Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/SNxIRDDKJ4cvsaOzertR8hKBbmE.roa
File: SNxIRDDKJ4cvsaOzertR8hKBbmE.roa (raw, json)
Hash identifier: LQNHiM296S9xl4RaP59ueRgcB9VnwSa2/OGwscUXVbs=
Subject key identifier: 48:DC:48:44:30:CA:27:87:2F:B1:A3:B3:7A:BB:51:F2:12:81:6E:61
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 01941F8C10F0B8861EB05ADABFACD32BB06D
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/SNxIRDDKJ4cvsaOzertR8hKBbmE.roa
Signing time: Wed 01 Jan 2025 01:47:40 +0000
ROA not before: Wed 01 Jan 2025 01:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47540
IP address blocks: 2a13:cfc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 Jan 2025 13:36:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:10:f0:b8:86:1e:b0:5a:da:bf:ac:d3:2b:b0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48dc484430ca27872fb1a3b37abb51f212816e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:02:90:b4:74:c5:99:22:ba:31:7f:dd:39:
b4:55:a6:62:4b:da:48:30:07:c5:dd:b9:44:a8:a0:
94:0c:24:db:d8:d5:43:d8:86:a8:1a:6b:08:da:06:
9b:b7:64:5c:ad:90:7b:b7:4e:0d:38:b1:d6:2a:ad:
a4:e1:3d:fa:b5:a6:2a:ac:e1:55:6d:3e:ad:fb:c5:
c4:39:4b:c4:2c:80:c7:39:70:bb:b8:6f:e8:07:7d:
75:df:99:32:69:a4:49:00:bd:eb:2f:3c:3d:bf:5d:
b1:fb:fc:27:c4:b9:2e:61:01:96:19:37:27:41:4c:
7e:85:d8:30:ca:6a:dd:86:72:9a:73:2c:14:fe:14:
7f:a7:9d:1d:8f:de:f5:9d:42:ae:57:18:24:43:bb:
6a:bb:0c:fd:57:24:fb:b4:8b:c7:ab:22:a1:e6:42:
34:c1:66:24:3c:f6:bc:20:dd:bf:ac:17:7e:cf:86:
52:77:40:6f:07:0c:2a:2b:79:44:6e:5b:6c:3a:97:
fc:a2:b8:11:d5:3b:43:a0:ee:db:82:b4:23:46:b6:
f6:8d:ae:52:7b:db:ca:b9:ba:ed:ce:f1:f6:47:fc:
7f:cd:95:e9:99:df:c5:fd:ca:62:cf:c2:16:97:f0:
5f:c8:0b:63:e1:ee:61:16:43:63:87:df:5b:8e:11:
d2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DC:48:44:30:CA:27:87:2F:B1:A3:B3:7A:BB:51:F2:12:81:6E:61
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/SNxIRDDKJ4cvsaOzertR8hKBbmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cfc0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:67:16:d2:64:b0:6e:96:52:71:bf:25:75:d5:9b:11:dd:22:
9f:61:80:40:4c:24:e5:5c:a8:e5:84:3c:95:d4:95:45:0f:48:
6f:37:38:a2:c2:57:0e:3f:1b:6f:4d:1e:0d:10:ea:6e:e4:6f:
93:b2:cd:9f:2c:43:48:f7:3a:9e:cc:82:13:e3:81:91:54:48:
53:3c:27:66:be:3f:3d:bf:f9:f1:b6:bd:88:9a:a3:a3:96:81:
cb:66:b0:e5:99:fe:58:dc:7b:0b:8a:be:ed:0a:aa:71:93:8d:
2c:2f:97:5d:cf:5d:04:bf:2e:63:a8:74:da:9b:05:c6:8e:f1:
94:f3:a8:47:bc:21:c1:20:6f:c2:dc:d1:b8:f3:3e:81:10:c1:
57:91:4d:4e:2f:af:cf:db:39:d6:dc:52:35:4f:1f:b3:2f:36:
c3:6a:fc:38:62:a7:f3:38:3a:cc:29:0a:12:fa:3f:88:20:2e:
d6:bb:f8:0e:7e:08:8f:27:7c:6a:fe:6c:e1:07:3f:b8:93:b6:
75:ab:9d:a7:b7:e9:a8:b7:8b:77:79:c0:af:86:9c:70:23:ce:
50:d3:b1:85:d9:e9:7c:7b:43:13:9d:d7:f8:e6:09:a7:1c:90:
b8:5e:8f:87:e4:ea:5b:bc:83:26:3d:a1:2d:d9:8f:65:c5:a2:
00:71:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:51 2025 by rpki-client