Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/FdDKIkjlnXIniB2uxQNB9SJi-SY.roa
File: FdDKIkjlnXIniB2uxQNB9SJi-SY.roa (raw, json)
Hash identifier: 0NXTS18vRB38BackH/uxZMmt6MyAb7IzHjOf71tGw54=
Subject key identifier: 15:D0:CA:22:48:E5:9D:72:27:88:1D:AE:C5:03:41:F5:22:62:F9:26
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019426D98D6CBA4373043EF1426345649C4B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/FdDKIkjlnXIniB2uxQNB9SJi-SY.roa
Signing time: Thu 02 Jan 2025 11:49:39 +0000
ROA not before: Thu 02 Jan 2025 11:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60742
IP address blocks: 2a14:6780:d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 15 Jan 2025 13:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:8d:6c:ba:43:73:04:3e:f1:42:63:45:64:9c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Jan 2 11:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15d0ca2248e59d7227881daec50341f52262f926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:98:08:79:75:72:4b:c4:e2:d5:91:57:8e:
50:20:7a:3c:ef:0d:12:77:39:d1:c4:e6:98:8a:01:
43:ef:a3:53:3f:88:f2:aa:08:66:92:b7:14:66:58:
2c:9b:3c:97:ee:9a:65:78:65:7b:7c:ec:c1:55:76:
0a:0e:3d:45:48:5a:2e:8b:94:d7:bc:2b:ce:1a:3c:
8d:52:99:c4:38:f9:a7:45:44:32:0b:74:12:99:c7:
f9:41:e4:0c:7a:fb:76:bf:6a:b0:42:ad:43:7f:28:
0e:6a:e4:d5:6b:0f:81:9a:e5:f1:81:6a:4e:42:b7:
1d:ad:8b:8f:3f:19:8a:2f:42:a8:e4:33:d3:68:1a:
11:e4:fc:54:a3:3e:ed:5e:ba:fe:1d:b6:4a:02:6f:
63:c6:32:c8:60:37:58:d4:0a:59:2d:4d:3c:76:98:
47:7f:60:23:cd:f1:4b:2a:63:05:ae:e3:20:41:5c:
c7:4b:a8:9f:0e:c0:82:24:61:5c:56:2f:35:28:b8:
d8:ab:c2:9c:ac:c3:fe:1d:9e:88:31:89:37:e8:d6:
aa:b4:6b:07:d4:16:27:b9:a5:4c:8c:58:12:b4:63:
ad:80:4d:a8:ad:15:ab:ac:7a:64:ef:fc:9a:8e:c0:
36:7e:cc:6b:3b:76:6f:ba:84:7a:b5:16:64:3e:6e:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D0:CA:22:48:E5:9D:72:27:88:1D:AE:C5:03:41:F5:22:62:F9:26
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/FdDKIkjlnXIniB2uxQNB9SJi-SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6780:d::/48
Signature Algorithm: sha256WithRSAEncryption
0e:dd:58:7c:8a:b7:be:af:51:e7:9d:cf:8e:a8:c5:7a:af:0d:
9d:61:cd:8e:1a:6f:78:54:ff:d0:9c:75:b1:91:36:cf:18:3e:
5e:80:df:bf:86:7f:92:bc:1b:9a:d5:18:8f:a9:a5:d7:36:ca:
cd:6c:d1:79:4e:04:b9:37:08:29:e3:b8:cb:97:a9:8e:44:95:
e7:33:d8:e4:41:dc:6d:cf:4e:df:3b:5b:85:d3:0d:e2:99:46:
5e:93:66:76:83:2f:d8:3d:40:bb:48:14:bc:74:0d:8d:1a:7d:
97:2e:f6:d4:60:ae:cb:38:36:a9:59:55:57:97:37:a6:01:b2:
42:a3:c1:fc:f1:1d:b4:5b:cb:5d:be:01:84:f0:54:3e:a2:26:
af:e7:60:7a:48:82:64:d0:e4:99:0e:e8:a8:45:7d:3a:5e:af:
d7:4e:4f:5e:c3:ea:12:f7:70:3e:f5:59:e9:06:b9:68:5d:51:
62:0a:af:7d:cf:4e:1c:67:9e:23:07:b0:8d:07:bd:bf:12:23:
01:69:9a:6f:0c:3f:25:99:fc:04:5a:1b:56:ce:c8:19:1f:31:
26:5a:20:c8:f8:76:59:3d:19:3f:a4:46:89:09:9f:75:ed:fe:
cd:85:b7:9f:62:d7:3f:8d:67:67:5b:22:b2:18:ea:31:d4:92:
bc:19:48:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:25:19 2025 by rpki-client