60:
ef:c0:a5:13:ab:2c:b6:3e:d4:15:48:84:13:19:a4:
fe:a6:f7:cf:80:21:69:b3:48:f8:83:14:7d:dd:0e:
19:22:18:34:18:57:7d:2e:7a:68:d2:d2:73:33:f7:
f4:43:12:6e:4e:1e:b0:3f:b0:fa:90:4a:7b:18:65:
ba:9b:fc:19:a8:d3:b9:ef:15:8a:80:68:ae:e1:88:
05:e2:07:aa:e8:42:0d:70:3f:92:6a:88:54:38:9f:
19:2c:a3:28:80:04:86:e7:53:cb:f2:d5:83:3c:f0:
63:c1:f6:fd:9d:49:00:94:de:33:45:8c:a1:05:ec:
06:70:23:47:14:8e:5d:62:0b:e8:1e:cb:74:e0:c4:
b8:9a:88:fa:9a:53:30:0c:21:c3:58:bf:e4:11:25:
cf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:00:B7:17:01:E8:ED:4E:F7:29:1E:69:96:0F:6F:20:25:6C:39:CC
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/bgC3FwHo7U73KR5plg9vICVsOcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c5:f100::/40
Signature Algorithm: sha256WithRSAEncryption
73:3e:90:c6:0c:b5:77:40:ab:2c:eb:a9:de:93:bb:c8:bc:31:
e4:a7:37:4d:a8:2f:a4:9c:0d:7d:1e:22:c9:4c:c0:2f:ac:28:
7a:e9:94:98:10:8a:6d:9b:3b:33:13:01:c7:f7:09:40:9a:ed:
93:ec:99:51:70:7d:63:03:56:0d:c1:38:f5:02:c2:90:8a:99:
51:3e:0f:e1:65:49:66:de:80:f6:6a:4c:4d:5e:c5:c0:12:22:
c6:83:01:40:2c:81:26:bd:b1:1a:68:52:b8:0f:76:eb:e5:79:
2a:37:83:b8:65:8d:0f:58:95:fd:0a:d6:a9:82:2f:53:0e:9a:
d6:9a:e4:d6:fe:20:b8:ac:1d:ab:f4:76:67:88:ca:be:b4:da:
83:b0:99:b2:b0:94:24:e4:cf:fa:57:3e:08:0d:f9:dd:da:0f:
59:09:f2:fe:e5:55:fc:1e:9d:e5:6f:b6:b4:72:3c:19:09:2c:
6b:31:62:d9:e5:0d:3d:6d:00:d7:a1:53:ff:99:7a:b2:9a:9d:
88:b2:cf:68:8a:ef:3e:21:e4:c0:62:56:ac:32:e9:5e:b7:c2:
1b:f7:70:59:09:5c:19:b3:bc:38:4d:fe:89:46:78:77:ec:6b:
74:68:71:3e:e7:c7:3c:db:06:41:ce:f2:01:8c:68:db:2c:1b:
25:e4:2f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:54 2025 by rpki-client