Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6OB9mvLFx0K6t7R0hMPwaEjPNMQ.roa
File: 6OB9mvLFx0K6t7R0hMPwaEjPNMQ.roa (raw, json)
Hash identifier: 8xuc6wPqG9JdgNC1g9eB5/3ReyyiL8kqqCRMOZiwgDc=
Subject key identifier: E8:E0:7D:9A:F2:C5:C7:42:BA:B7:B4:74:84:C3:F0:68:48:CF:34:C4
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01959AD64B34386229638108D35C3C844BA3
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6OB9mvLFx0K6t7R0hMPwaEjPNMQ.roa
Signing time: Sat 15 Mar 2025 17:24:49 +0000
ROA not before: Sat 15 Mar 2025 17:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0b:b480::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dd40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 15 Mar 2025 22:21:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:9a:d6:4b:34:38:62:29:63:81:08:d3:5c:3c:84:4b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Mar 15 17:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8e07d9af2c5c742bab7b47484c3f06848cf34c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:23:35:13:95:64:90:8e:7e:bb:fd:60:26:24:
06:78:56:5b:ad:c4:3f:84:3e:3f:b0:83:6a:d4:9a:
e3:0d:aa:1f:fb:dd:8a:90:a4:80:7e:f2:a2:ae:40:
67:43:c0:14:26:da:63:57:21:d1:54:cb:dd:57:4b:
eb:69:64:28:d6:4b:1e:ce:46:df:5c:42:21:e4:d2:
83:ac:59:0b:4c:f3:6c:fb:d2:64:08:6a:42:49:26:
5e:7a:1c:62:a6:f5:ce:04:2a:72:0f:59:f1:86:1d:
74:7b:ff:2e:70:8d:45:c3:e9:2e:61:7d:aa:3a:e5:
ea:d3:2b:b5:a0:dd:b1:9a:12:90:eb:31:a3:a9:be:
76:32:5f:16:09:0d:89:6b:ad:50:f8:ae:7f:90:7c:
fe:a2:e6:1f:04:a8:3c:cc:ce:c8:39:27:34:77:61:
70:83:09:ae:0c:aa:9f:90:0f:ee:ca:71:f3:c4:e7:
2b:05:f3:82:86:47:77:22:a6:f8:76:4c:c9:44:18:
80:4c:c0:23:9a:38:d0:73:58:52:06:54:99:6b:f1:
72:1c:27:f0:46:4a:4b:53:df:57:1a:81:68:db:3b:
dd:43:45:72:61:c9:53:14:30:f2:76:a4:88:3f:1d:
c5:61:c0:4b:b3:ef:63:84:2d:cd:b1:b8:44:3d:b3:
96:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:7D:9A:F2:C5:C7:42:BA:B7:B4:74:84:C3:F0:68:48:CF:34:C4
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/6OB9mvLFx0K6t7R0hMPwaEjPNMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b480::/29
2a13:d1c0::/29
2a13:dd40::/29
Signature Algorithm: sha256WithRSAEncryption
49:51:8c:bc:ad:c7:27:79:19:e1:8a:80:aa:8c:cf:fe:32:b8:
98:01:62:48:c3:ab:b0:a8:99:f9:33:87:a7:a3:23:15:04:01:
a9:90:6c:7e:e1:ba:52:f8:04:58:71:b1:63:36:26:3c:2b:41:
73:81:66:5e:9c:74:0a:85:e2:61:a1:97:56:8a:b7:f4:6a:f9:
22:d2:ea:5d:d2:75:2e:26:ef:f0:3b:69:d2:7e:22:11:54:85:
82:cd:b1:c5:e1:57:51:21:d9:38:2f:bc:ff:18:51:38:b2:d0:
2f:2e:28:cc:4a:91:fa:f0:f2:94:9d:fd:d4:13:96:74:59:b4:
b6:dc:de:c0:ad:dd:7a:48:ab:b6:56:6c:7a:03:17:c9:a2:50:
6d:84:03:9b:48:48:1e:3a:c5:c0:45:e9:46:b6:2a:0c:3c:e8:
ee:84:72:e5:1a:fa:a8:90:5c:22:0e:a2:ed:6e:25:97:32:9f:
15:cf:d4:50:f2:24:8a:25:a5:1d:0d:f3:26:5c:f6:9f:13:ae:
45:33:02:27:6c:52:4d:ae:81:ee:17:4c:b8:76:e2:d5:d7:17:
0e:18:b7:f8:a5:c6:b6:7b:04:c4:bd:46:9e:5a:b3:78:99:16:
ac:38:5c:4f:63:1b:8b:4f:3b:86:25:31:59:17:50:9a:65:f1:
2e:7d:29:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:58:12 2025 by rpki-client