Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/w6VQkWyABp1iT28pR8M_-EWIrJI.roa
File: w6VQkWyABp1iT28pR8M_-EWIrJI.roa (raw, json)
Hash identifier: 1sOSqfYstTOWrJcxinYvgbRYCqJZTZIopKR9MIKEOOI=
Subject key identifier: C3:A5:50:91:6C:80:06:9D:62:4F:6F:29:47:C3:3F:F8:45:88:AC:92
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 019421B248D3748A20E7E962B36013B02819
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/w6VQkWyABp1iT28pR8M_-EWIrJI.roa
Signing time: Wed 01 Jan 2025 11:48:39 +0000
ROA not before: Wed 01 Jan 2025 11:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216386
IP address blocks: 2a07:2486:ed0::/44 maxlen: 44
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:48:d3:74:8a:20:e7:e9:62:b3:60:13:b0:28:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3a550916c80069d624f6f2947c33ff84588ac92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:fa:e9:d6:7d:bf:07:e9:bb:e4:7e:06:7f:21:
d9:40:b4:b4:63:c4:03:28:c1:ce:62:a9:fb:2e:22:
b0:1d:a0:44:1e:91:70:0f:bd:88:76:aa:0b:c4:61:
c3:4c:56:23:8d:c8:cf:bc:5e:56:d8:44:3b:a8:30:
05:f6:ab:8d:42:44:74:f5:fd:4b:86:46:ee:a9:d8:
44:17:b4:4a:51:36:3d:ca:71:3d:5a:62:6a:73:90:
61:17:c5:f0:e3:49:3d:56:fb:1f:d5:ee:07:6e:80:
a5:27:ee:33:b9:f0:e3:1d:69:80:06:5f:44:7f:b9:
4a:bc:4b:11:55:5d:23:5b:e7:e8:d6:65:ca:41:e3:
88:4c:6e:b8:05:da:de:a5:15:ff:96:46:5b:81:ce:
e7:ab:9b:e6:24:93:d6:07:bf:9e:1b:ef:4b:b1:60:
20:c5:55:63:d7:96:a0:10:75:23:23:1e:c8:3c:76:
a1:a2:b5:05:40:95:c7:af:07:1e:f7:2c:dd:73:2c:
86:45:e3:0b:6c:38:53:f6:4e:09:3d:b7:e2:8e:c3:
e6:35:18:ba:d1:65:7b:9d:e9:18:4e:e4:1f:57:19:
4d:eb:71:62:f2:7a:2c:e5:b8:0f:31:86:0b:20:d7:
da:3f:d5:cf:a4:35:cb:8f:48:f1:c5:6a:ba:d3:4a:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:50:91:6C:80:06:9D:62:4F:6F:29:47:C3:3F:F8:45:88:AC:92
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/w6VQkWyABp1iT28pR8M_-EWIrJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ed0::/44
Signature Algorithm: sha256WithRSAEncryption
44:10:05:21:86:bd:66:3a:97:e9:be:30:c0:f3:33:f8:5d:a0:
66:a6:8b:aa:cf:d6:94:1a:bc:5b:29:0a:d9:45:31:32:01:c8:
07:b6:5b:9a:8e:f3:72:f7:65:21:c8:6a:a7:87:0a:17:cb:3c:
ed:80:ce:50:2e:82:23:3a:89:8e:70:d6:0d:b0:00:97:c2:e5:
56:4a:86:97:67:f8:45:79:d1:40:d8:9a:be:31:73:d9:23:d0:
81:f2:5e:a7:87:cb:49:b0:93:dd:8d:5e:65:ab:7b:66:ae:6e:
cb:78:36:3d:2d:0c:c5:48:89:d4:ff:93:60:53:19:fa:d4:a7:
87:a3:f3:f5:0c:01:b4:47:3b:0f:af:e5:34:9d:16:79:59:cd:
4d:bf:fc:d2:0b:76:61:d5:e4:22:65:09:db:8c:6a:2c:6c:c9:
82:c2:92:af:47:01:93:99:d5:eb:38:0c:b3:a9:b1:b5:d8:10:
b9:fa:5a:10:2e:da:b6:a4:8b:26:fc:a7:f1:91:b7:99:c6:e3:
7a:00:ba:84:c3:4b:fb:8b:ae:10:f9:fe:d6:b2:aa:ac:7d:b2:
e7:44:45:e3:48:6b:65:0d:a5:e7:98:82:8c:26:ee:f3:c2:45:
2e:45:f2:df:05:c3:10:d2:ac:dd:be:56:cc:a8:0b:cb:30:22:
5d:64:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:12:48 2025 by rpki-client