Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/LnzNVb1RqxyeqztuxbHs4nPjpxY.roa
File: LnzNVb1RqxyeqztuxbHs4nPjpxY.roa (raw, json)
Hash identifier: WtoUG7G0/jx/1eOYvKJgW+Y9TtsA1WHdtGdiOfwtYBk=
Subject key identifier: 2E:7C:CD:55:BD:51:AB:1C:9E:AB:3B:6E:C5:B1:EC:E2:73:E3:A7:16
Certificate issuer: /CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Certificate serial: 01942143BDCB69E80837A79884019BA14E5E
Authority key identifier: 6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/LnzNVb1RqxyeqztuxbHs4nPjpxY.roa
Signing time: Wed 01 Jan 2025 09:47:55 +0000
ROA not before: Wed 01 Jan 2025 09:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48296
IP address blocks: 2a13:a8c0:1::/48 maxlen: 48
2a13:a8c0:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 11:45:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:bd:cb:69:e8:08:37:a7:98:84:01:9b:a1:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b41a95b9b941d342d07b8a17d7d835de12c8bf6
Validity
Not Before: Jan 1 09:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e7ccd55bd51ab1c9eab3b6ec5b1ece273e3a716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a0:ff:70:75:50:44:c4:7f:0e:a1:b5:6c:65:
5f:05:ea:a2:ed:07:b8:46:23:15:59:ab:f1:b9:a2:
0a:b1:26:02:81:5b:96:f2:1b:10:c1:10:2c:3e:40:
e2:55:d2:16:5e:dd:76:29:3f:38:1c:57:fd:58:66:
81:93:dc:1a:9a:95:3c:50:14:e8:51:b6:a7:c0:74:
5a:4f:fb:65:f8:fb:3b:81:29:a8:5c:c8:a2:7e:ce:
ca:56:10:4a:12:2c:72:8f:72:4a:70:be:ae:c9:03:
4c:1b:5c:7b:9f:08:73:5c:e4:d7:ae:e0:51:d2:be:
6a:56:16:2a:ef:ff:ee:a3:2c:a8:b1:36:dd:a0:cb:
52:02:91:f7:f6:b7:19:85:38:d5:d4:0f:c1:1f:01:
d1:ee:9f:02:48:d9:a6:c9:0d:dc:fb:41:ff:62:ad:
a6:6c:71:e0:d1:6e:6e:84:13:1f:b1:9c:5a:4e:6f:
c2:5e:cf:72:2a:32:f4:5e:b3:c2:cf:38:ec:af:19:
3f:61:f2:8a:e6:5f:91:25:a4:77:b1:0c:08:03:c2:
8e:86:a4:27:42:3f:fb:49:c8:60:40:dc:06:c1:66:
17:a0:13:27:4d:ae:d9:a0:cb:dd:bf:21:f9:72:73:
2f:4a:18:e8:9a:17:d3:9d:01:b4:8d:74:be:25:12:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7C:CD:55:BD:51:AB:1C:9E:AB:3B:6E:C5:B1:EC:E2:73:E3:A7:16
X509v3 Authority Key Identifier:
keyid:6B:41:A9:5B:9B:94:1D:34:2D:07:B8:A1:7D:7D:83:5D:E1:2C:8B:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/LnzNVb1RqxyeqztuxbHs4nPjpxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7e8110-b37e-441a-998f-9014f72e1a36/1/a0GpW5uUHTQtB7ihfX2DXeEsi_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a8c0:1::-2a13:a8c0:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:04:ec:bd:a0:9b:3d:3c:19:f8:44:44:40:90:18:71:f1:01:
d9:6a:9e:9d:9d:26:b7:f4:52:da:d7:d1:cb:e8:73:14:d5:aa:
98:94:5b:2c:4b:53:64:f6:bb:c7:f6:db:f3:e6:52:b7:c2:a5:
68:a5:b1:2a:5c:94:0d:ec:c2:e7:0d:fe:9e:7e:d5:b6:31:88:
9d:5b:67:f3:c2:bc:64:e6:e5:35:1e:32:7b:32:72:47:5d:8d:
12:ee:e8:f0:d6:04:68:33:27:c0:b1:ea:64:13:d9:6d:f6:2b:
5c:4d:8c:cf:5c:f4:0c:7b:77:ae:74:d8:b7:1a:bb:4d:6e:ab:
0c:02:51:7e:56:e8:47:e7:74:2c:73:3e:70:89:b8:28:6e:05:
ca:d1:9e:fd:28:2e:72:4d:5d:8d:48:22:84:52:a8:8e:f3:c0:
6d:d5:86:45:fc:6c:46:50:37:9a:64:59:17:c9:a5:31:8c:7a:
f6:14:5d:bf:a1:08:fb:dc:ac:ea:72:4a:88:6c:4a:8c:72:15:
36:ad:b4:4c:ad:09:15:5b:72:bf:b9:b2:c6:b9:68:b4:27:b6:
df:c3:fd:3b:ae:fb:68:5a:d2:1d:5e:96:9d:26:0b:b7:54:60:
1e:3b:30:0e:ed:91:f8:8e:87:25:09:11:ca:1a:ff:fa:92:ea:
b6:d3:b5:72
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:15:22 2025 by rpki-client