Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/6NbTPqYWZkIGnDIVt6hv13WHjF8.roa
File: 6NbTPqYWZkIGnDIVt6hv13WHjF8.roa (raw, json)
Hash identifier: 2aYH2RIL1VDFtb/zmoP9Huv31AZDcUx752I9yDVfV58=
Subject key identifier: E8:D6:D3:3E:A6:16:66:42:06:9C:32:15:B7:A8:6F:D7:75:87:8C:5F
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0194266BA912CC4649508F022F49306B56EC
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/6NbTPqYWZkIGnDIVt6hv13WHjF8.roa
Signing time: Thu 02 Jan 2025 09:49:37 +0000
ROA not before: Thu 02 Jan 2025 09:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214345
IP address blocks: 2001:3a80::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 17 Jan 2025 10:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a9:12:cc:46:49:50:8f:02:2f:49:30:6b:56:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jan 2 09:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8d6d33ea6166642069c3215b7a86fd775878c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:90:20:c0:31:31:cb:a6:b0:e9:aa:f1:57:
e7:7d:d5:d9:e2:5d:91:d9:10:4b:56:a4:01:ba:f8:
9b:6e:59:ed:49:6d:41:cb:62:a3:3f:f2:6f:2b:7a:
f3:31:3b:78:78:ad:15:91:25:0f:70:fb:95:55:f5:
57:0e:e8:4a:28:f2:5f:41:64:ae:dc:da:05:63:f9:
ae:11:0e:da:76:98:34:c1:31:14:5b:56:3f:02:d7:
dd:5a:97:69:c4:df:5b:09:e8:0e:f3:ae:43:e8:64:
0b:1a:a1:17:61:ef:a2:a8:c4:45:76:0a:3f:70:14:
5c:65:15:3f:70:ec:52:89:07:6d:66:b3:dd:27:6e:
66:57:3e:a1:bb:52:63:38:7a:f3:7e:89:c6:6a:8b:
34:12:2d:5a:1f:09:27:45:9e:f3:73:9a:ba:df:68:
5c:45:69:d2:79:7c:4a:9b:83:25:b3:54:f6:a3:25:
00:51:32:a1:ea:3f:e0:01:62:03:22:ff:01:ec:01:
fc:a1:c5:fb:c2:1a:e2:09:9e:4f:35:60:80:18:3d:
9e:3d:2f:3f:92:13:bf:b4:d1:a2:01:4a:78:b8:f7:
28:fd:8e:4d:6a:e9:6e:3b:66:c3:d6:41:de:8c:46:
ce:d9:46:4e:76:9e:29:78:31:2f:3f:e5:4c:7e:1d:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D6:D3:3E:A6:16:66:42:06:9C:32:15:B7:A8:6F:D7:75:87:8C:5F
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/6NbTPqYWZkIGnDIVt6hv13WHjF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3a80::/29
Signature Algorithm: sha256WithRSAEncryption
31:ff:a0:61:1c:23:5c:59:dc:42:ee:f5:11:7f:04:de:7b:d3:
3b:2c:ff:9a:bd:06:1b:62:78:c5:4e:f4:35:63:65:2a:de:bc:
86:6d:b0:f6:92:d6:a4:c8:5c:fb:d6:f4:43:bc:31:ca:dc:53:
b6:f2:a2:9e:65:fb:e6:e3:3f:f5:78:ea:fe:c0:d2:de:a4:31:
75:00:3c:cf:36:60:21:9e:ee:1f:68:50:27:ac:a4:11:46:47:
14:a4:02:d0:02:72:f7:89:18:53:53:0b:fd:4e:c0:8c:51:8a:
79:e3:9a:81:cd:5f:a3:3a:b4:ef:c5:7d:76:64:7b:ca:47:98:
93:a2:89:5a:e5:c2:ce:0e:ad:17:f6:6d:c2:e2:fd:0f:42:ff:
67:9e:3d:07:33:f3:a8:19:e4:e0:e9:bd:e0:04:d9:2b:fa:09:
c4:6f:d4:e0:7f:d7:6f:b6:b0:4b:4a:b2:f7:65:5c:c9:37:83:
7f:09:6d:9d:79:d2:2f:d4:8a:bb:8c:36:18:52:5a:17:e9:c2:
8b:80:c1:4b:60:21:2a:0e:48:09:47:d4:86:9b:58:68:d0:53:
76:49:19:3e:4d:22:21:e8:39:a5:55:3d:6d:70:f8:67:eb:16:
24:de:c3:b4:99:62:0b:48:be:fe:24:e6:9c:bc:66:12:b1:07:
79:67:6a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:58:39 2025 by rpki-client