Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BQZxXu5UGLgDrbUmYdmtHFfkwok.roa
File: BQZxXu5UGLgDrbUmYdmtHFfkwok.roa (raw, json)
Hash identifier: cMQZH8cYkU9GXTXJkXpuqFqumgxceTAMGNUhn6NklN4=
Subject key identifier: 05:06:71:5E:EE:54:18:B8:03:AD:B5:26:61:D9:AD:1C:57:E4:C2:89
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 018CC94E2F306102FD4401F460113679FF25
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BQZxXu5UGLgDrbUmYdmtHFfkwok.roa
Signing time: Tue 02 Jan 2024 08:33:13 +0000
ROA not before: Tue 02 Jan 2024 08:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15890
IP address blocks: 2a00:ec83::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:2f:30:61:02:fd:44:01:f4:60:11:36:79:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Jan 2 08:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0506715eee5418b803adb52661d9ad1c57e4c289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c0:21:e8:3d:3f:5a:77:95:06:55:7b:0b:1c:
8b:ba:77:aa:7d:2f:9d:6a:06:d8:8f:7d:8a:f9:d4:
10:94:c4:20:a3:f6:04:57:d6:8c:b3:60:1c:de:40:
85:70:e7:7c:15:c5:af:19:f7:15:6b:2c:fe:56:f0:
c7:ba:36:24:5d:87:77:13:f1:75:a5:15:3a:8a:1d:
9c:a6:bd:48:6e:b7:20:1c:89:50:11:6d:f5:cb:57:
dd:22:7b:6f:4c:f3:f4:fc:d8:01:19:34:d6:a9:62:
d1:79:60:75:17:34:b3:4f:24:f9:4e:cf:ec:ad:28:
cb:c5:94:60:ef:04:40:3b:3a:67:c6:1c:9f:63:f5:
96:b9:21:98:1b:02:f9:66:06:10:6a:65:00:dc:e5:
fc:97:0a:1c:7b:c9:c8:ee:05:8b:b5:8e:04:aa:e1:
f6:c1:c4:ec:16:2c:82:28:a9:4a:9f:50:46:5e:b9:
ed:19:5c:4b:7c:4b:48:41:fa:9d:a8:96:e8:64:84:
5a:64:4f:36:40:96:42:0c:48:1e:32:ba:85:63:fd:
92:6f:e2:f9:36:82:95:04:01:06:53:51:3f:f1:64:
0c:f0:d4:3b:09:4c:31:17:01:8f:4a:5f:08:42:a1:
b0:7b:8f:63:c6:0a:f8:8c:d9:01:30:08:03:b6:2d:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:71:5E:EE:54:18:B8:03:AD:B5:26:61:D9:AD:1C:57:E4:C2:89
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/BQZxXu5UGLgDrbUmYdmtHFfkwok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ec83::/32
Signature Algorithm: sha256WithRSAEncryption
2c:b1:15:41:db:6c:dc:ee:a8:03:15:9a:4b:23:ae:bd:03:e0:
2e:ec:83:cf:39:38:0d:87:df:e1:ed:a3:74:ad:71:0c:ba:36:
15:27:f8:28:29:c0:ce:44:67:45:6c:d5:26:ed:0d:0b:b3:3c:
1a:52:bf:36:cf:67:1b:d6:04:da:48:4c:77:5c:ea:28:3e:19:
d5:48:25:c9:b6:91:e2:0e:04:20:42:82:48:cb:41:0c:45:3c:
c7:6c:65:90:24:78:c5:25:5f:75:09:2a:0e:75:66:a5:54:13:
28:ca:51:a7:bd:50:84:3d:03:c4:12:ac:b1:3a:c7:b4:db:29:
44:96:79:bf:a1:2b:00:a6:b6:4b:78:97:84:76:8e:2b:3f:6e:
a0:0c:56:b4:aa:7a:93:46:34:77:b8:80:7c:bb:7e:80:a4:51:
3e:17:e0:66:cd:1a:ce:d0:56:73:26:3c:72:d9:84:a9:55:56:
7d:1d:15:5e:41:74:61:b2:a7:a7:b7:b9:ef:e8:a5:e7:2a:54:
6d:ad:93:d3:bf:a7:d2:ae:10:4a:ce:d1:23:4d:fd:42:69:81:
86:e1:df:b1:88:3f:00:3c:f2:ea:5a:85:32:8b:8e:87:0e:0d:
41:76:60:71:a5:f6:b7:1c:14:cb:8e:59:b1:ce:16:4e:6f:ef:
c1:ea:f7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 11:10:57 2025 by rpki-client