Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/W6GQfj6GOw6ceLDzNRAMwjLNQ0M.roa
File: W6GQfj6GOw6ceLDzNRAMwjLNQ0M.roa (raw, json)
Hash identifier: y6qx6h8aqbu+upaLTDNvJ8oucWp8ckDaeI5kjP4v+Io=
Subject key identifier: 5B:A1:90:7E:3E:86:3B:0E:9C:78:B0:F3:35:10:0C:C2:32:CD:43:43
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018CC49370FC3A924FD68F01754ECF9AD96A
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/W6GQfj6GOw6ceLDzNRAMwjLNQ0M.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199829
IP address blocks: 2a0d:2146:8640::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 18 Dec 2024 21:29:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:70:fc:3a:92:4f:d6:8f:01:75:4e:cf:9a:d9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba1907e3e863b0e9c78b0f335100cc232cd4343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:2e:9e:22:cd:55:1c:28:ba:a0:72:ce:0c:
87:51:26:f3:53:d4:49:6a:56:83:d8:c2:78:f1:64:
a8:f5:46:47:fc:66:d1:c0:f9:bf:04:23:6b:c6:df:
f5:2f:b1:72:1f:05:6b:5b:f9:de:8e:1c:2d:1f:e6:
0e:03:7c:bb:b3:71:4f:c7:47:00:14:09:56:df:80:
a6:28:eb:b6:af:8b:2a:2d:4a:73:43:f5:ff:16:7f:
97:a8:5f:75:b0:cd:ed:87:74:21:cb:db:d5:02:71:
24:28:24:9a:50:be:8a:d6:a0:c3:bd:40:3a:03:f1:
33:1d:26:05:93:00:35:23:ae:50:93:83:5a:0a:f8:
76:eb:e4:64:fc:1e:a1:b1:92:24:04:d9:ab:3a:03:
1e:00:c6:74:2c:75:2c:6e:0b:4b:5f:e8:c0:99:d8:
33:83:99:c3:8a:10:21:84:43:d9:39:9d:40:a4:49:
0d:c7:2d:fa:44:28:b7:79:43:62:1a:20:6e:3a:92:
ae:50:f1:c4:e6:cc:c6:9f:73:ca:e2:60:d5:2d:c1:
63:c7:3d:84:e0:6c:0e:ff:bc:17:77:89:39:ff:57:
6a:5f:38:20:42:ca:a1:8d:d4:53:82:38:93:30:44:
ab:9c:ba:5e:f8:68:4e:9d:e0:af:e6:73:74:83:5e:
67:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:90:7E:3E:86:3B:0E:9C:78:B0:F3:35:10:0C:C2:32:CD:43:43
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/W6GQfj6GOw6ceLDzNRAMwjLNQ0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8640::/44
Signature Algorithm: sha256WithRSAEncryption
d2:fc:0b:ca:77:74:90:66:d7:ff:da:35:02:22:97:04:90:02:
55:8b:03:62:c5:ac:ce:88:fe:26:77:4c:cd:99:2f:a9:25:31:
ec:20:45:2f:b8:93:fc:db:2e:42:4d:2d:62:ac:11:0a:b6:4b:
2d:7b:ee:92:94:82:a8:08:7a:bd:b0:db:dd:5c:f9:27:51:bc:
25:0f:14:d5:94:06:e1:d9:c4:87:ef:86:7f:31:48:f8:c3:5b:
a8:02:cc:8e:ab:ae:cc:5d:b3:eb:57:7c:a3:86:c0:18:ca:2e:
21:f1:b0:3a:5d:04:e4:05:bd:af:7f:5f:41:7c:0f:33:e4:67:
31:f4:7e:76:f8:bb:b9:c8:a7:c1:e2:3a:c7:25:fa:06:7f:22:
d4:9d:03:5e:94:68:1a:c5:b7:d3:61:3e:22:d8:4e:71:f0:b9:
f1:0b:7b:28:5b:7d:2e:27:67:d5:68:80:a2:60:5d:d0:32:38:
fa:a0:35:6b:9a:15:2a:ed:32:a6:10:d6:1a:6a:8e:7d:eb:fe:
52:37:b0:8e:14:9d:c3:dc:8b:d0:d0:ed:12:03:9c:c1:61:19:
21:9a:e4:94:66:7a:41:e5:90:eb:8c:e4:29:1d:af:27:3b:27:
77:d3:e6:cf:96:a9:c5:90:29:f7:db:36:f4:1d:12:35:ef:0b:
0b:19:ec:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:44 2025 by rpki-client