Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Frg6qxLzoKpVEJpc9Qa-cMwXrSE.roa
File: Frg6qxLzoKpVEJpc9Qa-cMwXrSE.roa (raw, json)
Hash identifier: Bhr3O46m2bfkcZ8zicRMptY0CQO94ipfD7t2JIMVS94=
Subject key identifier: 16:B8:3A:AB:12:F3:A0:AA:55:10:9A:5C:F5:06:BE:70:CC:17:AD:21
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 01937421769AA022BB03EEE6A325F3DB9FDC
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Frg6qxLzoKpVEJpc9Qa-cMwXrSE.roa
Signing time: Thu 28 Nov 2024 18:56:10 +0000
ROA not before: Thu 28 Nov 2024 18:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:e881:7700::/40 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:74:21:76:9a:a0:22:bb:03:ee:e6:a3:25:f3:db:9f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Nov 28 18:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16b83aab12f3a0aa55109a5cf506be70cc17ad21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0d:de:0c:09:7b:8a:74:20:44:63:3a:69:50:
9b:2c:73:77:bc:79:d5:4d:29:d5:72:60:dc:1d:dd:
4b:ff:20:2a:9c:47:39:1a:e5:94:77:68:30:96:4b:
d7:43:f1:6a:d8:1b:49:fd:bb:0a:be:95:de:99:5b:
1d:a0:8d:0a:83:92:f1:ab:d5:eb:81:b9:6e:1f:b0:
71:09:37:16:e5:88:54:c5:dc:9b:e7:cb:6c:69:5d:
18:67:80:3c:28:2e:d4:3a:8b:16:eb:7f:f3:95:65:
df:d8:35:2f:a7:ec:8f:01:13:79:6a:09:82:4e:16:
00:4c:74:c9:25:86:6e:17:ef:19:77:d9:0f:36:43:
ad:ed:bc:59:63:86:cb:16:86:6c:44:ec:33:23:67:
d3:03:42:3e:d3:77:e5:22:56:5b:81:42:b5:72:b6:
e2:7f:33:f8:4a:2c:29:48:1f:c0:a3:46:e1:a8:d6:
69:95:cd:a0:4d:82:ad:d6:79:d9:c1:83:e0:6c:98:
16:72:59:21:ef:cc:27:d6:5b:be:06:86:fd:e2:b2:
44:db:3a:d4:54:62:b8:86:3e:a8:8c:7b:13:b6:e3:
ca:77:d6:69:dc:26:c7:b3:af:c0:75:9d:45:fd:a0:
fc:2c:7c:b0:f0:1e:e3:4b:ca:3c:06:6c:f3:b1:92:
ba:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B8:3A:AB:12:F3:A0:AA:55:10:9A:5C:F5:06:BE:70:CC:17:AD:21
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Frg6qxLzoKpVEJpc9Qa-cMwXrSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:7700::/40
Signature Algorithm: sha256WithRSAEncryption
99:6b:18:40:92:fc:a6:21:1e:10:5f:a6:92:24:15:f2:74:7f:
39:af:3b:a7:f8:cd:04:0d:b3:34:b2:ec:45:ea:f3:c5:01:1e:
49:54:a5:a8:e8:2f:9f:9a:43:f4:20:6c:b0:58:bd:89:b7:7d:
c6:24:b4:92:9d:cb:f9:21:0b:41:dd:35:73:0f:5d:ed:bd:be:
51:5c:90:12:1a:a5:3a:c1:8d:83:aa:0e:6c:a6:74:86:29:b2:
03:d6:65:67:98:57:35:7b:f4:9a:fa:76:57:4b:52:d4:05:96:
df:a6:9e:eb:8a:fc:69:0d:0b:63:d9:9a:c0:66:4a:f3:67:5d:
7b:27:bc:db:58:36:d3:ce:93:06:7c:78:27:3f:f4:81:b0:5e:
55:b4:13:d9:a9:76:0f:40:14:8a:9d:74:51:46:be:01:37:bf:
d2:51:62:c3:6d:b5:76:07:f1:46:d0:10:a6:94:df:d1:05:42:
ec:32:ce:a5:70:27:cb:7f:9d:41:4a:5e:04:3f:05:13:bf:77:
34:00:b4:0c:ed:cc:18:5f:b9:92:13:6a:a3:0b:42:07:86:6f:
13:06:68:98:b1:cf:8d:98:1d:27:a3:3f:66:ea:b3:22:0a:9e:
6a:75:0b:01:08:e5:48:57:8d:22:06:01:82:db:1f:a0:5a:cd:
70:89:1d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:11:00 2025 by rpki-client