Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/6brFR0QRmN_DNlSEx2UhdegjDfg.roa
File: 6brFR0QRmN_DNlSEx2UhdegjDfg.roa (raw, json)
Hash identifier: dSBRwpmMPdU+gutCpk/pimZpGQJreluzLs4fLvSkiVU=
Subject key identifier: E9:BA:C5:47:44:11:98:DF:C3:36:54:84:C7:65:21:75:E8:23:0D:F8
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 0191EF89C3546AAD3B4E95D4E1744C9D63BA
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/6brFR0QRmN_DNlSEx2UhdegjDfg.roa
Signing time: Sat 14 Sep 2024 07:57:48 +0000
ROA not before: Sat 14 Sep 2024 07:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214216
IP address blocks: 2a13:8340::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 14 Sep 2024 08:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:89:c3:54:6a:ad:3b:4e:95:d4:e1:74:4c:9d:63:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Sep 14 07:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9bac547441198dfc3365484c7652175e8230df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:25:fe:96:e3:4b:67:69:03:f1:89:5a:c0:
93:01:c4:c3:8f:11:2d:53:0d:9f:bf:6f:50:b4:2e:
8f:07:41:ea:26:e4:2e:a0:d3:0b:4a:8b:13:f2:2f:
5d:62:d3:a6:ff:d0:e5:f5:75:09:9c:b5:c7:bc:79:
88:37:53:ef:f3:af:5b:54:e4:a6:cc:55:6d:cc:fd:
da:02:b6:fb:6a:ee:de:4d:cb:2f:4d:5e:a7:b1:23:
59:d4:73:46:0f:40:2a:f0:f6:08:c8:6d:1a:2b:de:
8e:60:d2:48:19:88:37:e2:40:1e:e1:72:5f:e9:16:
69:58:f8:32:4f:76:9c:b7:ba:c6:0c:d5:ca:95:b8:
aa:48:7b:cc:62:4e:44:1d:25:ce:7c:60:8f:e3:cd:
1d:47:ce:04:4d:d5:bb:e9:a7:8a:38:e2:96:ed:d4:
2d:a7:68:5b:79:d5:10:68:b9:2a:99:ff:b8:93:ef:
c1:1a:f4:1d:34:14:fe:3d:21:0a:1e:07:3f:5f:a7:
02:68:d7:35:af:cf:7d:a5:f8:8e:b0:9a:22:6a:28:
e6:3e:12:01:b9:eb:08:bd:0a:a8:fd:ad:10:56:55:
e9:85:b1:40:06:4e:87:c4:f0:a8:c7:cc:d1:e6:a9:
a2:7d:05:04:63:9c:3c:bc:a1:f1:d9:0c:93:aa:3d:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BA:C5:47:44:11:98:DF:C3:36:54:84:C7:65:21:75:E8:23:0D:F8
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/6brFR0QRmN_DNlSEx2UhdegjDfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8340::/29
Signature Algorithm: sha256WithRSAEncryption
56:03:03:ae:53:5f:e7:d4:df:e5:9c:04:d5:ed:73:17:a9:a9:
bb:60:79:79:8b:be:89:5e:84:28:7f:0b:63:0a:3b:70:02:d3:
c4:eb:c0:d6:4d:68:6d:c9:06:65:01:4f:7a:b0:da:b4:a4:87:
44:33:51:18:f4:fb:9f:6f:3c:5b:e3:83:d1:1b:3a:8f:0c:c3:
85:44:7f:ed:98:42:e1:d1:1c:4e:90:08:8d:eb:c9:cb:4e:e2:
d2:8d:52:19:4d:ba:91:99:93:52:68:10:7c:20:47:bd:69:cf:
aa:2b:92:35:76:bd:db:e9:3c:56:21:e2:9b:82:f5:ec:6e:1c:
36:a5:3f:76:12:3e:ef:6a:ec:80:48:60:fc:09:75:7c:53:da:
f5:23:ef:6e:63:d0:ff:a6:8f:75:a0:5c:3e:48:6f:a0:c2:7d:
fe:92:83:3c:7b:b2:27:2c:95:0b:c7:5b:10:b7:fa:98:d5:e9:
c2:e3:ce:04:9a:1f:3a:4f:8a:5d:45:46:31:db:74:2c:15:4a:
0f:0f:b1:3c:02:42:5a:70:c2:84:ee:65:a8:64:39:bf:26:73:
1c:1b:4f:ec:c4:c0:ca:60:01:94:58:60:8e:ac:46:82:fe:17:
72:5f:58:a0:34:4d:69:76:2d:ad:8f:6c:81:22:30:ea:92:ac:
91:02:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:30 2025 by rpki-client