Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/Bqs84u5jizMuIOFt27SJwmQnQd8.roa
File: Bqs84u5jizMuIOFt27SJwmQnQd8.roa (raw, json)
Hash identifier: UYlhD7Z4xc8kN5ds5pxJ2h+8aKqq4QDkrAgC6S43v7A=
Subject key identifier: 06:AB:3C:E2:EE:63:8B:33:2E:20:E1:6D:DB:B4:89:C2:64:27:41:DF
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 0192B113C9634A13284A07D07328C89EEAB3
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/Bqs84u5jizMuIOFt27SJwmQnQd8.roa
Signing time: Mon 21 Oct 2024 21:55:16 +0000
ROA not before: Mon 21 Oct 2024 21:55:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214030
IP address blocks: 2001:67c:f34::/48 maxlen: 48
2001:67c:f34:100::/56 maxlen: 56
2001:67c:f34:200::/56 maxlen: 56
2001:67c:f34:300::/56 maxlen: 56
2001:67c:f34:400::/56 maxlen: 56
2001:67c:f34:500::/56 maxlen: 56
Validation: Failed, certificate revoked on Thu 24 Oct 2024 14:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b1:13:c9:63:4a:13:28:4a:07:d0:73:28:c8:9e:ea:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Oct 21 21:55:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06ab3ce2ee638b332e20e16ddbb489c2642741df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:00:15:b2:7c:ef:3b:5c:b1:6c:db:2a:4f:
26:be:c8:55:8f:6e:1f:97:7e:36:1d:7f:5a:dd:2d:
5d:2d:0e:db:f2:80:ec:61:fa:b7:4a:95:71:00:87:
76:c7:77:ce:1a:98:08:37:cd:46:58:57:dd:60:d7:
c2:f0:8c:4b:b0:79:3f:36:35:e9:43:85:32:00:1f:
c1:ae:0b:7a:78:84:82:77:b1:d9:62:df:e8:3a:25:
79:72:05:7a:52:6e:6a:ca:31:c3:45:eb:5e:75:fd:
b3:8c:cb:df:40:7e:0a:9b:62:77:c3:95:4a:3d:42:
98:d3:09:2e:69:9c:8d:53:94:ef:9f:6b:63:22:30:
af:19:6a:9b:e3:c1:9b:1a:4f:ba:6b:11:e8:de:10:
9c:ba:12:6e:ea:56:60:88:24:4f:26:3d:84:87:ad:
bb:4d:bd:f8:d9:36:fb:34:85:dd:fd:7a:b3:05:a6:
30:9f:9f:a7:29:1b:eb:2f:06:f6:24:98:ca:1f:64:
0d:c7:08:bf:d5:bd:a9:a0:b7:d7:f8:31:ea:b1:cc:
f3:da:2c:4b:74:11:1b:bb:21:39:4f:96:bc:a1:ab:
dd:45:c1:dc:13:63:07:8a:0e:74:4e:06:a5:7e:e5:
3c:8c:ce:c4:fa:cb:13:1a:a2:76:7e:71:47:d0:69:
00:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AB:3C:E2:EE:63:8B:33:2E:20:E1:6D:DB:B4:89:C2:64:27:41:DF
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/Bqs84u5jizMuIOFt27SJwmQnQd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f34::/48
Signature Algorithm: sha256WithRSAEncryption
a4:5e:c8:b1:5c:4b:2f:fe:32:3c:ea:f0:c1:1a:11:42:f7:8c:
69:72:dd:d6:a1:08:0b:7d:fa:d5:27:6a:f0:80:6f:bd:ed:e3:
81:54:de:36:e1:92:fe:16:50:d7:3c:33:a0:b9:53:36:dc:5d:
05:45:b8:e2:0e:6f:54:cb:b3:84:16:77:49:7f:24:44:8b:cd:
62:52:1d:88:ae:9e:d2:2e:1d:71:94:a2:ee:3c:0d:dc:48:3b:
fa:b9:65:1a:ad:38:67:d9:3a:59:47:de:9d:47:35:dd:71:a2:
27:e4:c7:89:d3:5e:8b:c3:40:89:35:7a:b1:ad:d4:9f:91:49:
77:47:e8:45:04:15:96:0d:ef:b2:ae:9a:f1:f1:97:9b:90:94:
7d:8f:1a:21:7a:81:a0:7a:ca:4e:32:cd:02:d5:fc:6f:46:fd:
7d:d2:31:03:8b:ee:d2:53:c4:e5:db:7c:c1:6c:88:52:9c:44:
95:19:a0:02:4b:34:db:00:be:43:be:ff:8b:a6:d4:bb:20:83:
95:44:4a:c5:eb:d3:42:c8:c3:39:eb:a6:b9:83:d6:4d:bc:5e:
ea:cf:6c:46:c7:dd:01:31:9b:b4:5c:db:42:44:fa:63:62:01:
a6:3d:62:2d:54:e3:ef:88:55:29:ad:ab:48:d5:64:fd:e1:ef:
dd:14:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:14 2025 by rpki-client